Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/BdzC7c2xnr8wmfgtlXeNnW4ihRA.roa
File: BdzC7c2xnr8wmfgtlXeNnW4ihRA.roa (raw, json)
Hash identifier: p9nICSLgmkZy3+iDYorENmCPggz7/gEnqW9cqxHflWI=
Subject key identifier: 05:DC:C2:ED:CD:B1:9E:BF:30:99:F8:2D:95:77:8D:9D:6E:22:85:10
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184C3EFCA95875BC99E146AF1BE6A26550B
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/BdzC7c2xnr8wmfgtlXeNnW4ihRA.roa
Signing time: Tue 29 Nov 2022 15:09:42 +0000
ROA not before: Tue 29 Nov 2022 15:09:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31163
IP address blocks: 109.188.0.0/16 maxlen: 24
85.26.128.0/17 maxlen: 24
193.201.228.0/22 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
31.173.192.0/24 maxlen: 24
31.173.193.0/24 maxlen: 24
31.173.196.0/24 maxlen: 24
31.173.199.0/24 maxlen: 24
31.173.194.0/24 maxlen: 24
31.173.197.0/24 maxlen: 24
31.173.195.0/24 maxlen: 24
31.173.198.0/24 maxlen: 24
31.173.201.0/24 maxlen: 24
31.173.204.0/24 maxlen: 24
31.173.202.0/24 maxlen: 24
31.173.205.0/24 maxlen: 24
31.173.200.0/24 maxlen: 24
31.173.203.0/24 maxlen: 24
31.173.206.0/24 maxlen: 24
31.173.209.0/24 maxlen: 24
31.173.212.0/24 maxlen: 24
31.173.207.0/24 maxlen: 24
31.173.210.0/24 maxlen: 24
31.173.213.0/24 maxlen: 24
31.173.208.0/24 maxlen: 24
31.173.211.0/24 maxlen: 24
31.173.217.0/24 maxlen: 24
31.173.215.0/24 maxlen: 24
31.173.218.0/24 maxlen: 24
31.173.216.0/24 maxlen: 24
31.173.219.0/24 maxlen: 24
31.173.214.0/24 maxlen: 24
31.173.220.0/24 maxlen: 24
31.173.223.0/24 maxlen: 24
31.173.221.0/24 maxlen: 24
31.173.222.0/24 maxlen: 24
78.25.64.0/18 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
109.106.192.0/24 maxlen: 24
109.106.197.0/24 maxlen: 24
109.106.195.0/24 maxlen: 24
109.106.198.0/24 maxlen: 24
109.106.193.0/24 maxlen: 24
109.106.196.0/24 maxlen: 24
109.106.199.0/24 maxlen: 24
109.106.194.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
212.44.64.0/19 maxlen: 24
178.178.3.0/24 maxlen: 24
178.178.0.0/24 maxlen: 24
178.178.2.0/24 maxlen: 24
178.178.4.0/24 maxlen: 24
178.178.1.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
37.29.123.0/24 maxlen: 24
37.29.125.0/24 maxlen: 24
37.29.120.0/24 maxlen: 24
37.29.119.0/24 maxlen: 24
37.29.122.0/24 maxlen: 24
37.29.121.0/24 maxlen: 24
37.29.124.0/24 maxlen: 24
37.29.126.0/24 maxlen: 24
37.29.127.0/24 maxlen: 24
79.171.8.0/21 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
185.3.32.0/22 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
178.176.215.0/24 maxlen: 24
178.176.218.0/24 maxlen: 24
178.176.217.0/24 maxlen: 24
178.176.219.0/24 maxlen: 24
178.176.214.0/24 maxlen: 24
