Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/IBG8j-lBXMFf_yv8BeXNBuc3udg.roa
File: IBG8j-lBXMFf_yv8BeXNBuc3udg.roa (raw, json)
Hash identifier: RowgqS8MpGptsBWiFcADOu/skDrr1+1AwBKc1qEHaZw=
Subject key identifier: 20:11:BC:8F:E9:41:5C:C1:5F:FF:2B:FC:05:E5:CD:06:E7:37:B9:D8
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018505AE3A003E21BA1DC3962B1B3ABFED13
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/IBG8j-lBXMFf_yv8BeXNBuc3udg.roa
Signing time: Mon 12 Dec 2022 09:33:02 +0000
ROA not before: Mon 12 Dec 2022 09:33:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31163
IP address blocks: 85.26.189.0/24 maxlen: 24
85.26.188.0/24 maxlen: 24
85.26.187.0/24 maxlen: 24
85.26.191.0/24 maxlen: 24
193.201.228.0/22 maxlen: 24
85.26.190.0/24 maxlen: 24
85.26.179.0/24 maxlen: 24
85.26.176.0/23 maxlen: 23
85.26.178.0/24 maxlen: 24
85.26.181.0/24 maxlen: 24
85.26.185.0/24 maxlen: 24
85.26.180.0/24 maxlen: 24
85.26.184.0/24 maxlen: 24
85.26.183.0/24 maxlen: 24
85.26.182.0/24 maxlen: 24
85.26.186.0/24 maxlen: 24
31.173.192.0/24 maxlen: 24
31.173.193.0/24 maxlen: 24
31.173.197.0/24 maxlen: 24
31.173.196.0/24 maxlen: 24
31.173.195.0/24 maxlen: 24
31.173.199.0/24 maxlen: 24
31.173.194.0/24 maxlen: 24
31.173.198.0/24 maxlen: 24
31.173.201.0/24 maxlen: 24
31.173.205.0/24 maxlen: 24
31.173.204.0/24 maxlen: 24
31.173.200.0/24 maxlen: 24
31.173.203.0/24 maxlen: 24
31.173.202.0/24 maxlen: 24
31.173.206.0/24 maxlen: 24
31.173.209.0/24 maxlen: 24
31.173.213.0/24 maxlen: 24
31.173.208.0/24 maxlen: 24
31.173.212.0/24 maxlen: 24
31.173.207.0/24 maxlen: 24
31.173.211.0/24 maxlen: 24
31.173.210.0/24 maxlen: 24
31.173.217.0/24 maxlen: 24
31.173.216.0/24 maxlen: 24
31.173.215.0/24 maxlen: 24
31.173.219.0/24 maxlen: 24
31.173.214.0/24 maxlen: 24
31.173.218.0/24 maxlen: 24
31.173.221.0/24 maxlen: 24
31.173.220.0/24 maxlen: 24
31.173.223.0/24 maxlen: 24
31.173.222.0/24 maxlen: 24
109.106.192.0/24 maxlen: 24
109.106.193.0/24 maxlen: 24
109.106.197.0/24 maxlen: 24
109.106.196.0/24 maxlen: 24
109.106.195.0/24 maxlen: 24
109.106.199.0/24 maxlen: 24
109.106.194.0/24 maxlen: 24
109.106.198.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
178.178.2.0/24 maxlen: 24
178.178.3.0/24 maxlen: 24
178.178.0.0/24 maxlen: 24
178.178.4.0/24 maxlen: 24
178.178.1.0/24 maxlen: 24
178.178.5.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
37.29.119.0/24 maxlen: 24
37.29.123.0/24 maxlen: 24
37.29.122.0/24 maxlen: 24
37.29.125.0/24 maxlen: 24
37.29.121.0/24 maxlen: 24
37.29.124.0/24 maxlen: 24
37.29.120.0/24 maxlen: 24
37.29.127.0/24 maxlen: 24
37.29.126.0/24 maxlen: 24
185.3.32.0/23 maxlen: 23
185.3.34.0/23 maxlen: 23
178.176.215.0/24 maxlen: 24
178.176.219.0/24 maxlen: 24
178.176.214.0/24 maxlen: 24
