Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/5L7VyLNu1IHgz30txEVxDIZlv20.roa
File: 5L7VyLNu1IHgz30txEVxDIZlv20.roa (raw, json)
Hash identifier: uWO+mpWIkTf644QI2FutAzuPLgo+aRBlSJ1lMRY1vaY=
Subject key identifier: E4:BE:D5:C8:B3:6E:D4:81:E0:CF:7D:2D:C4:45:71:0C:86:65:BF:6D
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0185053F72541F4E23A55200A36578F3F701
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/5L7VyLNu1IHgz30txEVxDIZlv20.roa
Signing time: Mon 12 Dec 2022 07:32:02 +0000
ROA not before: Mon 12 Dec 2022 07:32:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29648
IP address blocks: 193.201.228.0/22 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
31.173.119.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
77.233.160.0/19 maxlen: 19
77.233.161.0/24 maxlen: 24
77.233.164.0/24 maxlen: 24
77.233.160.0/24 maxlen: 24
77.233.162.0/24 maxlen: 24
77.233.166.0/24 maxlen: 24
77.233.167.0/24 maxlen: 24
77.233.170.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
31.173.104.0/24 maxlen: 24
31.173.105.0/24 maxlen: 24
31.173.112.0/24 maxlen: 24
31.173.108.0/24 maxlen: 24
31.173.109.0/24 maxlen: 24
31.173.110.0/24 maxlen: 24
31.173.106.0/24 maxlen: 24
31.173.111.0/24 maxlen: 24
31.173.107.0/24 maxlen: 24
31.173.116.0/24 maxlen: 24
31.173.113.0/24 maxlen: 24
31.173.117.0/24 maxlen: 24
31.173.114.0/24 maxlen: 24
31.173.118.0/24 maxlen: 24
31.173.115.0/24 maxlen: 24
77.233.173.0/24 maxlen: 24
77.233.178.0/24 maxlen: 24
77.233.185.0/24 maxlen: 24
77.233.181.0/24 maxlen: 24
77.233.180.0/24 maxlen: 24
77.233.186.0/24 maxlen: 24
77.233.182.0/24 maxlen: 24
77.233.188.0/24 maxlen: 24
77.233.191.0/24 maxlen: 24
77.233.190.0/24 maxlen: 24
212.44.64.0/19 maxlen: 24
195.16.96.0/19 maxlen: 24
188.170.98.0/24 maxlen: 24
86.109.192.0/19 maxlen: 19
86.109.192.0/20 maxlen: 20
188.170.96.0/24 maxlen: 24
188.170.97.0/24 maxlen: 24
188.170.102.0/24 maxlen: 24
86.109.193.0/24 maxlen: 24
188.170.103.0/24 maxlen: 24
188.170.99.0/24 maxlen: 24
188.170.100.0/24 maxlen: 24
188.170.104.0/24 maxlen: 24
86.109.195.0/24 maxlen: 24
188.170.101.0/24 maxlen: 24
188.170.105.0/24 maxlen: 24
188.170.110.0/24 maxlen: 24
188.170.106.0/24 maxlen: 24
188.170.111.0/24 maxlen: 24
188.170.107.0/24 maxlen: 24
86.109.200.0/23 maxlen: 23
188.170.108.0/24 maxlen: 24
212.69.96.0/19 maxlen: 24
188.170.109.0/24 maxlen: 24
188.170.112.0/24 maxlen: 24
188.170.114.0/24 maxlen: 24
86.109.213.0/24 maxlen: 24
188.170.115.0/24 maxlen: 24
188.170.116.0/24 maxlen: 24
86.109.212.0/24 maxlen: 24
86.109.208.0/24 maxlen: 24
188.170.118.0/24 maxlen: 24
188.170.117.0/24 maxlen: 24
188.170.113.0/24 maxlen: 24
86.109.210.0/24 maxlen: 24
188.170.119.0/24 maxlen: 24
188.170.123.0/24 maxlen: 24
86.109.216.0/24 maxlen: 24
188.170.122.0/24 maxlen: 24
86.109.215.0/24 maxlen: 24
86.109.218.0/23 maxlen: 23
188.170.125.0/24 maxlen: 24
188.170.121.0/24 maxlen: 24
188.170.120.0/24 maxlen: 24
86.109.214.0/24 maxlen: 24
188.170.124.0/24 maxlen: 24
188.170.127.0/24 maxlen: 24
86.109.220.0/24 maxlen: 24
188.170.126.0/24 maxlen: 24
86.109.223.0/24 maxlen: 24
86.109.222.0/24 maxlen: 24
78.109.120.0/24 maxlen: 24
78.109.121.0/24 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
178.176.98.0/24 maxlen: 24
195.149.111.0/24 maxlen: 24
178.176.96.0/24 maxlen: 24
178.176.97.0/24 maxlen: 24
178.176.102.0/24 maxlen: 24
178.176.103.0/24 maxlen: 24
178.176.99.0/24 maxlen: 24
178.176.100.0/24 maxlen: 24
