Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/5RgRMk6zhsfF97IBJDjJ84KhtYg.roa
File: 5RgRMk6zhsfF97IBJDjJ84KhtYg.roa (raw, json)
Hash identifier: rtWG8hOIQRStodeAp6QZEBsfATSgANO4eRVtX6AAH80=
Subject key identifier: E5:18:11:32:4E:B3:86:C7:C5:F7:B2:01:24:38:C9:F3:82:A1:B5:88
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018953444AA5F8FB4D01055B47F3606640FF
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/5RgRMk6zhsfF97IBJDjJ84KhtYg.roa
Signing time: Fri 14 Jul 2023 07:18:51 +0000
ROA not before: Fri 14 Jul 2023 07:18:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31195
IP address blocks: 85.26.240.0/22 maxlen: 22
178.178.64.0/24 maxlen: 24
178.178.71.0/24 maxlen: 24
178.178.66.0/24 maxlen: 24
178.178.65.0/24 maxlen: 24
178.178.68.0/24 maxlen: 24
178.178.67.0/24 maxlen: 24
178.178.70.0/24 maxlen: 24
178.178.74.0/24 maxlen: 24
178.178.73.0/24 maxlen: 24
178.178.75.0/24 maxlen: 24
178.178.72.0/24 maxlen: 24
78.25.124.0/22 maxlen: 22
78.25.127.0/24 maxlen: 24
31.173.225.0/24 maxlen: 24
31.173.226.0/24 maxlen: 24
31.173.132.0/23 maxlen: 23
31.173.134.0/23 maxlen: 23
31.173.135.0/24 maxlen: 24
178.176.233.0/24 maxlen: 24
178.176.235.0/24 maxlen: 24
178.176.234.0/24 maxlen: 24
31.173.143.0/24 maxlen: 24
37.28.188.0/22 maxlen: 22
37.28.191.0/24 maxlen: 24
37.28.190.0/24 maxlen: 24
37.29.89.0/24 maxlen: 24
37.29.91.0/24 maxlen: 24
37.29.88.0/22 maxlen: 22
37.29.95.0/24 maxlen: 24
37.29.92.0/22 maxlen: 22
37.29.94.0/24 maxlen: 24
188.170.233.0/24 maxlen: 24
188.170.231.0/24 maxlen: 24
188.170.228.0/23 maxlen: 23
188.170.232.0/24 maxlen: 24
188.170.230.0/24 maxlen: 24
188.170.236.0/24 maxlen: 24
188.170.234.0/24 maxlen: 24
188.170.239.0/24 maxlen: 24
188.170.237.0/24 maxlen: 24
188.170.235.0/24 maxlen: 24
31.173.231.0/24 maxlen: 24
31.173.228.0/23 maxlen: 23
31.173.228.0/24 maxlen: 24
31.173.230.0/24 maxlen: 24
31.173.232.0/23 maxlen: 23
31.173.229.0/24 maxlen: 24
31.173.239.0/24 maxlen: 24
31.173.236.0/23 maxlen: 23
31.173.238.0/24 maxlen: 24
31.173.235.0/24 maxlen: 24
37.29.43.0/24 maxlen: 24
83.149.52.0/22 maxlen: 22
83.169.228.0/23 maxlen: 23
83.169.230.0/24 maxlen: 24
83.169.227.0/24 maxlen: 24
83.169.226.0/24 maxlen: 24
83.169.224.0/23 maxlen: 23
85.26.244.0/22 maxlen: 22
85.26.247.0/24 maxlen: 24
2a03:d006:400::/40 maxlen: 40
2a03:d006:500::/40 maxlen: 40
2a03:d006:200::/40 maxlen: 40
2a03:d006:300::/40 maxlen: 40
2a03:d006::/40 maxlen: 40
2a03:d006:100::/40 maxlen: 40