178.176.216.0/24 maxlen: 24
178.176.223.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
178.176.220.0/24 maxlen: 24
178.176.222.0/24 maxlen: 24
178.176.221.0/24 maxlen: 24
188.170.187.0/24 maxlen: 24
188.170.190.0/24 maxlen: 24
188.170.189.0/24 maxlen: 24
188.170.192.0/24 maxlen: 24
188.170.191.0/24 maxlen: 24
188.170.188.0/24 maxlen: 24
188.170.195.0/24 maxlen: 24
188.170.198.0/24 maxlen: 24
188.170.197.0/24 maxlen: 24
188.170.199.0/24 maxlen: 24
188.170.194.0/24 maxlen: 24
188.170.193.0/24 maxlen: 24
188.170.196.0/24 maxlen: 24
188.170.200.0/22 maxlen: 22
188.170.204.0/22 maxlen: 22
188.170.211.0/24 maxlen: 24
188.170.213.0/24 maxlen: 24
188.170.208.0/24 maxlen: 24
188.170.210.0/24 maxlen: 24
188.170.209.0/24 maxlen: 24
188.170.212.0/24 maxlen: 24
188.170.214.0/24 maxlen: 24
188.170.219.0/24 maxlen: 24
188.170.216.0/24 maxlen: 24
188.170.215.0/24 maxlen: 24
188.170.218.0/24 maxlen: 24
188.170.217.0/24 maxlen: 24
188.170.224.0/24 maxlen: 24
188.170.221.0/24 maxlen: 24
188.170.222.0/24 maxlen: 24
188.170.220.0/24 maxlen: 24
188.170.225.0/24 maxlen: 24
188.170.226.0/24 maxlen: 24
188.170.223.0/24 maxlen: 24
188.170.227.0/24 maxlen: 24
37.29.112.0/24 maxlen: 24
37.29.115.0/24 maxlen: 24
37.29.118.0/24 maxlen: 24
37.29.117.0/24 maxlen: 24
37.29.114.0/24 maxlen: 24
37.29.113.0/24 maxlen: 24
37.29.116.0/24 maxlen: 24
128.204.64.0/18 maxlen: 24
188.170.171.0/24 maxlen: 24
188.170.170.0/24 maxlen: 24
188.170.169.0/24 maxlen: 24
188.170.168.0/21 maxlen: 21
188.170.172.0/24 maxlen: 24
188.170.179.0/24 maxlen: 24
188.170.174.0/24 maxlen: 24
95.137.0.0/17 maxlen: 24
188.170.173.0/24 maxlen: 24
188.170.176.0/24 maxlen: 24
188.170.175.0/24 maxlen: 24
188.170.178.0/24 maxlen: 24
188.170.177.0/24 maxlen: 24
188.170.182.0/24 maxlen: 24
188.170.181.0/24 maxlen: 24
188.170.184.0/24 maxlen: 24
188.170.183.0/24 maxlen: 24
188.170.186.0/24 maxlen: 24
188.170.185.0/24 maxlen: 24
188.170.180.0/24 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
83.149.24.0/24 maxlen: 24
83.149.29.0/24 maxlen: 24
83.149.30.0/24 maxlen: 24
83.149.28.0/24 maxlen: 24
83.149.25.0/24 maxlen: 24
83.149.31.0/24 maxlen: 24
78.41.100.0/22 maxlen: 24
178.176.192.0/24 maxlen: 24
178.176.194.0/24 maxlen: 24
178.176.193.0/24 maxlen: 24
178.176.196.0/24 maxlen: 24
178.176.195.0/24 maxlen: 24
178.176.198.0/24 maxlen: 24
178.176.197.0/24 maxlen: 24
178.176.202.0/24 maxlen: 24
178.176.203.0/24 maxlen: 24
178.176.210.0/24 maxlen: 24
178.176.209.0/24 maxlen: 24
178.176.212.0/24 maxlen: 24
178.176.211.0/24 maxlen: 24
178.176.213.0/24 maxlen: 24
178.176.208.0/24 maxlen: 24
83.169.192.0/18 maxlen: 24
