Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/46PAqs6uQ9VF-4PqS0u2y_Z5ivY.roa
File: 46PAqs6uQ9VF-4PqS0u2y_Z5ivY.roa (raw, json)
Hash identifier: 0X53/MTsOt2Y2K/fxT6jRjPVQTm9JunpBecQfaMM4Bg=
Subject key identifier: E3:A3:C0:AA:CE:AE:43:D5:45:FB:83:EA:4B:4B:B6:CB:F6:79:8A:F6
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184C3EFCB0D5969848D0F5833D1C4EF13C7
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/46PAqs6uQ9VF-4PqS0u2y_Z5ivY.roa
Signing time: Tue 29 Nov 2022 15:09:42 +0000
ROA not before: Tue 29 Nov 2022 15:09:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31195
IP address blocks: 109.188.0.0/16 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
178.178.64.0/24 maxlen: 24
178.178.71.0/24 maxlen: 24
178.178.66.0/24 maxlen: 24
178.178.65.0/24 maxlen: 24
178.178.68.0/24 maxlen: 24
178.178.67.0/24 maxlen: 24
178.178.70.0/24 maxlen: 24
178.178.73.0/24 maxlen: 24
185.3.32.0/22 maxlen: 24
178.178.72.0/24 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
31.173.225.0/24 maxlen: 24
31.173.226.0/24 maxlen: 24
78.25.64.0/18 maxlen: 24
185.210.140.0/22 maxlen: 24
31.173.132.0/23 maxlen: 23
212.119.160.0/19 maxlen: 24
31.173.134.0/23 maxlen: 23
31.173.135.0/24 maxlen: 24
178.176.233.0/24 maxlen: 24
178.176.235.0/24 maxlen: 24
178.176.234.0/24 maxlen: 24
31.173.143.0/24 maxlen: 24
80.247.176.0/20 maxlen: 24
37.28.188.0/22 maxlen: 22
37.28.191.0/24 maxlen: 24
37.28.190.0/24 maxlen: 24
91.193.212.0/22 maxlen: 24
37.29.89.0/24 maxlen: 24
37.29.91.0/24 maxlen: 24
37.29.88.0/22 maxlen: 22
37.29.95.0/24 maxlen: 24
37.29.92.0/22 maxlen: 22
37.29.94.0/24 maxlen: 24
188.170.233.0/24 maxlen: 24
188.170.231.0/24 maxlen: 24
188.170.228.0/23 maxlen: 23
188.170.232.0/24 maxlen: 24
188.170.230.0/24 maxlen: 24
188.170.236.0/24 maxlen: 24
188.170.234.0/24 maxlen: 24
188.170.239.0/24 maxlen: 24
188.170.237.0/24 maxlen: 24
188.170.235.0/24 maxlen: 24
31.173.231.0/24 maxlen: 24
31.173.228.0/23 maxlen: 23
31.173.228.0/24 maxlen: 24
31.173.230.0/24 maxlen: 24
31.173.232.0/23 maxlen: 23
31.173.229.0/24 maxlen: 24
31.173.239.0/24 maxlen: 24
31.173.236.0/23 maxlen: 23
31.173.238.0/24 maxlen: 24
31.173.235.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
37.29.43.0/24 maxlen: 24
95.137.0.0/17 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 24
83.149.52.0/22 maxlen: 22
83.169.192.0/18 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c3:ef:cb:0d:59:69:84:8d:0f:58:33:d1:c4:ef:13:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Nov 29 15:09:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3a3c0aaceae43d545fb83ea4b4bb6cbf6798af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:10:ef:03:c8:7c:df:f3:c6:0e:aa:bb:27:85:
d5:1a:7e:97:4e:3f:41:f0:b6:61:99:dd:72:e4:eb:
aa:ed:f6:1e:5e:89:ce:92:1d:3a:cb:07:8f:be:0d:
b5:f3:10:89:42:bf:b8:11:c9:74:0d:84:d0:06:a1:
c3:e6:84:a0:1b:40:1f:97:f7:1d:22:27:77:65:20:
5f:ff:6a:d7:5c:e9:f8:73:34:82:2e:cb:33:92:95:
c7:a3:c3:82:51:85:bf:bb:a3:13:cf:50:85:30:d5:
23:ed:8c:eb:bb:d7:5e:99:53:a1:63:09:4f:33:7f:
19:51:31:ee:44:18:d1:11:89:4f:db:94:bd:a2:da:
37:a2:d0:45:17:c3:3e:47:71:68:45:b9:28:5f:30:
27:d4:ab:70:e4:4b:17:91:0b:68:0b:18:ea:ae:fa:
35:da:dd:21:80:22:bf:25:7c:3a:44:a2:06:47:ae:
fa:62:ff:a9:c5:1b:d1:71:1b:ca:fd:f7:70:36:6f:
c3:0b:f7:f1:36:d0:a0:ab:cc:ff:4d:51:1d:cd:2f:
36:bb:c8:54:e9:a1:77:f2:0e:1d:5c:39:bb:6d:da:
2f:74:eb:2c:33:d0:e9:03:f1:49:b8:63:76:b3:52:
75:c3:a2:c7:5b:38:fc:11:d4:4d:5e:36:ad:7f:45:
d1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A3:C0:AA:CE:AE:43:D5:45:FB:83:EA:4B:4B:B6:CB:F6:79:8A:F6
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/46PAqs6uQ9VF-4PqS0u2y_Z5ivY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.132.0/22
31.173.143.0/24
31.173.225.0-31.173.226.255
31.173.228.0-31.173.233.255
31.173.235.0-31.173.239.255
37.28.188.0/22
37.29.43.0/24
37.29.88.0/21
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.149.52.0/22
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.233.0-178.176.235.255
178.178.64.0-178.178.68.255
178.178.70.0-178.178.73.255
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.228.0-188.170.237.255
188.170.239.0/24
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
88:5d:0a:66:79:39:a8:5b:fa:a6:1b:03:08:80:cc:b6:f0:1a:
54:eb:2b:56:74:04:00:0f:86:a4:fa:a4:ec:70:93:47:42:26:
b0:d7:8c:89:13:1c:19:c4:dc:ec:36:f8:81:1a:d4:b6:ea:5e:
b3:5b:5d:09:4f:6f:ea:6c:ce:0b:32:2b:e0:ef:27:6b:ee:82:
ba:92:1a:e3:de:74:18:28:d2:cd:cf:43:15:79:2a:66:fb:48:
ef:5c:c4:0a:21:84:c4:dc:bf:e1:e3:df:cb:9a:8f:df:48:f8:
4f:f8:e0:67:2a:9b:47:6e:27:24:92:dc:d4:da:86:1e:33:5c:
0d:40:f5:1c:d9:fc:b6:6f:48:13:23:51:77:54:59:fd:6a:03:
3f:c2:46:db:93:37:cd:c3:fc:1c:ad:a0:b1:2e:3d:d8:95:5c:
5f:be:81:91:ca:fd:7f:54:2c:04:5d:fb:66:a3:a3:ae:d1:63:
26:8b:1a:65:35:f5:19:f7:9c:a5:e0:9d:55:2a:60:83:7b:cc:
0b:a1:f7:6f:b5:da:a0:3e:c4:97:73:68:67:3c:ca:db:a4:81:
c1:92:a8:5d:10:89:84:6a:68:32:ef:6e:22:af:2f:df:ae:7c:
8d:1d:da:9b:b4:ed:7d:b7:e0:6c:51:c9:fc:be:71:f8:92:fc:
7c:0b:f0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:44 2025 by rpki-client