178.176.218.0/24 maxlen: 24
178.176.217.0/24 maxlen: 24
178.176.216.0/24 maxlen: 24
178.176.223.0/24 maxlen: 24
178.176.222.0/24 maxlen: 24
178.176.221.0/24 maxlen: 24
178.176.220.0/24 maxlen: 24
188.170.191.0/24 maxlen: 24
188.170.187.0/24 maxlen: 24
188.170.190.0/24 maxlen: 24
188.170.189.0/24 maxlen: 24
188.170.192.0/24 maxlen: 24
188.170.188.0/24 maxlen: 24
188.170.195.0/24 maxlen: 24
188.170.199.0/24 maxlen: 24
188.170.194.0/24 maxlen: 24
188.170.198.0/24 maxlen: 24
188.170.193.0/24 maxlen: 24
188.170.197.0/24 maxlen: 24
188.170.196.0/24 maxlen: 24
188.170.200.0/22 maxlen: 22
188.170.204.0/22 maxlen: 22
188.170.211.0/24 maxlen: 24
188.170.210.0/24 maxlen: 24
188.170.209.0/24 maxlen: 24
188.170.213.0/24 maxlen: 24
188.170.208.0/24 maxlen: 24
188.170.212.0/24 maxlen: 24
188.170.215.0/24 maxlen: 24
188.170.214.0/24 maxlen: 24
188.170.218.0/24 maxlen: 24
188.170.217.0/24 maxlen: 24
188.170.219.0/24 maxlen: 24
188.170.216.0/24 maxlen: 24
188.170.220.0/24 maxlen: 24
188.170.224.0/24 maxlen: 24
188.170.221.0/24 maxlen: 24
188.170.225.0/24 maxlen: 24
188.170.222.0/24 maxlen: 24
188.170.226.0/24 maxlen: 24
188.170.223.0/24 maxlen: 24
188.170.227.0/24 maxlen: 24
37.29.112.0/24 maxlen: 24
37.29.115.0/24 maxlen: 24
37.29.114.0/24 maxlen: 24
37.29.118.0/24 maxlen: 24
37.29.113.0/24 maxlen: 24
37.29.117.0/24 maxlen: 24
37.29.116.0/24 maxlen: 24
188.170.171.0/24 maxlen: 24
188.170.170.0/24 maxlen: 24
188.170.169.0/24 maxlen: 24
188.170.168.0/21 maxlen: 21
188.170.172.0/24 maxlen: 24
188.170.175.0/24 maxlen: 24
188.170.179.0/24 maxlen: 24
188.170.174.0/24 maxlen: 24
188.170.178.0/24 maxlen: 24
188.170.173.0/24 maxlen: 24
188.170.177.0/24 maxlen: 24
188.170.176.0/24 maxlen: 24
188.170.183.0/24 maxlen: 24
188.170.182.0/24 maxlen: 24
188.170.186.0/24 maxlen: 24
188.170.181.0/24 maxlen: 24
188.170.185.0/24 maxlen: 24
188.170.180.0/24 maxlen: 24
188.170.184.0/24 maxlen: 24
83.149.24.0/24 maxlen: 24
83.149.28.0/24 maxlen: 24
83.149.25.0/24 maxlen: 24
83.149.29.0/24 maxlen: 24
83.149.31.0/24 maxlen: 24
83.149.30.0/24 maxlen: 24
83.169.232.0/24 maxlen: 24
83.169.233.0/24 maxlen: 24
83.169.240.0/24 maxlen: 24
83.169.237.0/24 maxlen: 24
83.169.234.0/24 maxlen: 24
83.169.238.0/24 maxlen: 24
83.169.235.0/24 maxlen: 24
83.169.239.0/24 maxlen: 24
83.169.244.0/24 maxlen: 24
83.169.241.0/24 maxlen: 24
83.169.245.0/24 maxlen: 24
83.169.242.0/24 maxlen: 24
83.169.246.0/24 maxlen: 24
83.169.243.0/24 maxlen: 24
83.169.247.0/24 maxlen: 24
178.176.192.0/24 maxlen: 24
178.176.195.0/24 maxlen: 24
178.176.194.0/24 maxlen: 24
178.176.198.0/24 maxlen: 24
178.176.193.0/24 maxlen: 24
178.176.197.0/24 maxlen: 24
178.176.196.0/24 maxlen: 24
178.176.203.0/24 maxlen: 24
178.176.202.0/24 maxlen: 24
