Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/24BMmcsb207MXlwkl6rSrT5HZmU.roa
File: 24BMmcsb207MXlwkl6rSrT5HZmU.roa (raw, json)
Hash identifier: IGKZEKktMOssrzr2OV8i9zsOpggeu6el7oW+STOPiA4=
Subject key identifier: DB:80:4C:99:CB:1B:DB:4E:CC:5E:5C:24:97:AA:D2:AD:3E:47:66:65
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184193137A62D2CEEA720060477567A5D8C
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/24BMmcsb207MXlwkl6rSrT5HZmU.roa
Signing time: Thu 27 Oct 2022 11:26:06 +0000
ROA not before: Thu 27 Oct 2022 11:26:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31133
IP address blocks: 109.188.0.0/16 maxlen: 24
85.26.128.0/17 maxlen: 24
193.201.228.0/22 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
31.173.174.0/24 maxlen: 24
31.173.178.0/24 maxlen: 24
31.173.177.0/24 maxlen: 24
31.173.175.0/24 maxlen: 24
31.173.181.0/24 maxlen: 24
31.173.186.0/24 maxlen: 24
31.173.182.0/24 maxlen: 24
31.173.185.0/24 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
31.173.180.0/24 maxlen: 24
31.173.184.0/24 maxlen: 24
31.173.183.0/24 maxlen: 24
31.173.190.0/24 maxlen: 24
31.173.189.0/24 maxlen: 24
31.173.188.0/24 maxlen: 24
31.173.187.0/24 maxlen: 24
31.173.191.0/24 maxlen: 24
31.173.224.0/24 maxlen: 24
78.25.64.0/18 maxlen: 24
31.173.130.0/23 maxlen: 23
31.173.129.0/24 maxlen: 24
31.173.128.0/24 maxlen: 24
31.173.138.0/24 maxlen: 24
31.173.137.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
31.173.136.0/24 maxlen: 24
31.173.139.0/24 maxlen: 24
31.173.142.0/24 maxlen: 24
31.173.141.0/24 maxlen: 24
31.173.140.0/24 maxlen: 24
31.173.150.0/24 maxlen: 24
80.247.176.0/20 maxlen: 24
31.173.149.0/24 maxlen: 24
31.173.152.0/24 maxlen: 24
31.173.148.0/24 maxlen: 24
31.173.147.0/24 maxlen: 24
31.173.151.0/24 maxlen: 24
31.173.154.0/24 maxlen: 24
31.173.158.0/24 maxlen: 24
31.173.153.0/24 maxlen: 24
91.193.212.0/22 maxlen: 24
31.173.157.0/24 maxlen: 24
31.173.156.0/24 maxlen: 24
31.173.159.0/24 maxlen: 24
31.173.155.0/24 maxlen: 24
31.173.166.0/24 maxlen: 24
31.173.165.0/24 maxlen: 24
31.173.164.0/24 maxlen: 24
31.173.160.0/22 maxlen: 22
31.173.170.0/24 maxlen: 24
31.173.169.0/24 maxlen: 24
31.173.168.0/24 maxlen: 24
31.173.167.0/24 maxlen: 24
31.173.171.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
31.173.234.0/24 maxlen: 24
77.233.160.0/19 maxlen: 24
31.173.0.0/16 maxlen: 16
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
46.232.200.0/21 maxlen: 24
62.64.0.0/19 maxlen: 24
79.171.208.0/24 maxlen: 24
212.44.64.0/19 maxlen: 24
46.29.192.0/21 maxlen: 24
195.16.96.0/19 maxlen: 24
79.171.8.0/21 maxlen: 24
178.178.111.0/24 maxlen: 24
178.178.110.0/24 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
185.3.32.0/22 maxlen: 24
84.204.0.0/16 maxlen: 16
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
37.29.0.0/17 maxlen: 24
37.28.160.0/19 maxlen: 24
185.210.140.0/22 maxlen: 24
128.204.64.0/18 maxlen: 24
62.89.194.0/24 maxlen: 24
95.137.0.0/17 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
83.149.17.0/24 maxlen: 24
83.149.16.0/22 maxlen: 22
83.149.16.0/24 maxlen: 24
