Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/8rlvyJpXOBLNS61wIDeEd_oO4SE.roa
File: 8rlvyJpXOBLNS61wIDeEd_oO4SE.roa (raw, json)
Hash identifier: T7dA1Dv1bDNk24NdV90FeihB20CqTS/xrNqLUhMc46Y=
Subject key identifier: F2:B9:6F:C8:9A:57:38:12:CD:4B:AD:70:20:37:84:77:FA:0E:E1:21
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184D30EACBB1819279ECC795BADE9FAC200
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/8rlvyJpXOBLNS61wIDeEd_oO4SE.roa
Signing time: Fri 02 Dec 2022 13:37:45 +0000
ROA not before: Fri 02 Dec 2022 13:37:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31224
IP address blocks: 109.188.0.0/16 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
193.201.228.0/22 maxlen: 24
178.178.88.0/22 maxlen: 22
178.178.92.0/22 maxlen: 22
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
31.173.122.0/24 maxlen: 24
31.173.125.0/24 maxlen: 24
31.173.120.0/24 maxlen: 24
31.173.123.0/24 maxlen: 24
31.173.121.0/24 maxlen: 24
31.173.124.0/24 maxlen: 24
31.173.127.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
31.173.126.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
78.25.88.0/22 maxlen: 22
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
37.29.44.0/22 maxlen: 22
95.137.0.0/17 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
178.176.104.0/21 maxlen: 21
83.149.32.0/22 maxlen: 22
83.149.36.0/22 maxlen: 22
83.149.34.0/24 maxlen: 24
83.149.37.0/24 maxlen: 24
81.24.128.0/20 maxlen: 24
83.149.39.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
31.173.96.0/24 maxlen: 24
31.173.97.0/24 maxlen: 24
31.173.103.0/24 maxlen: 24
31.173.101.0/24 maxlen: 24
31.173.102.0/24 maxlen: 24
31.173.99.0/24 maxlen: 24
31.173.100.0/24 maxlen: 24
31.173.100.0/23 maxlen: 23
178.176.112.0/24 maxlen: 24
178.176.113.0/24 maxlen: 24
83.169.192.0/18 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
46.229.132.0/22 maxlen: 22
83.229.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d3:0e:ac:bb:18:19:27:9e:cc:79:5b:ad:e9:fa:c2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 2 13:37:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2b96fc89a573812cd4bad7020378477fa0ee121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ce:a6:93:88:52:f3:9f:ce:45:c1:b2:e8:13:
ec:f1:e1:38:2c:07:51:f7:3c:c5:32:6e:54:b4:72:
d3:57:71:6b:8f:29:86:75:4a:95:0f:32:38:48:eb:
35:fa:df:13:eb:fd:79:6c:08:85:63:c8:08:8f:b4:
cb:92:0f:44:e7:90:47:46:b1:cf:1f:2a:57:13:ee:
80:b2:59:f3:a4:e8:3a:50:d8:c7:6d:34:5a:f0:ab:
4d:c7:22:13:f2:78:37:6e:b8:f8:7a:6b:87:61:75:
91:df:37:b2:53:53:57:87:c5:1f:d4:df:72:3f:9c:
a0:cb:64:79:5c:47:bd:61:bc:0b:0d:dd:ab:49:9e:
c4:ce:62:79:dc:63:b0:3a:d1:e6:e7:64:83:a4:f3:
ed:ca:da:c0:1a:19:bc:c1:b6:23:72:1a:56:de:2d:
da:b2:fd:b5:2c:76:18:f1:81:84:a7:c9:b2:ea:5c:
0d:fb:02:d1:bb:6a:68:91:00:1f:0c:ef:d8:2a:47:
dd:25:6b:82:c9:e3:4e:92:e9:8f:bc:75:91:4f:59:
25:99:d6:f2:fb:dc:eb:7e:cc:ae:52:16:97:a7:e5:
2e:d5:28:8b:e8:32:2a:b6:0c:14:38:43:f4:fa:d5:
8e:50:b0:b6:4d:fb:e2:4f:0a:40:b7:0e:49:f6:5f:
47:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B9:6F:C8:9A:57:38:12:CD:4B:AD:70:20:37:84:77:FA:0E:E1:21
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/8rlvyJpXOBLNS61wIDeEd_oO4SE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.96.0/23
31.173.99.0-31.173.103.255
31.173.120.0/21
37.29.44.0/22
46.229.132.0/22
78.25.88.0/22
80.247.176.0/20
81.24.128.0/20
83.149.32.0/21
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.104.0-178.176.113.255
178.178.88.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
83:64:cf:7a:eb:67:b7:fc:d2:3f:d8:66:85:99:45:12:42:f9:
f4:f1:3f:f3:3c:2e:9e:57:c3:99:17:4f:64:8a:3e:11:42:cd:
72:bf:08:69:37:a3:18:4a:a3:6f:42:d0:5b:20:7c:48:42:ff:
51:41:a5:3d:ac:27:83:04:56:31:b9:a5:52:bf:17:76:7c:a5:
73:e0:ff:87:e1:ec:29:70:83:d3:31:48:91:cc:43:8e:d9:f2:
30:a2:24:90:ab:95:91:30:41:85:a4:c6:6e:8a:cf:17:94:7d:
1e:6a:6a:af:1b:2e:20:79:7a:9b:b4:7c:0a:db:ab:de:a2:17:
46:5c:db:26:3b:59:de:f7:bd:66:71:76:9f:3c:74:1b:ff:13:
4c:84:9c:36:44:0c:0c:86:3b:8e:27:9c:95:ad:47:b4:bf:83:
bc:24:06:9d:69:4e:a6:54:bb:6b:0c:0f:bf:c2:76:85:43:37:
f4:d4:56:d7:af:0e:8b:53:ba:03:6f:e8:c5:0b:e5:14:8f:59:
9b:30:5f:d2:a6:07:dd:db:42:54:f7:6f:ff:73:3d:a8:6f:88:
8d:8d:b4:65:93:64:9e:8c:6d:cb:8c:a7:9a:d1:69:89:6d:1f:
50:a9:82:9d:5c:91:54:b4:c3:c0:ef:62:12:70:cb:fb:02:9e:
db:99:fe:61
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgISAYTTDqy7GBknnsx5W63p+sIAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMjAyMTMzNzQ1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmI5NmZjODlhNTczODEyY2Q0YmFkNzAyMDM3ODQ3N2ZhMGVlMTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkc6mk4hS85/ORcGy6BPs8eE4LAdR
9zzFMm5UtHLTV3FrjymGdUqVDzI4SOs1+t8T6/15bAiFY8gIj7TLkg9E55BHRrHP
HypXE+6AslnzpOg6UNjHbTRa8KtNxyIT8ng3brj4emuHYXWR3zeyU1NXh8Uf1N9y
P5ygy2R5XEe9YbwLDd2rSZ7EzmJ53GOwOtHm52SDpPPtytrAGhm8wbYjchpW3i3a
sv21LHYY8YGEp8my6lwN+wLRu2pokQAfDO/YKkfdJWuCyeNOkumPvHWRT1klmdby
+9zrfsyuUhaXp+Uu1SiL6DIqtgwUOEP0+tWOULC2TfviTwpAtw5J9l9HDQIDAQAB
o4IDHTCCAxkwHQYDVR0OBBYEFPK5b8iaVzgSzUutcCA3hHf6DuEhMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvOHJsdnlKcFhPQkxOUzYxd0lEZUVkX29PNFNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBMQYIKwYBBQUHAQcBAf8EggEgMIIBHDCCARgEAgABMIIB
EAMEAR+tYDAMAwQAH61jAwQDH61gAwQDH614AwQCJR0sAwQCLuWEAwQCThlYAwQE
UPewAwQEURiAAwQDU5UgAwQGU6nAAwQFU97AAwQHU+WAAwQHVRqAAwQFVm3AAwQC
W8HUAwQHXZmAAwQHXhmAAwQHX4kAAwQEbUpwAwQGbXxAAwMAbbwDBAaAzEADBAOy
F5AwDAMEA7KwaAMEAbKwcAMEA7KyWAMEArkDIAMEArnSjAMEA7xeqAMDALyiAwQC
wcnkAwQFwwWAAwQFwxBgAwQBw050AwQAw5VvAwQFw+ZAAwQF1A6gAwQF1CxAAwQF
1EVgAwQF1HegAwQF1ZqgAwQF1aggAwQG1fNAAwQE2XNQMA0GCSqGSIb3DQEBCwUA
A4IBAQCDZM9662e3/NI/2GaFmUUSQvn08T/zPC6eV8OZF09kij4RQs1yvwhpN6MY
SqNvQtBbIHxIQv9RQaU9rCeDBFYxuaVSvxd2fKVz4P+H4ewpcIPTMUiRzEOO2fIw
oiSQq5WRMEGFpMZuis8XlH0eamqvGy4geXqbtHwK26veohdGXNsmO1ne971mcXaf
PHQb/xNMhJw2RAwMhjuOJ5yVrUe0v4O8JAadaU6mVLtrDA+/wnaFQzf01FbXrw6L
U7oDb+jFC+UUj1mbMF/Spgfd20JU92//cz2ob4iNjbRlk2SejG3LjKea0WmJbR9Q
qYKdXJFUtMPA72IScMv7Ap7bmf5h
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:24 2025 by rpki-client