Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1o8XMzw6yeacVSmLL-rtFDV13hI.roa
File: 1o8XMzw6yeacVSmLL-rtFDV13hI.roa (raw, json)
Hash identifier: LQfSxTRusfgHAhrndiJq951RkF4yddkpNGZAwaxaEEQ=
Subject key identifier: D6:8F:17:33:3C:3A:C9:E6:9C:55:29:8B:2F:EA:ED:14:35:75:DE:12
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F127221876EBE951F0FCAE240F60D279
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1o8XMzw6yeacVSmLL-rtFDV13hI.roa
Signing time: Thu 08 Dec 2022 09:53:04 +0000
ROA not before: Thu 08 Dec 2022 09:53:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31213
IP address blocks: 109.188.0.0/16 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/20 maxlen: 20
193.201.228.0/22 maxlen: 24
85.26.212.0/22 maxlen: 22
85.26.208.0/22 maxlen: 22
85.26.216.0/22 maxlen: 22
85.26.220.0/22 maxlen: 22
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
78.25.120.0/22 maxlen: 22
188.170.80.0/21 maxlen: 21
94.25.128.0/17 maxlen: 24
188.170.92.0/22 maxlen: 22
212.69.96.0/19 maxlen: 24
37.28.160.0/21 maxlen: 21
37.28.168.0/21 maxlen: 21
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
78.25.96.0/21 maxlen: 21
78.25.104.0/22 maxlen: 22
188.170.66.0/24 maxlen: 24
188.170.68.0/24 maxlen: 24
188.170.65.0/24 maxlen: 24
188.170.67.0/24 maxlen: 24
78.25.108.0/22 maxlen: 22
188.170.72.0/21 maxlen: 21
37.29.71.0/24 maxlen: 24
37.29.68.0/23 maxlen: 23
37.29.70.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
37.29.48.0/21 maxlen: 21
95.137.0.0/17 maxlen: 24
37.29.56.0/21 maxlen: 21
37.29.64.0/22 maxlen: 22
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
109.74.112.0/20 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
85.26.248.0/22 maxlen: 22
85.26.252.0/22 maxlen: 22
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.149.0.0/21 maxlen: 21
212.44.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:27:22:18:76:eb:e9:51:f0:fc:ae:24:0f:60:d2:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 09:53:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d68f17333c3ac9e69c55298b2feaed143575de12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ed:59:ff:b2:39:26:87:db:7d:c5:8c:e0:ed:
53:6b:1d:bc:18:2c:bf:67:3a:13:af:22:d9:07:10:
12:0a:dd:88:c7:f9:bf:3d:bc:85:e9:70:a5:1a:b7:
c7:0e:93:44:94:eb:d1:60:47:a2:51:4d:b4:8b:2f:
a8:34:c1:56:e4:4b:8e:78:b9:14:56:cc:e0:4d:af:
01:bb:fd:7d:18:c5:e0:38:cb:ee:1b:86:fd:45:61:
24:b7:19:84:a7:e8:30:07:0c:7a:d2:02:b9:74:ac:
91:36:7d:3b:6c:de:ac:89:05:d4:17:bd:71:c2:cb:
e5:62:03:07:d2:be:07:91:b9:44:73:6d:72:80:78:
d7:ea:b6:a1:7d:1e:dd:99:b4:e6:02:2d:19:0c:b1:
67:08:a7:f9:67:af:47:fd:63:ab:c6:bf:e0:1b:12:
45:26:6a:be:a4:ba:44:07:96:06:7c:39:26:3f:fa:
80:18:9d:f8:4b:7a:76:c9:46:78:6e:0c:cd:76:3f:
85:e8:6c:03:18:86:5f:c6:43:27:aa:ce:f9:b6:8a:
74:0a:89:8d:8d:b8:e8:9c:ff:54:8c:cc:f5:0b:c9:
5b:8f:34:4f:78:a3:41:24:8d:5b:21:d0:a9:18:03:
d6:5f:69:94:2c:a9:bf:21:39:70:88:7e:93:3d:f7:
82:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8F:17:33:3C:3A:C9:E6:9C:55:29:8B:2F:EA:ED:14:35:75:DE:12
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1o8XMzw6yeacVSmLL-rtFDV13hI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.28.160.0/20
37.29.48.0-37.29.71.255
78.25.96.0/20
78.25.120.0/22
83.149.0.0/21
85.26.128.0/20
85.26.208.0/20
85.26.248.0/21
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.65.0-188.170.68.255
188.170.72.0-188.170.87.255
188.170.92.0/22
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
8f:c8:a8:bc:e2:31:f5:37:f0:e3:94:31:c3:09:c7:78:18:f1:
ef:f5:c1:8a:cd:a1:95:dc:ac:32:37:a3:97:04:dc:49:07:b4:
ff:d2:6c:91:97:6f:7b:6a:02:fc:f5:c6:4d:39:90:9c:3b:e8:
51:09:4f:5d:f2:2a:f6:51:4b:ab:fa:dd:ea:f3:2a:f4:69:7d:
d7:41:51:5b:11:e7:02:c9:60:d7:a1:15:ef:56:00:d4:3a:0f:
af:17:69:e1:b7:ad:4e:f3:12:18:11:a5:e1:a9:a4:b1:01:6e:
a2:25:cc:36:22:f2:d5:11:c7:e2:69:83:aa:93:73:41:8a:72:
16:61:64:d5:87:08:28:25:02:5c:79:49:48:c5:cd:84:70:43:
d8:0e:39:63:75:65:30:5d:13:5a:61:7f:08:c4:f3:79:19:88:
f4:06:4a:5c:3e:69:88:fd:57:d0:74:08:73:43:bf:9b:be:d3:
c6:ac:6b:24:4b:38:83:cb:89:57:a4:0a:e8:7e:35:75:99:c3:
11:22:19:8c:67:91:31:2b:14:8d:f3:a3:55:2e:a7:df:80:05:
6e:33:6a:da:6f:f5:44:75:e1:89:eb:f1:7e:01:b5:a8:04:96:
28:34:c2:77:e2:49:c9:dd:5c:e4:5d:c0:41:69:ba:a6:94:9d:
31:28:e9:2f
-----BEGIN CERTIFICATE-----
MIIF6zCCBNOgAwIBAgISAYTxJyIYduvpUfD8riQPYNJ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMjA4MDk1MzA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjhmMTczMzNjM2FjOWU2OWM1NTI5OGIyZmVhZWQxNDM1NzVkZTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+1Z/7I5JofbfcWM4O1Tax28GCy/
ZzoTryLZBxASCt2Ix/m/PbyF6XClGrfHDpNElOvRYEeiUU20iy+oNMFW5EuOeLkU
VszgTa8Bu/19GMXgOMvuG4b9RWEktxmEp+gwBwx60gK5dKyRNn07bN6siQXUF71x
wsvlYgMH0r4HkblEc21ygHjX6rahfR7dmbTmAi0ZDLFnCKf5Z69H/WOrxr/gGxJF
Jmq+pLpEB5YGfDkmP/qAGJ34S3p2yUZ4bgzNdj+F6GwDGIZfxkMnqs75top0ComN
jbjonP9UjMz1C8lbjzRPeKNBJI1bIdCpGAPWX2mULKm/ITlwiH6TPfeCzQIDAQAB
o4IC9zCCAvMwHQYDVR0OBBYEFNaPFzM8OsnmnFUpiy/q7RQ1dd4SMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvMW84WE16dzZ5ZWFjVlNtTEwtcnRGRFYxM2hJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBCwYIKwYBBQUHAQcBAf8EgfswgfgwgfUEAgABMIHuAwQE
JRygMAwDBAQlHTADBAMlHUADBAROGWADBAJOGXgDBANTlQADBARVGoADBARVGtAD
BANVGvgDBAdeGYADBAdfiQADBARtSnADBAZtfEADAwBtvAMEBoDMQAMEA7IXkAME
ArkDIAMEArnSjAMEA7xeqAMDALyiMAwDBAC8qkEDBAC8qkQwDAMEA7yqSAMEA7yq
UAMEAryqXAMEAsHJ5AMEBcMFgAMEBcMQYAMEAcNOdAMEAMOVbwMEBcPmQAMEBdQO
oAMEBdQsQAMEBdRFYAMEBdR3oAMEBdWaoAMEBdWoIAMEBtXzQAMEBNlzUDANBgkq
hkiG9w0BAQsFAAOCAQEAj8iovOIx9Tfw45QxwwnHeBjx7/XBis2hldysMjejlwTc
SQe0/9JskZdve2oC/PXGTTmQnDvoUQlPXfIq9lFLq/rd6vMq9Gl910FRWxHnAslg
16EV71YA1DoPrxdp4betTvMSGBGl4amksQFuoiXMNiLy1RHH4mmDqpNzQYpyFmFk
1YcIKCUCXHlJSMXNhHBD2A45Y3VlMF0TWmF/CMTzeRmI9AZKXD5piP1X0HQIc0O/
m77TxqxrJEs4g8uJV6QK6H41dZnDESIZjGeRMSsUjfOjVS6n34AFbjNq2m/1RHXh
ievxfgG1qASWKDTCd+JJyd1c5F3AQWm6ppSdMSjpLw==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:38 2025 by rpki-client