Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/92zPZLJa8m33qSF8iGXvanL_EVc.roa
File: 92zPZLJa8m33qSF8iGXvanL_EVc.roa (raw, json)
Hash identifier: Rp4hFdVn8/PW0GeKOFkkEl3TzCGGV1IS2cMThwDWbmc=
Subject key identifier: F7:6C:CF:64:B2:5A:F2:6D:F7:A9:21:7C:88:65:EF:6A:72:FF:11:57
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F146382C45605121006714B23DC06D36
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/92zPZLJa8m33qSF8iGXvanL_EVc.roa
Signing time: Thu 08 Dec 2022 10:27:01 +0000
ROA not before: Thu 08 Dec 2022 10:27:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25159
IP address blocks: 109.188.0.0/16 maxlen: 24
195.16.96.0/19 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
85.26.144.0/20 maxlen: 20
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
78.25.119.0/24 maxlen: 24
94.25.131.0/24 maxlen: 24
94.25.144.0/20 maxlen: 20
212.69.96.0/19 maxlen: 24
94.25.164.0/24 maxlen: 24
94.25.160.0/24 maxlen: 24
94.25.172.0/22 maxlen: 22
94.25.168.0/22 maxlen: 22
188.170.25.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
188.170.32.0/21 maxlen: 21
188.170.40.0/21 maxlen: 21
37.28.176.0/21 maxlen: 21
212.119.160.0/19 maxlen: 24
178.177.0.0/18 maxlen: 18
178.177.3.0/24 maxlen: 24
78.25.112.0/22 maxlen: 22
78.25.116.0/23 maxlen: 23
78.25.118.0/24 maxlen: 24
94.25.176.0/21 maxlen: 21
94.25.184.0/21 maxlen: 21
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
37.29.32.0/21 maxlen: 21
178.176.52.0/22 maxlen: 22
178.176.72.0/21 maxlen: 21
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
31.173.0.0/21 maxlen: 21
195.149.111.0/24 maxlen: 24
31.173.8.0/21 maxlen: 21
178.176.0.0/19 maxlen: 19
83.229.254.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
178.176.32.0/21 maxlen: 21
178.176.40.0/21 maxlen: 21
31.173.72.0/21 maxlen: 21
31.173.80.0/21 maxlen: 21
31.173.88.0/21 maxlen: 21
188.170.0.0/19 maxlen: 19
188.170.24.0/24 maxlen: 24
31.173.16.0/21 maxlen: 21
31.173.24.0/21 maxlen: 21
31.173.32.0/19 maxlen: 19
31.173.60.0/24 maxlen: 24
31.173.64.0/21 maxlen: 21
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
188.94.168.0/21 maxlen: 24
62.64.0.0/20 maxlen: 20
213.243.64.0/18 maxlen: 24
83.229.211.0/24 maxlen: 24
217.115.80.0/20 maxlen: 24
46.229.128.0/22 maxlen: 22
212.44.64.0/19 maxlen: 24
83.222.212.0/22 maxlen: 22
83.222.216.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:46:38:2c:45:60:51:21:00:67:14:b2:3d:c0:6d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 10:27:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f76ccf64b25af26df7a9217c8865ef6a72ff1157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:07:60:48:39:76:02:a2:26:36:e5:10:43:c0:
74:ce:15:07:4b:ed:ea:33:9f:0c:45:a9:50:53:04:
40:49:20:cc:02:6f:50:20:d0:d4:9e:95:ac:50:9c:
57:86:7b:c5:05:99:37:64:74:1d:38:7d:8a:e3:cf:
db:48:54:f0:ac:31:71:60:20:85:05:87:d7:a8:45:
01:9d:19:31:be:97:f6:7e:4d:93:20:02:dc:c1:b8:
77:d2:23:a1:7c:c2:c1:76:fd:96:12:89:99:9f:eb:
d6:cc:cd:9f:52:b5:3c:a1:a4:92:0a:10:18:98:0d:
40:a3:f2:f9:55:e1:10:59:ba:3c:a7:39:77:17:13:
98:30:a3:5f:bb:87:47:98:7f:bc:97:85:8a:c8:fa:
4a:1c:91:54:40:7a:c9:98:4f:7b:7e:e8:4b:f8:eb:
5e:0d:3b:36:4d:ae:55:36:b2:32:e9:a4:21:55:1b:
dd:41:4f:d9:66:1a:1c:92:4f:47:d7:57:9a:55:96:
26:a5:a1:f1:76:24:c4:19:00:e7:8b:d0:ae:51:2f:
38:69:04:ea:15:c1:41:9c:36:13:3f:fa:5e:12:b2:
e5:79:0a:55:b0:8a:d6:c7:0b:5f:23:ac:76:fc:8d:
9b:31:82:a9:98:27:23:24:64:12:fd:ba:e1:24:6a:
02:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6C:CF:64:B2:5A:F2:6D:F7:A9:21:7C:88:65:EF:6A:72:FF:11:57
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/92zPZLJa8m33qSF8iGXvanL_EVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.0.0-31.173.95.255
37.28.176.0/21
37.29.32.0/21
46.229.128.0/22
62.64.0.0/20
78.25.112.0/21
83.222.212.0-83.222.223.255
83.229.211.0/24
83.229.254.0/24
85.26.144.0/20
94.25.131.0/24
94.25.144.0-94.25.160.255
94.25.164.0/24
94.25.168.0-94.25.191.255
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.0.0-178.176.47.255
178.176.52.0/22
178.176.72.0/21
178.177.0.0/18
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.0.0-188.170.47.255
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
50:01:0a:b4:dd:f8:ae:a7:e7:51:ec:1b:7c:3a:e6:2f:9b:f3:
62:9e:e6:42:c0:fd:9b:6e:ab:d7:e9:ca:d3:dc:89:55:7d:06:
5f:d1:63:ba:01:39:f2:06:4c:4f:2a:c4:d0:7c:6a:e0:2f:2f:
3e:32:e8:ab:51:6c:7a:64:d1:61:6b:03:72:12:77:4a:87:da:
1f:df:f0:6a:aa:01:82:8a:08:46:7b:10:fe:17:e7:08:d4:f5:
8e:6d:a8:ce:a8:41:8d:98:68:13:20:12:ae:c9:55:d9:73:dc:
7c:f7:f1:d5:c8:8a:30:f7:56:8e:0f:a2:f7:84:40:f6:eb:21:
c6:58:1e:79:bf:20:a3:a4:f5:57:45:01:e3:f2:3d:f6:42:6a:
b7:44:63:82:65:81:01:77:e5:ae:6b:21:1e:fa:e2:86:24:03:
e3:6a:0a:75:e5:12:5a:40:11:d5:ba:04:27:e8:ff:34:41:23:
a7:ed:c1:08:50:ab:31:45:b0:5a:5d:9a:33:ea:81:13:03:29:
81:c0:db:c7:b3:2d:5c:5d:32:47:ee:02:f2:be:67:77:29:11:
ef:d9:59:17:5d:04:23:c1:a8:60:03:5f:62:2d:88:59:3d:2d:
fe:c1:46:e6:9e:e9:c3:aa:ba:dd:94:35:1e:d9:bc:55:a8:d5:
c5:91:34:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:40 2025 by rpki-client