Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/8vUiqNz1m70A5Vq483-YAkNEJHg.roa
File: 8vUiqNz1m70A5Vq483-YAkNEJHg.roa (raw, json)
Hash identifier: yrdRAxlp6nCEYOWh2gSqHS6LdnNT+mrscav2yeVNcIA=
Subject key identifier: F2:F5:22:A8:DC:F5:9B:BD:00:E5:5A:B8:F3:7F:98:02:43:44:24:78
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184191E1E0F0E56C9F5F5B4BF265021F94A
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/8vUiqNz1m70A5Vq483-YAkNEJHg.roa
Signing time: Thu 27 Oct 2022 11:05:14 +0000
ROA not before: Thu 27 Oct 2022 11:05:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31163
IP address blocks: 109.188.0.0/16 maxlen: 24
46.29.192.0/21 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
31.173.192.0/24 maxlen: 24
31.173.193.0/24 maxlen: 24
31.173.197.0/24 maxlen: 24
31.173.196.0/24 maxlen: 24
31.173.195.0/24 maxlen: 24
31.173.199.0/24 maxlen: 24
31.173.194.0/24 maxlen: 24
31.173.198.0/24 maxlen: 24
31.173.201.0/24 maxlen: 24
31.173.205.0/24 maxlen: 24
31.173.204.0/24 maxlen: 24
31.173.200.0/24 maxlen: 24
212.69.96.0/19 maxlen: 24
31.173.203.0/24 maxlen: 24
31.173.202.0/24 maxlen: 24
31.173.206.0/24 maxlen: 24
31.173.209.0/24 maxlen: 24
31.173.213.0/24 maxlen: 24
31.173.208.0/24 maxlen: 24
31.173.212.0/24 maxlen: 24
31.173.207.0/24 maxlen: 24
31.173.211.0/24 maxlen: 24
31.173.210.0/24 maxlen: 24
31.173.217.0/24 maxlen: 24
31.173.216.0/24 maxlen: 24
37.29.0.0/17 maxlen: 24
31.173.215.0/24 maxlen: 24
31.173.219.0/24 maxlen: 24
31.173.214.0/24 maxlen: 24
31.173.218.0/24 maxlen: 24
31.173.221.0/24 maxlen: 24
31.173.220.0/24 maxlen: 24
31.173.223.0/24 maxlen: 24
31.173.222.0/24 maxlen: 24
37.28.160.0/19 maxlen: 24
78.25.64.0/18 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
83.149.24.0/24 maxlen: 24
83.149.28.0/24 maxlen: 24
83.149.25.0/24 maxlen: 24
83.149.29.0/24 maxlen: 24
83.149.31.0/24 maxlen: 24
83.149.30.0/24 maxlen: 24
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 24
83.169.192.0/18 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
46.232.200.0/21 maxlen: 24
62.64.0.0/19 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
46.229.128.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:19:1e:1e:0f:0e:56:c9:f5:f5:b4:bf:26:50:21:f9:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 27 11:05:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2f522a8dcf59bbd00e55ab8f37f980243442478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:84:b9:81:d7:9a:7e:4d:85:28:5c:91:83:c8:
b9:ca:4b:03:04:b0:54:e5:1f:4f:9a:7d:7a:dd:f3:
0b:b8:9f:4e:8c:5b:d3:a5:06:03:7b:8c:5d:a1:a3:
44:6b:e2:a6:d0:a6:51:63:f3:9c:db:1c:96:8b:33:
b0:f9:f7:aa:09:f4:4f:7b:80:bf:3a:f7:53:ee:66:
36:1d:4c:14:7f:ac:e4:01:e6:8f:05:1f:79:41:3a:
4f:c6:16:d8:e9:38:7a:e4:4f:46:bd:60:4c:b6:6a:
0f:16:cd:10:5d:c4:ff:0b:6b:b8:86:8d:5b:f9:f2:
90:69:8d:19:84:31:50:02:55:1c:fb:5f:61:56:48:
fc:95:35:19:cc:ca:b1:3f:d0:eb:7c:70:16:95:9b:
e3:ec:42:68:84:16:48:0b:11:64:f9:21:44:9d:97:
91:5a:bd:68:a7:7a:69:4b:05:15:94:65:e8:88:4d:
8d:b1:a0:4c:05:35:5f:ca:e4:d1:8f:c9:62:7a:a3:
0e:c4:59:01:01:9d:d1:e9:9e:98:41:3d:b6:0c:62:
0e:ca:d4:60:82:54:81:c0:7d:12:68:15:e3:81:b7:
48:2b:99:8d:b0:7e:f4:8c:cc:9e:1a:4f:f7:56:6b:
93:0c:f6:8e:a5:46:02:77:2a:e4:15:7a:b9:22:66:
b9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F5:22:A8:DC:F5:9B:BD:00:E5:5A:B8:F3:7F:98:02:43:44:24:78
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/8vUiqNz1m70A5Vq483-YAkNEJHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.192.0/19
37.28.160.0/19
37.29.0.0/17
46.29.192.0/21
46.229.128.0/20
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.149.24.0/23
83.149.28.0/22
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
77:53:fb:30:97:a5:2c:4f:8b:02:82:95:53:da:e6:f2:c0:49:
4c:87:a2:e5:b6:ac:f4:23:4b:13:d8:44:1f:1f:86:93:d0:b4:
5d:eb:e2:ae:a9:cd:cf:b4:7e:ec:69:13:60:11:c8:f3:2a:c4:
80:e9:01:9b:7b:b1:a4:4e:09:eb:b0:76:40:8f:d0:eb:4c:cb:
c8:c9:9e:b2:26:16:ea:89:4a:f2:68:bb:dc:f1:40:18:04:ae:
6a:47:9a:8e:65:59:61:4d:79:02:5f:4c:39:8b:a1:4f:6a:85:
ba:72:4a:ef:b9:48:32:70:d6:71:bc:37:c5:6a:68:1d:25:df:
fc:6c:5a:30:8e:99:37:9b:54:66:e5:2f:2a:8e:07:6c:be:2a:
f2:57:96:05:23:d6:ce:fe:78:4a:3f:0f:85:9d:4f:8b:c3:b1:
b5:e8:d6:e7:62:7d:0b:3d:a7:47:b1:ff:19:3c:cc:4f:20:6f:
57:56:67:52:52:cb:a1:ee:e0:f0:51:e9:67:d9:ec:50:01:26:
57:63:1f:04:2a:d3:34:ba:f5:b6:01:2d:01:86:b2:d8:4e:50:
97:41:62:97:8a:b9:dd:5b:7a:bf:00:2b:26:6f:e5:67:9e:aa:
ff:63:52:7e:69:c9:9d:30:c0:a2:d0:6a:0b:57:3f:db:8d:15:
8a:bc:27:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:34 2024 by rpki-client on console-ams.rpki-client.org