Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/8ZGOKZI9IsgnAeA0CsLuJbqGQ7A.roa
File: 8ZGOKZI9IsgnAeA0CsLuJbqGQ7A.roa (raw, json)
Hash identifier: Wr3o44/yctB8u08T37sKMK/psuA+ZbCiPF4Y2PPwBLI=
Subject key identifier: F1:91:8E:29:92:3D:22:C8:27:01:E0:34:0A:C2:EE:25:BA:86:43:B0
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01841D9D7D730BB5CC5ECB1D25F64E424CAB
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/8ZGOKZI9IsgnAeA0CsLuJbqGQ7A.roa
Signing time: Fri 28 Oct 2022 08:02:51 +0000
ROA not before: Fri 28 Oct 2022 08:02:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31163
IP address blocks: 109.188.0.0/16 maxlen: 24
85.26.128.0/17 maxlen: 24
193.201.228.0/22 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
31.173.192.0/24 maxlen: 24
31.173.193.0/24 maxlen: 24
31.173.197.0/24 maxlen: 24
31.173.196.0/24 maxlen: 24
31.173.195.0/24 maxlen: 24
31.173.199.0/24 maxlen: 24
31.173.194.0/24 maxlen: 24
31.173.198.0/24 maxlen: 24
31.173.201.0/24 maxlen: 24
31.173.205.0/24 maxlen: 24
31.173.204.0/24 maxlen: 24
31.173.200.0/24 maxlen: 24
31.173.203.0/24 maxlen: 24
31.173.202.0/24 maxlen: 24
31.173.206.0/24 maxlen: 24
31.173.209.0/24 maxlen: 24
31.173.213.0/24 maxlen: 24
31.173.208.0/24 maxlen: 24
31.173.212.0/24 maxlen: 24
31.173.207.0/24 maxlen: 24
31.173.211.0/24 maxlen: 24
31.173.210.0/24 maxlen: 24
31.173.217.0/24 maxlen: 24
31.173.216.0/24 maxlen: 24
31.173.215.0/24 maxlen: 24
31.173.219.0/24 maxlen: 24
31.173.214.0/24 maxlen: 24
31.173.218.0/24 maxlen: 24
31.173.221.0/24 maxlen: 24
31.173.220.0/24 maxlen: 24
31.173.223.0/24 maxlen: 24
31.173.222.0/24 maxlen: 24
78.25.64.0/18 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
109.106.192.0/24 maxlen: 24
109.106.193.0/24 maxlen: 24
109.106.197.0/24 maxlen: 24
109.106.196.0/24 maxlen: 24
109.106.195.0/24 maxlen: 24
109.106.199.0/24 maxlen: 24
109.106.194.0/24 maxlen: 24
109.106.198.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
46.232.200.0/21 maxlen: 24
62.64.0.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
46.29.192.0/21 maxlen: 24
178.178.2.0/24 maxlen: 24
178.178.3.0/24 maxlen: 24
178.178.0.0/24 maxlen: 24
178.178.4.0/24 maxlen: 24
178.178.1.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
79.171.8.0/21 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
185.3.32.0/22 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
37.29.0.0/17 maxlen: 24
178.176.215.0/24 maxlen: 24
178.176.219.0/24 maxlen: 24
37.28.160.0/19 maxlen: 24
178.176.214.0/24 maxlen: 24
178.176.218.0/24 maxlen: 24
178.176.217.0/24 maxlen: 24
178.176.216.0/24 maxlen: 24
178.176.223.0/24 maxlen: 24
178.176.222.0/24 maxlen: 24
178.176.221.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
178.176.220.0/24 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
83.149.24.0/24 maxlen: 24
83.149.28.0/24 maxlen: 24
83.149.25.0/24 maxlen: 24
83.149.29.0/24 maxlen: 24
83.149.31.0/24 maxlen: 24
83.149.30.0/24 maxlen: 24
78.41.100.0/22 maxlen: 24
178.176.192.0/24 maxlen: 24
178.176.195.0/24 maxlen: 24
178.176.194.0/24 maxlen: 24