2a03:d006:600::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:53:44:4a:a5:f8:fb:4d:01:05:5b:47:f3:60:66:40:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jul 14 07:18:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e51811324eb386c7c5f7b2012438c9f382a1b588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1e:51:19:9f:fa:23:06:61:e4:57:4f:20:e3:
0b:9b:4d:a6:2b:e6:27:66:f4:e7:7c:d9:98:77:ce:
c5:37:f6:8b:19:18:0b:c3:08:cb:84:13:06:76:19:
d6:94:e2:39:79:9f:da:28:06:9b:3d:53:92:85:2e:
f0:d3:4f:3b:d2:f7:4a:b8:47:80:84:b5:af:a2:51:
bd:87:3a:e4:f5:13:55:13:4b:1b:61:d2:40:eb:3e:
e6:e8:7c:79:32:7c:4a:de:b4:e3:7c:b6:3f:d4:e4:
08:06:ab:32:e9:58:04:61:aa:5f:76:20:78:59:5f:
ac:1c:d5:67:4a:66:72:95:46:e1:d3:f0:cf:c5:5e:
9a:51:c4:57:ea:22:d5:d6:1f:86:39:d4:56:e1:7e:
0a:9b:b1:16:6c:16:e0:2f:1a:4f:67:50:f2:63:94:
dc:86:47:2c:f8:bd:55:fa:94:b4:07:03:09:3e:bf:
a6:a7:ef:63:b5:cb:e3:0c:fe:b8:6e:e0:49:f0:e2:
7b:7a:5d:4e:38:c7:df:43:28:cb:5d:d5:f9:3d:e8:
cb:e3:48:d4:35:9c:a1:98:67:ea:36:f0:b8:6b:f5:
72:bf:65:a0:bf:3b:b7:0e:54:bd:29:e8:f3:29:14:
77:28:ee:3e:fa:0c:71:c8:cf:fe:40:26:22:c0:6a:
9a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:18:11:32:4E:B3:86:C7:C5:F7:B2:01:24:38:C9:F3:82:A1:B5:88
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/5RgRMk6zhsfF97IBJDjJ84KhtYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.132.0/22
31.173.143.0/24
31.173.225.0-31.173.226.255
31.173.228.0-31.173.233.255
31.173.235.0-31.173.239.255
37.28.188.0/22
37.29.43.0/24
37.29.88.0/21
78.25.124.0/22
83.149.52.0/22
83.169.224.0-83.169.230.255
85.26.240.0/21
178.176.233.0-178.176.235.255
178.178.64.0-178.178.68.255
178.178.70.0-178.178.75.255
188.170.228.0-188.170.237.255
188.170.239.0/24
IPv6:
2a03:d006::-2a03:d006:6ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
17:2b:51:c7:89:a9:83:3f:a7:64:4f:f1:09:c6:12:66:21:79:
e8:eb:2a:35:25:a6:9f:d5:d8:c5:34:7e:36:34:26:50:a4:c7:
a6:93:a0:0e:bc:f6:2b:69:98:63:b9:85:9c:64:25:9a:e2:c6:
53:3b:9e:a0:6e:c1:1b:58:18:cb:b0:4c:5d:ea:c6:0a:21:6f:
bf:f4:0b:82:05:4d:3d:f1:ed:d1:61:9c:48:62:38:63:5e:37:
84:cd:0b:86:c9:b1:ff:a5:d0:92:72:1d:b2:55:8f:1d:76:cd:
7e:45:19:cb:37:0e:dd:b6:b5:4d:4d:f2:50:73:b8:14:47:67:
ad:94:2b:e2:0b:81:7d:ce:56:1e:08:5f:c5:10:d8:0b:d5:58:
4a:04:db:2e:98:08:f2:64:5f:aa:46:6f:21:07:44:3f:2c:03:
9e:25:78:ea:13:45:77:4a:9c:43:05:6a:51:77:b1:57:95:68:
dd:3b:81:c3:6c:35:49:95:1d:48:24:f1:75:6b:b1:d7:c3:e4:
4a:59:ef:0e:86:5c:6b:e1:e4:ee:fe:98:14:10:5c:b7:8c:e5:
f3:d0:f6:45:d0:32:e5:68:6e:c9:d4:cf:66:22:e8:ea:30:1f:
56:05:2f:24:d3:f3:21:f6:b6:a4:db:5e:7e:1f:b3:ae:f7:8b:
8c:85:2c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:28:09 2025 by rpki-client