Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/4jMub771nD9TGuBVHUNC0SQaKhI.roa
File: 4jMub771nD9TGuBVHUNC0SQaKhI.roa (raw, json)
Hash identifier: hHWXVxr6RdabODE46b3K24v7ODrDavLK5btgMLobgeE=
Subject key identifier: E2:33:2E:6F:BE:F5:9C:3F:53:1A:E0:55:1D:43:42:D1:24:1A:2A:12
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F176C0F37DBFC1AAC4B0EF4B25ECCDCE
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/4jMub771nD9TGuBVHUNC0SQaKhI.roa
Signing time: Thu 08 Dec 2022 11:20:02 +0000
ROA not before: Thu 08 Dec 2022 11:20:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31208
IP address blocks: 109.188.0.0/16 maxlen: 24
195.16.96.0/19 maxlen: 24
178.178.84.0/22 maxlen: 22
178.178.82.0/24 maxlen: 24
178.178.80.0/23 maxlen: 23
193.201.228.0/22 maxlen: 24
178.178.131.0/24 maxlen: 24
178.178.130.0/24 maxlen: 24
178.23.144.0/21 maxlen: 24
178.178.129.0/24 maxlen: 24
178.178.132.0/24 maxlen: 24
178.178.128.0/24 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
212.69.96.0/19 maxlen: 24
185.210.140.0/22 maxlen: 24
178.176.230.0/23 maxlen: 23
212.119.160.0/19 maxlen: 24
37.28.186.0/24 maxlen: 24
188.170.50.0/24 maxlen: 24
37.28.184.0/24 maxlen: 24
188.170.48.0/24 maxlen: 24
37.28.185.0/24 maxlen: 24
188.170.49.0/24 maxlen: 24
188.170.54.0/24 maxlen: 24
188.170.55.0/24 maxlen: 24
37.28.187.0/24 maxlen: 24
188.170.56.0/24 maxlen: 24
188.170.52.0/24 maxlen: 24
188.170.57.0/24 maxlen: 24
188.170.53.0/24 maxlen: 24
188.170.62.0/24 maxlen: 24
188.170.63.0/24 maxlen: 24
188.170.59.0/24 maxlen: 24
188.170.60.0/24 maxlen: 24
188.170.61.0/24 maxlen: 24
37.29.75.0/24 maxlen: 24
37.29.74.0/24 maxlen: 24
37.29.73.0/24 maxlen: 24
37.29.72.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
178.176.58.0/24 maxlen: 24
178.176.56.0/24 maxlen: 24
178.176.57.0/24 maxlen: 24
178.176.62.0/24 maxlen: 24
178.176.63.0/24 maxlen: 24
178.176.59.0/24 maxlen: 24
178.176.60.0/24 maxlen: 24
178.176.61.0/24 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
83.149.41.0/24 maxlen: 24
83.149.44.0/23 maxlen: 23
83.149.40.0/24 maxlen: 24
83.149.42.0/23 maxlen: 23
195.78.116.0/23 maxlen: 24
83.149.46.0/23 maxlen: 23
83.169.212.0/24 maxlen: 24
83.169.208.0/24 maxlen: 24
83.169.213.0/24 maxlen: 24
83.169.209.0/24 maxlen: 24
83.169.210.0/24 maxlen: 24
83.169.211.0/24 maxlen: 24
83.169.214.0/24 maxlen: 24
83.169.215.0/24 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
178.178.135.0/24 maxlen: 24
178.178.134.0/24 maxlen: 24
178.178.137.0/24 maxlen: 24
178.178.133.0/24 maxlen: 24
178.178.136.0/24 maxlen: 24
178.178.143.0/24 maxlen: 24
178.178.142.0/24 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
46.229.136.0/22 maxlen: 22
46.229.141.0/24 maxlen: 24
