Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/8Q72tAl87_y-Y8IvolGEBj50wpA.roa
File: 8Q72tAl87_y-Y8IvolGEBj50wpA.roa (raw, json)
Hash identifier: S42ug/RJ2K5BABUSUaVaoC3QOE5gtaKLI1uC10mrY9Q=
Subject key identifier: F1:0E:F6:B4:09:7C:EF:FC:BE:63:C2:2F:A2:51:84:06:3E:74:C2:90
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184763351F04D9DE2472E4F282BE1309071
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/8Q72tAl87_y-Y8IvolGEBj50wpA.roa
Signing time: Mon 14 Nov 2022 12:53:05 +0000
ROA not before: Mon 14 Nov 2022 12:53:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31088
IP address blocks: 109.188.0.0/16 maxlen: 24
46.29.192.0/21 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
83.169.192.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 24
46.232.200.0/21 maxlen: 24
78.25.64.0/18 maxlen: 24
62.64.0.0/19 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
46.229.128.0/20 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:76:33:51:f0:4d:9d:e2:47:2e:4f:28:2b:e1:30:90:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Nov 14 12:53:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f10ef6b4097ceffcbe63c22fa25184063e74c290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:58:be:8c:24:6d:4e:f0:b4:bf:1f:ea:fa:81:
25:c2:87:40:c2:82:2a:e5:3a:5c:6b:82:c6:d2:43:
1a:5f:56:e2:0d:35:6d:fd:38:52:79:72:af:42:a5:
6b:f0:e8:c9:d5:54:cc:1c:9f:1b:e8:e9:a5:aa:1e:
ee:73:aa:d4:42:4d:79:60:63:45:bb:dc:7b:fc:44:
83:15:09:c5:4e:df:5e:46:90:0d:e4:0b:4e:f8:7a:
d9:dc:4f:d2:48:63:4d:51:4b:68:5e:01:5d:ac:31:
48:a0:e0:ab:f9:da:9f:99:d3:b6:d0:08:85:95:49:
3e:10:b0:7e:fb:05:fc:2e:af:7a:87:65:f3:54:3e:
9b:b5:7f:de:85:04:0b:c2:26:a4:29:9b:e9:48:9f:
f4:55:9d:60:81:92:6a:f5:d0:bc:b0:a6:93:b0:14:
c4:4b:ad:55:e2:c6:66:15:90:36:6c:4d:d6:74:06:
dd:50:44:8d:0a:5f:80:e9:14:f1:15:b0:c1:d7:6e:
fa:9a:85:11:35:58:4e:71:0c:dc:07:4d:42:68:be:
65:ad:9e:72:a1:1b:3a:09:43:fd:7f:ee:25:64:34:
1d:54:7c:b7:c2:c7:1f:34:19:b8:12:5e:f1:b1:f7:
3a:a2:63:14:a7:cc:09:c4:e5:13:a9:16:3b:b1:3f:
8f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0E:F6:B4:09:7C:EF:FC:BE:63:C2:2F:A2:51:84:06:3E:74:C2:90
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/8Q72tAl87_y-Y8IvolGEBj50wpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.192.0/21
46.229.128.0/20
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
34:e5:66:00:7c:b0:36:5f:ba:2d:68:77:d8:0b:53:b7:86:a1:
cd:cd:1a:2f:30:cf:3f:a9:50:ea:6e:2b:13:85:99:06:18:57:
