Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/J9_SjF1_yKLJsQ2SrfHaIth4VEA.roa
File: J9_SjF1_yKLJsQ2SrfHaIth4VEA.roa (raw, json)
Hash identifier: whW/4xvwcxD8R6CscPKIg2ZDN+3aLXdLgmBZOTLNNSI=
Subject key identifier: 27:DF:D2:8C:5D:7F:C8:A2:C9:B1:0D:92:AD:F1:DA:22:D8:78:54:40
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F1271B4B3E5E2BF2B3107F7F7DA2E04F
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/J9_SjF1_yKLJsQ2SrfHaIth4VEA.roa
Signing time: Thu 08 Dec 2022 09:53:02 +0000
ROA not before: Thu 08 Dec 2022 09:53:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25159
IP address blocks: 109.188.0.0/16 maxlen: 24
195.16.96.0/19 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
85.26.144.0/20 maxlen: 20
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
78.25.119.0/24 maxlen: 24
94.25.128.0/17 maxlen: 24
212.69.96.0/19 maxlen: 24
188.170.25.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
188.170.32.0/21 maxlen: 21
188.170.40.0/21 maxlen: 21
37.28.176.0/21 maxlen: 21
212.119.160.0/19 maxlen: 24
178.177.0.0/18 maxlen: 18
178.177.3.0/24 maxlen: 24
78.25.112.0/22 maxlen: 22
78.25.116.0/23 maxlen: 23
78.25.118.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
37.29.32.0/21 maxlen: 21
95.137.0.0/17 maxlen: 24
178.176.52.0/22 maxlen: 22
178.176.72.0/21 maxlen: 21
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
31.173.0.0/21 maxlen: 21
31.173.8.0/21 maxlen: 21
178.176.0.0/19 maxlen: 19
83.229.254.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
178.176.32.0/21 maxlen: 21
178.176.40.0/21 maxlen: 21
31.173.72.0/21 maxlen: 21
31.173.80.0/21 maxlen: 21
31.173.88.0/21 maxlen: 21
188.170.0.0/19 maxlen: 19
188.170.24.0/24 maxlen: 24
31.173.16.0/21 maxlen: 21
31.173.24.0/21 maxlen: 21
31.173.32.0/19 maxlen: 19
31.173.60.0/24 maxlen: 24
31.173.64.0/21 maxlen: 21
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 24
62.64.0.0/20 maxlen: 20
213.243.64.0/18 maxlen: 24
83.229.211.0/24 maxlen: 24
217.115.80.0/20 maxlen: 24
46.229.128.0/22 maxlen: 22
212.44.64.0/19 maxlen: 24
83.222.212.0/22 maxlen: 22
83.222.216.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:27:1b:4b:3e:5e:2b:f2:b3:10:7f:7f:7d:a2:e0:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 09:53:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27dfd28c5d7fc8a2c9b10d92adf1da22d8785440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:4b:5b:5b:3e:95:1a:d3:70:46:6e:99:5a:f8:
2f:ce:8a:7a:62:bd:2c:48:9e:51:d6:29:4f:aa:8c:
85:67:0e:18:38:c4:e2:66:3e:60:ff:c6:bb:7c:83:
eb:b0:7a:64:71:99:3e:09:e0:60:3b:4f:5a:51:9e:
6e:d0:31:dd:fa:97:a3:4e:de:8d:fe:8f:8b:02:02:
02:46:63:bb:2a:35:3a:1d:64:96:c7:a6:9e:53:0b:
1d:b0:8d:e5:8d:66:c1:84:6a:c9:ff:43:50:12:c7:
ef:a7:53:07:38:2b:db:1d:39:d2:49:7e:b2:43:00:
31:3e:45:0f:ef:34:43:76:2e:06:69:73:4c:16:e1:
ad:d6:81:28:95:36:9e:ea:e0:81:95:ba:3f:a8:66:
cf:db:95:c0:7a:db:da:29:7a:21:57:43:f1:84:72:
70:e0:0b:58:0a:a7:4a:8b:94:a6:2f:50:6a:23:f5:
26:2e:fb:b7:32:64:ca:93:17:a4:9f:05:5b:02:be:
29:41:1e:a4:f9:ae:55:18:1c:87:37:a9:ec:1c:ce:
ce:b3:35:42:65:36:58:7b:5e:70:2f:a7:fb:66:34:
13:e5:0a:f5:35:fe:b4:f7:11:cd:42:1b:d4:3f:b4:
85:c4:45:54:a7:d9:7c:40:31:0c:1e:27:aa:fc:fa:
