Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/IWovb3Z4JUOyAXppuGInpInTH-w.roa
File: IWovb3Z4JUOyAXppuGInpInTH-w.roa (raw, json)
Hash identifier: wLDgUJOwETUBZG9Oh+h/fYw+UbNGJGH+TmFZNPZk710=
Subject key identifier: 21:6A:2F:6F:76:78:25:43:B2:01:7A:69:B8:62:27:A4:89:D3:1F:EC
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184191E1E7995128A5E8E862A95ADD51943
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/IWovb3Z4JUOyAXppuGInpInTH-w.roa
Signing time: Thu 27 Oct 2022 11:05:15 +0000
ROA not before: Thu 27 Oct 2022 11:05:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31195
IP address blocks: 109.188.0.0/16 maxlen: 24
46.29.192.0/21 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
37.29.0.0/17 maxlen: 24
31.173.225.0/24 maxlen: 24
31.173.226.0/24 maxlen: 24
37.28.160.0/19 maxlen: 24
78.25.64.0/18 maxlen: 24
185.210.140.0/22 maxlen: 24
31.173.132.0/23 maxlen: 23
31.173.134.0/23 maxlen: 23
31.173.135.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
31.173.143.0/24 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
31.173.230.0/24 maxlen: 24
31.173.231.0/24 maxlen: 24
31.173.228.0/23 maxlen: 23
31.173.232.0/23 maxlen: 23
31.173.228.0/24 maxlen: 24
31.173.229.0/24 maxlen: 24
31.173.238.0/24 maxlen: 24
31.173.235.0/24 maxlen: 24
31.173.239.0/24 maxlen: 24
31.173.236.0/23 maxlen: 23
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 24
83.149.52.0/22 maxlen: 22
83.169.192.0/18 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
46.232.200.0/21 maxlen: 24
62.64.0.0/19 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
46.229.128.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:19:1e:1e:79:95:12:8a:5e:8e:86:2a:95:ad:d5:19:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 27 11:05:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=216a2f6f76782543b2017a69b86227a489d31fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:8f:cd:0d:d9:39:7d:f5:a3:f5:07:85:23:58:
9e:35:81:00:57:2e:d5:ba:f0:49:c3:fa:47:14:20:
81:f7:1f:aa:e0:eb:0d:a7:d7:3d:01:e6:5f:9f:cc:
af:f0:6b:30:58:ab:93:56:16:61:60:45:b9:08:83:
fb:93:85:e7:c9:ef:8f:c5:96:16:a7:2a:10:ad:71:
fd:06:39:e4:05:c3:7a:ba:8b:f8:af:26:05:5c:8d:
4a:a6:aa:89:27:e0:82:cd:08:3c:59:53:fc:5b:3f:
de:0b:0e:0b:be:64:3e:ce:67:e2:97:0d:db:a6:1b:
e9:44:ec:0b:97:b1:ed:fc:5c:4a:b2:dc:e7:5b:30:
12:6c:81:f4:97:32:4f:25:84:06:d6:6f:97:c0:75:
00:c6:98:9b:47:52:ce:42:83:67:01:60:ed:c8:a4:
8a:b0:d6:8f:b3:4a:d6:e0:04:85:22:c7:97:aa:b3:
d6:9d:d0:6f:c0:d9:83:b7:b6:6a:13:06:90:1a:37:
05:71:e8:e7:30:1e:22:3d:bb:73:08:d9:3f:89:10:
64:15:08:bc:ce:ba:72:7e:5e:48:5c:53:7d:06:cb:
64:91:1f:03:63:2d:38:bb:ba:68:bb:1d:3a:81:5d:
60:5a:d9:33:2f:e7:8c:60:22:0b:3b:9d:f3:56:03:
36:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:6A:2F:6F:76:78:25:43:B2:01:7A:69:B8:62:27:A4:89:D3:1F:EC
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/IWovb3Z4JUOyAXppuGInpInTH-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.132.0/22
31.173.143.0/24
31.173.225.0-31.173.226.255
31.173.228.0-31.173.233.255
31.173.235.0-31.173.239.255
37.28.160.0/19
37.29.0.0/17
46.29.192.0/21
46.229.128.0/20
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.149.52.0/22
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
0f:75:fc:a5:40:27:6e:98:34:c2:59:bb:c0:93:bd:91:04:b4:
00:94:e1:4a:b0:65:37:dc:18:24:e6:ac:84:84:71:0c:8a:a8:
85:59:ab:98:f8:80:7a:4b:07:f4:d2:71:f9:c3:11:a7:06:d0:
0d:7e:a5:78:5f:5b:2a:36:76:9b:2f:86:78:2d:6a:6b:4f:88:
4a:2b:dd:05:46:db:ff:46:4f:9b:57:10:44:3f:3d:f8:85:de:
6e:bf:d4:a3:62:9a:f1:d3:94:2e:f7:33:5f:df:82:4d:67:b6:
da:bf:cb:bb:c6:7b:38:8d:87:47:fa:0d:ea:79:aa:a9:ee:90:
79:f6:2e:ba:c7:59:d1:0b:cc:3f:a3:62:ec:29:3a:08:d1:f6:
af:8b:94:38:f7:2d:69:04:ca:9f:58:5b:46:d6:ab:4e:05:f4:
ff:b6:e5:68:07:29:04:28:fa:12:8c:97:c5:7c:7c:7e:8b:c5:
6a:e4:c2:33:ef:ce:db:64:05:87:a6:3a:0b:e8:27:1a:5c:0e:
65:b5:d6:71:5f:d3:a6:ac:3c:80:4c:1a:37:40:4d:fe:15:fb:
3e:31:2d:97:41:bf:26:40:24:a9:73:83:6f:da:a8:9e:03:6c:
39:28:e1:34:e1:5e:2a:ea:fb:f6:fe:9f:88:d8:93:59:98:17:
07:8d:4d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:44 2025 by rpki-client