178.176.211.0/24 maxlen: 24
178.176.210.0/24 maxlen: 24
178.176.213.0/24 maxlen: 24
178.176.209.0/24 maxlen: 24
178.176.212.0/24 maxlen: 24
178.176.208.0/24 maxlen: 24
188.162.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:ae:3a:00:3e:21:ba:1d:c3:96:2b:1b:3a:bf:ed:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 09:33:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2011bc8fe9415cc15fff2bfc05e5cd06e737b9d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:83:16:98:88:31:3b:8c:59:7f:57:99:76:66:
8f:7c:f9:47:49:3a:d7:71:9e:45:47:0d:a8:29:eb:
71:76:aa:9e:28:59:5d:9a:1d:ae:fd:9c:68:09:92:
1f:27:a9:ee:4f:07:8e:c8:14:ca:db:20:54:5d:c9:
1e:64:32:cb:cb:9d:8d:64:9c:74:92:f4:40:31:d7:
2a:60:76:87:4b:01:ed:fb:4b:37:f8:dc:86:38:b4:
c1:80:69:ca:ce:b1:9d:a9:a9:c5:3b:8a:98:46:05:
04:94:99:24:48:85:6d:13:6b:c4:ef:51:ed:ce:54:
df:ba:0e:e3:08:48:30:12:d4:a7:d9:a1:5f:7a:36:
57:c1:0a:e7:9e:06:15:ef:5f:05:2e:47:f8:2a:74:
f2:e7:2e:fa:74:d2:c0:7b:19:bf:75:a2:ae:43:d4:
8c:67:09:c3:ec:e2:86:53:7d:b4:00:d8:07:b8:fa:
36:fc:18:77:2f:19:4e:1c:24:e4:a0:6e:bd:6a:85:
56:a8:77:95:09:de:15:3d:7f:a4:c8:7d:b5:1d:70:
95:1f:2e:d9:cc:06:7a:2b:68:ed:04:be:17:be:ee:
f5:01:39:75:12:45:87:12:bd:ea:2e:08:a5:42:b7:
94:be:71:9d:d7:8c:ae:a5:28:d9:a6:1c:4b:2a:f8:
0f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:11:BC:8F:E9:41:5C:C1:5F:FF:2B:FC:05:E5:CD:06:E7:37:B9:D8
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/IBG8j-lBXMFf_yv8BeXNBuc3udg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.192.0/19
37.29.112.0/20
83.149.24.0/23
83.149.28.0/22
83.169.232.0/22
83.169.237.0-83.169.247.255
85.26.176.0/20
109.106.192.0/21
178.176.192.0-178.176.198.255
178.176.202.0/23
178.176.208.0/20
178.178.0.0-178.178.5.255
185.3.32.0/22
188.162.0.0/16
188.170.168.0-188.170.227.255
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
Signature Algorithm: sha256WithRSAEncryption
9e:1b:a3:4a:0b:08:74:cc:ea:fa:a2:b9:5e:c0:f6:2b:2d:8c:
3c:4b:1c:4f:ae:3f:dd:ce:32:d6:d8:4f:13:55:e6:b6:9f:87:
8f:8e:c7:85:ce:45:53:80:78:c9:0b:20:f6:fb:b3:b3:d3:2c:
70:2c:b4:61:bd:9b:7d:0f:4d:b9:60:3f:9d:79:81:71:a8:80:
a5:65:ac:08:cc:7f:3a:14:50:d8:54:9e:19:7c:db:c5:5c:d7:
7d:fd:f1:ab:a0:5b:4a:96:3f:fa:18:ae:27:f0:a8:92:fb:db:
52:04:cd:6d:72:da:9c:08:49:82:47:58:2c:d6:ab:5e:2d:6f:
26:05:48:f9:f8:a3:af:3f:8c:e9:c9:df:93:ff:42:d8:53:18:
a6:18:bc:18:a7:48:84:09:9c:c5:13:3e:7d:cf:5f:68:8d:87:
09:8a:9f:f2:fc:b1:b2:0a:80:97:4d:85:c6:77:aa:a3:e4:be:
ed:11:3d:01:ba:50:d1:78:fe:16:97:6f:fc:1f:00:56:c8:1e:
9f:7b:88:7c:9a:51:64:ab:08:d6:03:ec:5c:99:73:f2:a2:e3:
8a:31:8e:fd:74:5b:69:42:90:d6:1d:ec:24:c8:e2:99:88:be:
e2:8d:21:d1:15:13:4d:61:bc:25:62:9f:f2:c7:d2:7d:99:6b:
6f:79:d4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:07 2025 by rpki-client