5b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:DF:D2:8C:5D:7F:C8:A2:C9:B1:0D:92:AD:F1:DA:22:D8:78:54:40
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/J9_SjF1_yKLJsQ2SrfHaIth4VEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.0.0-31.173.95.255
37.28.176.0/21
37.29.32.0/21
46.229.128.0/22
62.64.0.0/20
78.25.112.0/21
83.222.212.0-83.222.223.255
83.229.211.0/24
83.229.254.0/24
85.26.144.0/20
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.0.0-178.176.47.255
178.176.52.0/22
178.176.72.0/21
178.177.0.0/18
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.0.0-188.170.47.255
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
62:eb:56:44:24:68:b6:9f:0d:08:5d:3d:18:85:f9:1b:3b:97:
bc:b9:a9:2c:14:d8:04:30:bb:dd:30:99:15:c3:f2:63:ae:5e:
9b:2c:b8:67:1a:6b:1f:29:9a:2e:26:d0:35:82:b2:95:6f:88:
86:a7:fa:88:2e:92:9f:7b:62:85:90:3a:c0:58:f5:77:ea:06:
9c:d0:25:98:53:ba:70:2b:80:97:31:57:12:96:ae:76:f1:88:
2f:36:8e:f9:11:fb:e2:e9:c9:6e:79:44:22:1f:f6:4c:c1:10:
c1:4e:bc:a2:10:75:38:6f:ae:65:9e:56:5f:b1:a1:aa:bb:27:
cb:c5:87:06:1e:88:51:d4:57:24:cc:2c:1d:87:8c:a3:01:50:
5e:30:86:23:71:d9:7b:2d:5d:a0:8f:91:7e:a7:15:7e:b6:dd:
fc:b4:0d:39:2a:ae:49:14:c8:36:9e:41:f9:20:7b:c6:c6:11:
82:05:11:73:eb:36:9e:0c:b0:56:d3:5f:90:a1:ff:c6:05:59:
06:df:fd:84:63:01:1e:33:85:f6:53:cd:5d:da:24:b4:6a:d9:
30:c6:0c:18:75:d1:db:7a:f7:bf:69:4d:8c:41:59:9f:2f:75:
49:d3:f9:d9:85:76:dd:74:9c:4d:12:50:f1:39:b6:15:28:8b:
8b:3a:d3:f6
-----BEGIN CERTIFICATE-----
MIIGDDCCBPSgAwIBAgISAYTxJxtLPl4r8rMQf399ouBPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMjA4MDk1MzAyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyN2RmZDI4YzVkN2ZjOGEyYzliMTBkOTJhZGYxZGEyMmQ4Nzg1NDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60tbWz6VGtNwRm6ZWvgvzop6Yr0s
SJ5R1ilPqoyFZw4YOMTiZj5g/8a7fIPrsHpkcZk+CeBgO09aUZ5u0DHd+pejTt6N
/o+LAgICRmO7KjU6HWSWx6aeUwsdsI3ljWbBhGrJ/0NQEsfvp1MHOCvbHTnSSX6y
QwAxPkUP7zRDdi4GaXNMFuGt1oEolTae6uCBlbo/qGbP25XAetvaKXohV0PxhHJw
4AtYCqdKi5SmL1BqI/UmLvu3MmTKkxeknwVbAr4pQR6k+a5VGByHN6nsHM7OszVC
ZTZYe15wL6f7ZjQT5Qr1Nf609xHNQhvUP7SFxEVUp9l8QDEMHieq/PpbXwIDAQAB
o4IDGDCCAxQwHQYDVR0OBBYEFCff0oxdf8iiybENkq3x2iLYeFRAMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvSjlfU2pGMV95S0xKc1EyU3JmSGFJdGg0VkVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBLAYIKwYBBQUHAQcBAf8EggEbMIIBFzCCARMEAgABMIIB
CzALAwMAH60DBAUfrUADBAMlHLADBAMlHSADBAIu5YADBAQ+QAADBANOGXAwDAME
AlPe1AMEBVPewAMEAFPl0wMEAFPl/gMEBFUakAMEB14ZgAMEB1+JAAMEBG1KcAME
Bm18QAMDAG28AwQGgMxAAwQDsheQMAsDAwSysAMEBLKwIAMEArKwNAMEA7KwSAME
BrKxAAMEArkDIAMEArnSjAMEA7xeqAMDALyiMAsDAwG8qgMEBLyqIAMEAsHJ5AME
BcMFgAMEBcMQYAMEAcNOdAMEAMOVbwMEBcPmQAMEBdQOoAMEBdQsQAMEBdRFYAME
BdR3oAMEBdWaoAMEBdWoIAMEBtXzQAMEBNlzUDANBgkqhkiG9w0BAQsFAAOCAQEA
YutWRCRotp8NCF09GIX5GzuXvLmpLBTYBDC73TCZFcPyY65emyy4ZxprHymaLibQ
NYKylW+Ihqf6iC6Sn3tihZA6wFj1d+oGnNAlmFO6cCuAlzFXEpaudvGILzaO+RH7
4unJbnlEIh/2TMEQwU68ohB1OG+uZZ5WX7Ghqrsny8WHBh6IUdRXJMwsHYeMowFQ
XjCGI3HZey1doI+RfqcVfrbd/LQNOSquSRTINp5B+SB7xsYRggURc+s2ngywVtNf
kKH/xgVZBt/9hGMBHjOF9lPNXdoktGrZMMYMGHXR23r3v2lNjEFZny91SdP52YV2
3XScTRJQ8Tm2FSiLizrT9g==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:51 2025 by rpki-client