178.176.101.0/24 maxlen: 24
178.176.118.0/24 maxlen: 24
178.176.114.0/24 maxlen: 24
178.176.115.0/24 maxlen: 24
178.176.116.0/24 maxlen: 24
178.176.117.0/24 maxlen: 24
178.176.122.0/24 maxlen: 24
178.176.123.0/24 maxlen: 24
178.176.119.0/24 maxlen: 24
178.176.124.0/24 maxlen: 24
178.176.120.0/24 maxlen: 24
178.176.125.0/24 maxlen: 24
178.176.121.0/24 maxlen: 24
178.176.126.0/24 maxlen: 24
178.176.127.0/24 maxlen: 24
83.169.217.0/24 maxlen: 24
83.169.218.0/24 maxlen: 24
83.169.219.0/24 maxlen: 24
83.169.220.0/24 maxlen: 24
83.169.221.0/24 maxlen: 24
83.169.222.0/24 maxlen: 24
83.169.223.0/24 maxlen: 24
188.94.168.0/24 maxlen: 24
188.94.172.0/24 maxlen: 24
188.94.169.0/24 maxlen: 24
188.94.170.0/24 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.171.0/24 maxlen: 24
188.94.173.0/24 maxlen: 24
188.94.174.0/24 maxlen: 24
188.94.175.0/24 maxlen: 24
217.115.80.0/20 maxlen: 20
217.115.81.0/24 maxlen: 24
217.115.80.0/24 maxlen: 24
217.115.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:3f:72:54:1f:4e:23:a5:52:00:a3:65:78:f3:f7:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 07:32:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4bed5c8b36ed481e0cf7d2dc445710c8665bf6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:32:9f:a6:fc:e1:0f:0d:0c:ac:31:8d:01:dc:
07:84:f8:34:b3:e9:9d:72:34:55:aa:af:f3:9d:22:
d8:f5:25:0c:ce:dc:92:32:b8:bd:04:d2:e0:fd:47:
f9:0e:8a:a7:6d:4d:0a:68:11:a5:f7:90:b9:e2:15:
2b:bf:63:ef:e9:ab:31:78:b2:7d:9c:c3:16:d9:5d:
2d:d8:7c:97:6c:0a:29:f1:a2:3f:e0:c6:28:2b:67:
85:e4:b0:a7:a5:12:36:eb:ed:d5:0a:7b:46:eb:1f:
3d:cc:d7:f5:93:c5:a8:b7:91:32:64:8c:d7:56:14:
6e:52:95:ba:06:48:a6:c6:2f:11:b5:cd:ce:71:5c:
62:52:0f:e4:73:44:6b:e3:d9:e5:7d:02:ca:7b:bd:
43:18:32:20:fe:78:8b:0d:76:f4:c7:0e:f1:87:1c:
f2:00:07:dc:3c:70:eb:8a:04:b1:d6:c1:73:a2:6b:
1d:f9:fd:44:9a:bb:34:13:1c:48:d4:83:84:43:2f:
31:98:6a:4f:16:28:70:6c:c8:99:f2:d8:cc:2d:53:
0c:36:8f:fb:73:c8:5a:0b:72:07:4a:c5:49:bf:de:
30:08:3b:4e:2b:f0:ac:21:b0:c6:58:1b:e6:74:1e:
c3:0d:7f:c4:47:25:d7:71:a1:b0:11:34:7d:d9:67:
10:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BE:D5:C8:B3:6E:D4:81:E0:CF:7D:2D:C4:45:71:0C:86:65:BF:6D
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/5L7VyLNu1IHgz30txEVxDIZlv20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.104.0-31.173.119.255
77.233.160.0/19
78.109.120.0/23
83.169.217.0-83.169.223.255
86.109.192.0/19
178.176.96.0/21
178.176.114.0-178.176.127.255
188.94.168.0/21
188.162.0.0/16
188.170.96.0/19
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
5a:8b:f4:7c:c5:6d:9b:b2:df:90:96:a0:87:d3:60:3b:40:84:
8b:1e:70:08:c2:73:2e:67:71:12:cd:1e:de:7c:1b:e5:90:db:
38:6b:f7:84:c5:55:f2:9b:a0:fa:a4:1f:41:d7:c7:19:8e:24:
a8:c8:9a:ad:c6:cd:1e:f0:e8:c3:2c:dd:e0:5e:fc:3b:c6:6a:
a0:14:41:b8:3b:5e:d0:ff:e7:74:5d:9a:a8:03:17:b9:9a:a3:
48:9e:a9:fa:c8:4c:f6:b1:fb:2f:e4:64:c1:f8:dd:87:4a:87:
b3:63:e2:f2:ac:a2:88:82:01:40:eb:1d:29:a8:a7:4a:d4:94:
fc:df:02:2c:86:36:bc:65:84:5c:5e:57:8f:fe:f9:59:7a:82:
2c:a9:d0:cc:9a:6d:d8:20:fc:5f:09:81:63:9c:86:5f:0e:03:
cc:60:f7:9f:1c:e0:11:f0:84:b0:3f:93:ca:83:39:de:52:d5:
74:50:50:3b:d1:ea:7a:97:49:c5:4d:a1:30:2a:b7:e8:c6:e6:
3e:76:bc:64:e2:f9:b2:84:64:f9:f5:24:d8:56:98:d6:97:32:
20:44:b8:23:0d:4c:75:5e:86:d7:94:a2:83:11:d5:c5:fb:f8:
ed:9c:9f:d0:ae:4c:b6:78:b6:d8:8b:11:11:aa:aa:32:f9:2d:
6a:32:b5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:33:47 2025 by rpki-client