83.149.21.0/24 maxlen: 24
83.149.18.0/24 maxlen: 24
83.149.22.0/23 maxlen: 23
83.149.19.0/24 maxlen: 24
83.149.20.0/22 maxlen: 22
83.149.20.0/24 maxlen: 24
78.41.100.0/22 maxlen: 24
83.149.54.0/24 maxlen: 24
83.149.53.0/24 maxlen: 24
83.169.192.0/18 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 24
188.162.0.0/16 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
46.229.128.0/20 maxlen: 24
83.229.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:19:31:37:a6:2d:2c:ee:a7:20:06:04:77:56:7a:5d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 27 11:26:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db804c99cb1bdb4ecc5e5c2497aad2ad3e476665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ab:16:69:cf:83:c1:31:0e:62:ab:f6:82:18:
ae:bc:aa:63:57:d3:7c:fa:8b:d4:1c:fd:c8:03:7c:
4b:4c:6e:f8:3d:92:d8:52:99:fe:9d:d8:9d:54:c0:
31:f8:4b:61:9e:ca:e9:53:15:c2:63:ee:c2:0b:81:
e2:73:18:83:50:fb:71:d0:57:57:6f:a5:27:eb:ba:
95:a5:f2:67:39:17:60:55:cb:6c:92:c1:ce:78:2a:
ab:33:aa:ff:dd:4f:39:f9:b9:a5:a0:a4:f8:44:25:
e2:12:07:7d:c7:79:f1:ab:f8:d1:2c:45:e9:16:d1:
16:7b:54:c0:3f:8b:0f:29:35:5b:96:2d:69:04:3e:
c4:f1:1e:88:a6:bc:80:d7:e9:20:47:d5:db:39:ca:
35:9d:46:b7:b6:4b:c3:a3:43:23:77:b2:ec:96:2b:
12:66:e3:73:be:3a:76:c2:7e:38:13:cc:6a:14:e2:
03:80:eb:1f:e9:c0:68:94:23:39:ac:0d:2f:88:93:
ff:23:4f:34:f5:46:3a:d4:22:83:be:f9:7e:b7:18:
3a:35:be:81:ab:e5:44:e8:b0:f9:81:9d:8b:32:6c:
5f:0e:d4:5c:71:10:25:70:7c:a7:ff:7e:92:21:01:
8b:0a:6d:81:33:de:66:3c:5e:6c:26:1c:4d:e0:fa:
28:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:80:4C:99:CB:1B:DB:4E:CC:5E:5C:24:97:AA:D2:AD:3E:47:66:65
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/24BMmcsb207MXlwkl6rSrT5HZmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.0.0/16
37.28.160.0/19
37.29.0.0/17
46.29.192.0/21
46.229.128.0/20
46.232.200.0/21
62.64.0.0/19
62.89.194.0/24
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
79.171.208.0/24
80.247.176.0/20
81.24.128.0/20
83.149.16.0/21
83.149.53.0-83.149.54.255
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
84.204.0.0/16
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.178.110.0/23
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
44:72:b7:a3:0e:19:b4:89:4d:be:fd:e2:b1:c6:a7:61:41:21:
3b:f3:6e:73:15:14:b8:55:0b:e5:b5:76:fe:fb:6e:66:6d:35:
ff:e3:45:9b:8e:a4:2e:9c:83:e7:cb:9f:f3:8c:fa:67:95:62:
e8:62:ad:23:3b:75:e7:06:ca:51:95:c9:ef:fb:af:8c:9b:3d:
c3:f4:c8:9e:7f:bb:f4:2a:47:cd:e5:e0:ac:b6:46:d7:7b:7f:
6b:09:bd:1b:67:1f:69:84:1f:f3:8b:4e:04:97:65:c4:e5:50:
b0:2a:bb:d6:93:f7:e8:b9:40:37:33:cb:d0:66:4f:4f:92:6b:
b8:84:54:85:39:c8:77:f4:a1:09:40:4d:ef:69:df:c9:35:b2:
b0:c6:e5:c6:24:e1:97:de:5f:8f:1b:59:79:ce:ca:db:69:1d:
e4:e7:65:7c:1b:49:42:40:c4:b8:d1:e1:6c:60:0a:17:7c:08:
10:e6:ac:6e:82:21:87:b7:f5:60:0f:58:83:74:91:80:87:4b:
0e:70:83:85:a0:1b:82:14:48:48:5f:15:2c:6c:08:8d:1e:da:
ff:00:89:d8:11:ad:a8:0c:40:55:1c:13:5a:68:0b:b8:61:e1:
fd:28:e6:47:f5:5b:bc:63:b7:fe:9d:81:8e:28:7a:83:46:82:
c0:2c:1a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:33 2024 by rpki-client on console-ams.rpki-client.org