46.229.140.0/24 maxlen: 24
46.229.143.0/24 maxlen: 24
46.229.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:76:c0:f3:7d:bf:c1:aa:c4:b0:ef:4b:25:ec:cd:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 11:20:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2332e6fbef59c3f531ae0551d4342d1241a2a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e6:93:05:67:a5:bb:76:63:90:f3:ad:23:17:
46:3f:d7:fe:dc:75:ba:52:14:d7:85:6a:eb:7e:39:
97:a2:3c:e6:d4:58:68:ae:50:5a:bf:ff:aa:92:fb:
e0:58:a5:f6:75:90:de:a5:ef:e2:21:ca:f5:fe:8a:
fb:5b:47:98:10:8c:0d:46:19:ba:a1:54:9a:28:ec:
30:b6:1b:6b:17:3f:f7:0c:ea:25:73:71:68:ff:ae:
d5:e1:7a:3d:fb:27:33:92:b8:b4:a1:39:8c:f4:4d:
90:33:3d:e1:a2:44:56:9e:0c:6f:07:5d:34:6f:5b:
22:94:bd:9d:78:2f:0b:6b:07:01:f8:8d:71:32:d3:
11:ec:d6:52:d0:4c:ba:b4:64:be:a8:ee:7e:b2:2f:
5b:f7:9b:1f:ac:4a:5b:61:ec:72:d2:32:6a:ee:1d:
a3:b8:5d:4f:84:ea:5e:9e:7d:e0:6e:82:0b:2a:8d:
a0:c7:2f:dc:87:8f:de:ee:1e:7d:50:17:31:ff:07:
94:cb:b2:4e:78:e7:1a:a1:93:32:1b:19:b2:43:bb:
79:a5:69:7f:33:50:3e:e5:49:91:4c:cd:55:9e:3b:
37:84:a0:22:a8:91:5d:d0:50:51:12:60:ed:78:6f:
15:fe:b4:dc:fb:1c:57:dc:58:f1:d7:49:36:c1:29:
65:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:33:2E:6F:BE:F5:9C:3F:53:1A:E0:55:1D:43:42:D1:24:1A:2A:12
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/4jMub771nD9TGuBVHUNC0SQaKhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.28.184.0/22
37.29.72.0/22
46.229.136.0/21
83.149.40.0/21
83.169.208.0/21
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.56.0/21
178.176.230.0/23
178.178.80.0-178.178.82.255
178.178.84.0/22
178.178.128.0-178.178.137.255
178.178.142.0/23
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.48.0-188.170.50.255
188.170.52.0-188.170.57.255
188.170.59.0-188.170.63.255
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
64:a8:27:5d:37:93:72:52:45:2e:c9:83:2f:47:de:be:72:34:
fa:bd:3f:01:07:88:7e:74:52:0f:fa:a6:ba:c9:18:9d:1e:ea:
1f:39:6c:77:2f:3b:72:80:7e:3d:b7:29:d6:53:bb:23:94:cb:
c8:5a:f5:a9:9d:72:05:dd:66:f9:13:5c:76:00:ab:42:2a:e0:
fc:37:85:95:86:bb:40:a6:11:b7:31:b7:03:66:9d:f4:73:19:
8c:43:1f:7b:fc:a5:ca:27:02:b0:42:38:e2:a6:16:54:ca:6f:
79:51:66:48:33:88:a1:7b:8a:15:cb:b6:31:8c:d5:e4:86:97:
18:87:68:f5:3f:b1:15:45:cb:58:df:e8:a4:8a:7e:d2:32:72:
93:ad:39:b1:ed:56:aa:e1:3b:58:16:91:10:65:94:56:97:f9:
34:b3:29:66:70:4d:af:77:40:40:36:e9:b3:0f:4b:57:81:af:
06:c1:29:f2:04:1c:ea:e3:3c:ca:c8:71:72:43:e5:cf:bb:3f:
b9:46:11:fa:05:1e:b5:74:58:22:c7:76:a0:65:49:e4:dd:ee:
16:dc:a9:62:38:dd:da:23:1e:44:14:81:1b:ab:d4:89:c3:d1:
1f:99:24:a8:12:36:a7:db:4f:5b:51:6a:72:21:22:07:7d:49:
98:da:e8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:57 2025 by rpki-client