22:99:3c:3a:c1:a6:1f:cb:46:5f:6e:b2:58:e6:7a:60:84:da:
ef:93:6b:78:5d:fd:8c:3e:25:8b:41:20:39:28:75:5b:61:2a:
20:69:9f:9f:0b:79:a6:6c:97:57:2f:42:a8:4c:1f:30:94:13:
ba:1f:b6:e6:8c:90:8d:15:0c:e7:c0:b6:03:59:4f:14:d6:6d:
f8:78:57:9c:8d:68:4a:8c:4f:7f:e6:b5:d1:ef:92:8a:f4:87:
fe:69:6c:e4:f2:56:36:e9:78:dc:76:da:57:57:87:fb:15:02:
9d:bc:54:bc:96:78:7e:99:b7:a5:84:58:b7:2b:65:c4:d2:8f:
7e:39:58:40:fd:6f:af:66:56:a4:e5:82:3c:ff:62:b1:46:76:
68:92:5b:ff:03:64:69:1f:61:57:b9:e6:21:b3:0c:d8:36:56:
26:5c:66:0f:01:5f:fd:1b:91:28:0b:9d:e0:d8:ee:63:ba:cb:
b7:31:96:d4:7f:a6:32:08:b8:b7:d5:1f:24:3d:82:07:85:9f:
71:b7:5a:e9:c9:a4:60:9e:63:4e:0d:79:98:09:4d:73:11:ad:
40:c4:f3:6c
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgISAYR2M1HwTZ3iRy5PKCvhMJBxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMTE0MTI1MzA1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTBlZjZiNDA5N2NlZmZjYmU2M2MyMmZhMjUxODQwNjNlNzRjMjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgli+jCRtTvC0vx/q+oElwodAwoIq
5Tpca4LG0kMaX1biDTVt/ThSeXKvQqVr8OjJ1VTMHJ8b6Omlqh7uc6rUQk15YGNF
u9x7/ESDFQnFTt9eRpAN5AtO+HrZ3E/SSGNNUUtoXgFdrDFIoOCr+dqfmdO20AiF
lUk+ELB++wX8Lq96h2XzVD6btX/ehQQLwiakKZvpSJ/0VZ1ggZJq9dC8sKaTsBTE
S61V4sZmFZA2bE3WdAbdUESNCl+A6RTxFbDB1276moURNVhOcQzcB01CaL5lrZ5y
oRs6CUP9f+4lZDQdVHy3wscfNBm4El7xsfc6omMUp8wJxOUTqRY7sT+PBwIDAQAB
o4IDBjCCAwIwHQYDVR0OBBYEFPEO9rQJfO/8vmPCL6JRhAY+dMKQMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvOFE3MnRBbDg3X3ktWThJdm9sR0VCajUwd3BBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBGgYIKwYBBQUHAQcBAf8EggEJMIIBBTCCAQEEAgABMIH6
AwQDLh3AAwQELuWAAwQDLujIAwQFPkAAAwQFTemgAwQGThlAAwQCTilkAwQDT6sI
AwQEUPewAwQEURiAAwQGU6nAAwQFU97AAwQHU+WAAwQHVRqAAwQFVm3AAwQCW8HU
AwQHXZmAAwQHXhmAAwQHX4kAAwQEbUpwAwQGbXxAAwMAbbwDBAaAzEADBAOyF5AD
BAK5AyADBAK50owDBAO8XqgDAwC8ogMEAsHJ5AMEBcMFgAMEBcMQYAMEAcNOdAME
AMOVbwMEBcPmQAMEBdQOoAMEBdQsQAMEBdRFYAMEBdR3oAMEBdWaoAMEBdWoIAME
BtXzQAMEBNlzUDANBgkqhkiG9w0BAQsFAAOCAQEANOVmAHywNl+6LWh32AtTt4ah
zc0aLzDPP6lQ6m4rE4WZBhhXIpk8OsGmH8tGX26yWOZ6YITa75NreF39jD4li0Eg
OSh1W2EqIGmfnwt5pmyXVy9CqEwfMJQTuh+25oyQjRUM58C2A1lPFNZt+HhXnI1o
SoxPf+a10e+SivSH/mls5PJWNul43HbaV1eH+xUCnbxUvJZ4fpm3pYRYtytlxNKP
fjlYQP1vr2ZWpOWCPP9isUZ2aJJb/wNkaR9hV7nmIbMM2DZWJlxmDwFf/RuRKAud
4NjuY7rLtzGW1H+mMgi4t9UfJD2CB4Wfcbda6cmkYJ5jTg15mAlNcxGtQMTzbA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:24 2024 by rpki-client on console-fra.rpki-client.org