178.176.198.0/24 maxlen: 24
178.176.193.0/24 maxlen: 24
178.176.197.0/24 maxlen: 24
178.176.196.0/24 maxlen: 24
178.176.203.0/24 maxlen: 24
178.176.202.0/24 maxlen: 24
178.176.211.0/24 maxlen: 24
178.176.210.0/24 maxlen: 24
178.176.213.0/24 maxlen: 24
178.176.209.0/24 maxlen: 24
178.176.212.0/24 maxlen: 24
178.176.208.0/24 maxlen: 24
83.169.192.0/18 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
46.229.128.0/20 maxlen: 24
83.229.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1d:9d:7d:73:0b:b5:cc:5e:cb:1d:25:f6:4e:42:4c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 28 08:02:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1918e29923d22c82701e0340ac2ee25ba8643b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5e:e3:ad:7d:be:fb:6f:5a:17:03:f8:70:8a:
43:cf:e4:d1:1e:14:f9:b3:1d:27:54:fc:12:28:51:
f7:d9:97:cb:8f:f0:05:a6:c6:d6:60:b8:32:52:d0:
8b:de:06:38:a2:5a:38:ce:54:47:41:f1:ee:a7:4a:
5c:de:e9:d2:84:f8:69:74:0d:45:10:ca:40:f2:3d:
f5:0e:67:9a:9d:94:7a:ca:c3:40:95:0c:c0:a5:a2:
de:32:30:42:90:62:5f:3a:fb:9e:8e:4e:a3:e0:c1:
83:eb:12:4d:42:22:37:d9:ec:35:cb:89:76:bf:64:
2d:64:91:58:cf:2f:03:30:55:b1:32:f1:fc:20:a8:
7c:60:2b:a7:eb:61:e6:51:7b:42:f9:b3:8f:c2:63:
d6:8c:19:59:21:62:ef:2b:5f:e3:e0:6d:c0:91:b0:
1b:3a:e0:05:70:1d:cd:e8:ac:f5:cc:44:80:cd:94:
ed:89:a0:a6:8d:66:4b:38:60:0e:35:bd:be:ed:fb:
e8:7b:30:17:3c:13:98:98:fa:64:62:f4:ae:0b:ad:
a0:cd:64:84:8b:f9:bd:fb:e5:ea:83:53:55:0b:c5:
7d:fe:36:04:a6:20:d0:26:cb:b9:a8:ca:df:5e:c4:
da:4f:98:04:ab:81:85:f3:b8:8f:69:39:f7:9b:97:
0e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:91:8E:29:92:3D:22:C8:27:01:E0:34:0A:C2:EE:25:BA:86:43:B0
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/8ZGOKZI9IsgnAeA0CsLuJbqGQ7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.192.0/19
37.28.160.0/19
37.29.0.0/17
46.29.192.0/21
46.229.128.0/20
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.149.24.0/23
83.149.28.0/22
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.106.192.0/21
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.192.0-178.176.198.255
178.176.202.0/23
178.176.208.0/20
178.178.0.0-178.178.4.255
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
9f:86:b4:b3:74:82:91:bc:ee:f8:6d:b7:5d:b0:59:71:89:ed:
78:bd:5a:85:76:a1:c3:a8:b0:74:23:6a:bf:ea:f2:8b:91:ad:
db:86:c7:c5:bd:5b:3b:fd:97:a3:80:70:77:02:ee:4b:97:76:
ca:11:5d:32:fd:4c:e5:85:99:98:1c:34:b4:36:49:ee:20:9a:
96:6b:be:ac:f7:1c:c1:eb:84:73:cf:98:9a:3b:1c:cf:b5:aa:
e5:e8:44:1b:0d:bc:33:aa:90:52:9d:f1:c5:f5:af:6c:95:ea:
92:fe:1c:f3:b6:09:53:00:24:fb:45:7a:aa:c0:de:82:33:ec:
78:22:60:78:15:d3:e0:e0:9f:ff:59:86:50:5d:1f:73:37:1a:
34:2c:00:38:84:86:51:43:0e:b8:49:0b:65:ee:b7:80:76:95:
3f:1f:98:f9:96:1c:fb:7b:c9:f0:57:ef:e6:67:05:51:a5:fa:
16:05:18:fa:17:30:f9:28:02:4f:82:47:21:66:91:c4:5a:92:
78:fc:46:84:41:45:e3:b3:ab:ef:9f:a6:10:cd:89:24:ab:c8:
f7:d2:0d:99:9d:a9:11:b3:52:f0:85:0e:d6:62:c7:55:fb:b6:
43:a6:f9:7a:fd:1c:a8:2a:d4:4a:ab:67:23:2d:4f:8a:34:22:
be:3b:10:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:24 2024 by rpki-client on console-fra.rpki-client.org