Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/DpZNZ0E3ON_ymC2f_S9A4GXOgRM.roa
File: DpZNZ0E3ON_ymC2f_S9A4GXOgRM.roa (raw, json)
Hash identifier: 82Y6NniJyOloGnpLSJVGbP3+I7SJg05/vvNMcHIlubw=
Subject key identifier: 0E:96:4D:67:41:37:38:DF:F2:98:2D:9F:FD:2F:40:E0:65:CE:81:13
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184E23BF6ECCA37EE29070ABA557844A540
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/DpZNZ0E3ON_ymC2f_S9A4GXOgRM.roa
Signing time: Mon 05 Dec 2022 12:21:31 +0000
ROA not before: Mon 05 Dec 2022 12:21:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31224
IP address blocks: 109.188.0.0/16 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
193.201.228.0/22 maxlen: 24
178.178.88.0/22 maxlen: 22
178.178.92.0/22 maxlen: 22
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
31.173.122.0/24 maxlen: 24
31.173.125.0/24 maxlen: 24
31.173.120.0/24 maxlen: 24
31.173.123.0/24 maxlen: 24
31.173.121.0/24 maxlen: 24
31.173.124.0/24 maxlen: 24
31.173.127.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
31.173.126.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
78.25.88.0/22 maxlen: 22
91.193.212.0/22 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
37.29.44.0/22 maxlen: 22
95.137.0.0/17 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
178.176.104.0/21 maxlen: 21
83.149.32.0/22 maxlen: 22
83.149.36.0/22 maxlen: 22
83.149.34.0/24 maxlen: 24
83.149.37.0/24 maxlen: 24
83.149.39.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
31.173.96.0/24 maxlen: 24
31.173.97.0/24 maxlen: 24
31.173.103.0/24 maxlen: 24
31.173.101.0/24 maxlen: 24
31.173.102.0/24 maxlen: 24
31.173.99.0/24 maxlen: 24
31.173.100.0/24 maxlen: 24
31.173.100.0/23 maxlen: 23
178.176.112.0/24 maxlen: 24
178.176.113.0/24 maxlen: 24
83.169.192.0/18 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
46.229.132.0/22 maxlen: 22
83.229.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e2:3b:f6:ec:ca:37:ee:29:07:0a:ba:55:78:44:a5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 5 12:21:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e964d67413738dff2982d9ffd2f40e065ce8113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:24:51:13:ba:4d:67:3c:30:69:36:7f:7f:51:
e4:2e:f6:88:40:7e:5c:40:73:ec:50:b2:d8:c6:82:
62:e4:8d:38:7e:62:05:79:6d:73:c7:e4:27:e7:bf:
85:fb:10:56:d5:68:16:b6:8e:ba:63:74:ae:26:3e:
77:ff:89:9f:88:d9:7e:a6:32:df:8e:b1:00:ed:3c:
c1:b1:41:25:12:41:9e:8b:58:19:02:28:13:5e:21:
ba:21:41:93:6a:9b:a5:fd:04:3d:62:99:99:7e:18:
af:61:73:2a:17:2d:c6:39:3c:da:4f:f9:ae:b8:45:
d1:62:65:3b:b0:ff:52:1b:69:26:93:7f:9f:ac:ce:
f3:e7:2b:36:9b:c1:6e:fa:c2:a6:3a:4d:c3:a6:2d:
57:00:5b:59:ac:1b:56:29:0a:36:0a:64:e7:82:5a:
20:9a:74:13:ab:21:42:79:fb:4a:a5:0b:74:22:70:
69:66:4f:8f:9f:8b:bf:7f:bf:36:e8:f1:99:77:b0:
ae:81:a1:36:15:df:1f:4c:f1:1e:ee:11:dd:a8:8e:
b2:fa:d1:6a:c7:f6:26:05:87:71:14:3e:8b:1a:3e:
2d:1c:d4:97:90:d6:27:fd:7d:b1:1d:ad:34:70:01:
f1:6a:10:62:37:37:e2:17:4c:57:b4:78:f1:f9:3f:
02:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:96:4D:67:41:37:38:DF:F2:98:2D:9F:FD:2F:40:E0:65:CE:81:13
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/DpZNZ0E3ON_ymC2f_S9A4GXOgRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.96.0/23
31.173.99.0-31.173.103.255
31.173.120.0/21
37.29.44.0/22
46.229.132.0/22
78.25.88.0/22
83.149.32.0/21
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.104.0-178.176.113.255
178.178.88.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
16:7e:76:00:93:b7:1c:32:97:c3:2c:18:70:77:e4:a8:a2:7a:
53:79:76:04:07:62:d0:34:81:6b:8f:fa:a8:ee:4a:f7:a6:fc:
30:5d:8b:72:9d:ff:23:72:1e:90:1e:ae:4c:9e:08:c5:23:f6:
47:f4:3e:37:ea:67:6a:47:2a:cf:9b:3a:f0:af:ef:82:52:66:
83:27:10:d4:e4:9e:88:ed:69:d6:02:e8:5d:80:77:d1:9a:f6:
4e:92:80:f1:ea:6d:f5:68:a0:8d:60:27:80:fe:44:cc:38:50:
fc:01:51:db:47:f2:80:a4:d7:e8:df:1c:ec:22:9f:f8:11:c3:
a7:c7:90:0f:7d:e8:7d:85:9b:a6:84:38:30:c2:ab:96:dd:5c:
1a:a2:dd:bc:67:0b:37:e9:7a:51:1f:14:71:95:c7:2d:b4:f4:
57:68:7d:4d:4e:7b:ca:74:39:26:61:9b:c9:b7:8c:e7:75:c5:
eb:3b:d6:d0:11:c7:c3:a5:a4:aa:ea:b1:2e:f7:f1:65:36:6e:
26:a0:a6:e2:73:e9:52:d1:2a:3a:62:f9:69:17:bc:0a:27:f8:
6d:1b:b5:8d:f3:f0:f1:f2:dc:70:74:cd:3d:84:9e:22:81:9e:
92:3b:62:d7:77:95:30:bd:dc:5f:9b:6b:78:a4:d1:c2:f0:e9:
bb:72:c4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:25 2024 by rpki-client on console-fra.rpki-client.org