109.74.112.0/20 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c3:ef:ca:95:87:5b:c9:9e:14:6a:f1:be:6a:26:55:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Nov 29 15:09:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05dcc2edcdb19ebf3099f82d95778d9d6e228510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8d:05:21:7b:0c:51:77:4b:cd:24:d7:bf:4b:
fd:0d:58:e9:82:fe:d7:67:d5:df:95:f1:77:19:90:
9e:0b:62:9f:4a:71:c1:fa:d3:6a:83:61:43:a2:26:
47:50:35:61:49:c0:b7:66:f7:1a:67:2c:4c:57:7a:
b6:c3:40:41:fc:24:dc:41:90:12:63:2e:bc:af:cb:
3e:a5:0e:31:29:c3:26:f9:f4:60:29:bf:bc:b4:70:
fa:eb:64:01:23:7e:aa:56:03:9f:65:3d:78:6f:72:
fe:9c:6b:2c:04:39:30:52:70:1f:e3:ce:21:a9:64:
9a:eb:32:84:02:d6:f0:21:d8:12:8d:8e:40:15:01:
1f:04:b1:b1:e2:e0:a4:b9:bb:11:3f:db:28:b6:5f:
dc:91:74:2a:cb:d0:93:ce:30:ce:df:48:b1:cf:cb:
d1:49:1b:75:57:fd:7e:4c:98:6a:89:76:ee:31:77:
8d:b2:4e:2a:22:91:e3:70:fd:98:d2:b4:72:98:a4:
c2:2f:8a:dc:6d:a6:1f:b9:34:b4:06:bf:7e:eb:3c:
db:a5:c2:fb:3e:0e:2d:f3:58:fd:72:0f:90:d4:17:
ee:f1:e6:f9:59:f1:ee:23:ac:98:81:58:6f:c4:a2:
a8:5b:ff:9a:1c:ef:0b:0e:50:c9:70:c1:d1:a2:8c:
fd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:DC:C2:ED:CD:B1:9E:BF:30:99:F8:2D:95:77:8D:9D:6E:22:85:10
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/BdzC7c2xnr8wmfgtlXeNnW4ihRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.192.0/19
37.29.112.0/20
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.149.24.0/23
83.149.28.0/22
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.106.192.0/21
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.192.0-178.176.198.255
178.176.202.0/23
178.176.208.0/20
178.178.0.0-178.178.4.255
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.168.0-188.170.227.255
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
6c:58:21:8d:19:a3:62:01:28:b4:d2:12:d6:78:b9:2c:e6:35:
1e:01:f4:2b:01:02:a0:de:15:9f:39:a7:22:b8:e3:c3:5d:eb:
29:55:9a:14:92:f1:be:ed:da:a8:4b:c0:00:4c:4c:d6:26:d1:
2e:16:cf:6a:a4:13:aa:57:82:2d:27:98:94:ac:cf:99:8f:9f:
53:f7:15:5e:fb:3d:c4:af:3d:96:7e:90:6b:cb:0a:6a:d1:44:
f3:9a:5b:d3:fe:d9:b7:5e:90:e5:d1:4d:d8:83:91:e3:d7:85:
06:68:7d:d2:23:82:2d:0b:c2:84:10:fc:7f:38:a5:45:a1:45:
56:04:61:38:1b:13:d1:32:0e:b0:59:f1:2d:3b:0f:20:7e:b7:
dd:c4:86:35:f3:71:ca:6b:b7:92:6d:9b:22:f4:78:5a:14:ac:
2e:70:b8:45:e7:22:2b:4e:c2:d6:50:a2:b8:41:85:9b:56:f3:
75:31:ea:35:99:63:0b:0b:3f:66:df:03:c3:61:5c:f0:bc:88:
fd:70:b9:3e:4d:3c:f9:56:08:b1:38:c3:64:8b:57:c1:5e:82:
7d:ec:f9:f7:4a:4b:21:e4:d1:59:c6:37:79:4f:bf:a8:bf:4b:
34:b8:c7:5b:84:f7:31:ac:b5:6a:de:e5:c5:62:4a:20:d7:61:
a8:52:e1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:43 2025 by rpki-client