Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/JSmrL_2IstoamZOLw0IbCXtXygE.roa
File: JSmrL_2IstoamZOLw0IbCXtXygE.roa (raw, json)
Hash identifier: 69hAxqTcmLM/crCZpwfW1yYLkHVEK27RKGl1A0nhr1g=
Subject key identifier: 25:29:AB:2F:FD:88:B2:DA:1A:99:93:8B:C3:42:1B:09:7B:57:CA:01
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F1C2C0803C8B210092CB38DA9190993C
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/JSmrL_2IstoamZOLw0IbCXtXygE.roa
Signing time: Thu 08 Dec 2022 12:43:02 +0000
ROA not before: Thu 08 Dec 2022 12:43:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31208
IP address blocks: 195.16.96.0/19 maxlen: 24
178.178.84.0/22 maxlen: 22
178.178.82.0/24 maxlen: 24
178.178.80.0/23 maxlen: 23
193.201.228.0/22 maxlen: 24
178.178.131.0/24 maxlen: 24
178.178.130.0/24 maxlen: 24
178.23.144.0/21 maxlen: 24
178.178.129.0/24 maxlen: 24
178.178.132.0/24 maxlen: 24
178.178.128.0/24 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
212.69.96.0/19 maxlen: 24
185.210.140.0/22 maxlen: 24
178.176.230.0/23 maxlen: 23
212.119.160.0/19 maxlen: 24
37.28.186.0/24 maxlen: 24
188.170.50.0/24 maxlen: 24
37.28.184.0/24 maxlen: 24
188.170.48.0/24 maxlen: 24
37.28.185.0/24 maxlen: 24
188.170.49.0/24 maxlen: 24
188.170.54.0/24 maxlen: 24
188.170.55.0/24 maxlen: 24
37.28.187.0/24 maxlen: 24
188.170.56.0/24 maxlen: 24
188.170.52.0/24 maxlen: 24
188.170.57.0/24 maxlen: 24
188.170.53.0/24 maxlen: 24
188.170.62.0/24 maxlen: 24
188.170.63.0/24 maxlen: 24
188.170.59.0/24 maxlen: 24
188.170.60.0/24 maxlen: 24
188.170.61.0/24 maxlen: 24
37.29.75.0/24 maxlen: 24
37.29.74.0/24 maxlen: 24
37.29.73.0/24 maxlen: 24
37.29.72.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
178.176.58.0/24 maxlen: 24
178.176.56.0/24 maxlen: 24
178.176.57.0/24 maxlen: 24
178.176.62.0/24 maxlen: 24
178.176.63.0/24 maxlen: 24
178.176.59.0/24 maxlen: 24
178.176.60.0/24 maxlen: 24
178.176.61.0/24 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
83.149.41.0/24 maxlen: 24
83.149.44.0/23 maxlen: 23
83.149.40.0/24 maxlen: 24
83.149.42.0/23 maxlen: 23
195.78.116.0/23 maxlen: 24
83.149.46.0/23 maxlen: 23
83.169.212.0/24 maxlen: 24
83.169.208.0/24 maxlen: 24
83.169.213.0/24 maxlen: 24
83.169.209.0/24 maxlen: 24
83.169.210.0/24 maxlen: 24
83.169.211.0/24 maxlen: 24
83.169.214.0/24 maxlen: 24
83.169.215.0/24 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
178.178.135.0/24 maxlen: 24
178.178.134.0/24 maxlen: 24
178.178.137.0/24 maxlen: 24
178.178.133.0/24 maxlen: 24
178.178.136.0/24 maxlen: 24
178.178.143.0/24 maxlen: 24
178.178.142.0/24 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
46.229.136.0/22 maxlen: 22
46.229.141.0/24 maxlen: 24
46.229.140.0/24 maxlen: 24
46.229.143.0/24 maxlen: 24
46.229.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:c2:c0:80:3c:8b:21:00:92:cb:38:da:91:90:99:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 12:43:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2529ab2ffd88b2da1a99938bc3421b097b57ca01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a2:87:40:5b:ec:11:c2:af:72:25:aa:1c:ee:
02:83:58:8a:2b:35:e3:3d:90:59:0b:be:a4:c8:51:
db:83:78:fb:ea:3c:9e:d1:c5:41:db:3d:51:67:1f:
8b:02:74:31:29:b4:ea:7e:95:30:f0:a9:10:d2:39:
a0:41:97:ff:db:04:31:85:bb:2a:5a:cf:dc:f6:c8:
53:82:ed:cc:3e:c0:0a:4a:7e:54:a2:83:b6:5e:19:
7c:bf:62:cf:b7:1f:3e:eb:59:c5:56:e6:e2:2c:fe:
7c:6b:af:87:61:fe:cb:1a:4b:77:3e:3e:cc:d3:43:
e3:87:b6:6f:e6:21:92:3d:9f:76:61:2e:66:c0:c7:
a3:b2:d4:55:b0:a0:06:c0:50:c4:81:cd:1d:69:9c:
96:f9:db:3d:3f:53:2c:52:80:c4:33:d8:d7:78:86:
f2:23:f9:c6:6d:5d:1f:17:5a:ac:9b:98:1f:ec:13:
0d:e4:0c:0b:33:1d:24:6b:bf:30:12:32:02:13:2c:
fe:5a:ab:82:94:79:b1:0d:3d:d3:2a:c7:47:c2:c3:
e1:6c:cc:72:b2:4b:43:9e:75:24:fc:e7:fc:1b:91:
6b:cc:de:a1:67:0d:00:54:ba:c0:b4:87:c0:d6:1f:
9c:7b:a9:80:a0:f9:a0:34:96:cc:af:3d:4d:0c:41:
14:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:29:AB:2F:FD:88:B2:DA:1A:99:93:8B:C3:42:1B:09:7B:57:CA:01
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/JSmrL_2IstoamZOLw0IbCXtXygE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.28.184.0/22
37.29.72.0/22
46.229.136.0/21
83.149.40.0/21
83.169.208.0/21
128.204.64.0/18
178.23.144.0/21
178.176.56.0/21
178.176.230.0/23
178.178.80.0-178.178.82.255
178.178.84.0/22
178.178.128.0-178.178.137.255
178.178.142.0/23
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.48.0-188.170.50.255
188.170.52.0-188.170.57.255
188.170.59.0-188.170.63.255
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
06:b6:77:84:86:28:09:e5:0c:84:6d:87:e9:7d:24:d6:24:e1:
08:37:c7:60:48:8c:94:22:99:9e:3d:ca:41:7e:c9:d0:ec:be:
d9:d2:8a:dd:ed:48:a0:fb:5a:2b:f2:2a:e7:ae:76:84:27:25:
71:ed:46:5a:88:51:dc:0c:25:b4:40:6c:f6:c5:0a:ea:b7:c2:
49:17:9d:53:d1:2d:d2:19:41:bf:56:25:cd:ab:49:cc:f6:73:
af:72:3a:a9:e8:29:37:3f:45:d0:47:57:f2:f8:59:35:07:bb:
09:fb:73:67:46:ed:fa:47:a7:f9:5d:0e:d0:16:ea:27:95:4e:
88:a2:4a:79:32:00:08:41:49:29:d8:b0:82:6a:97:26:cd:6a:
77:64:be:56:5f:b1:95:70:63:cf:53:84:28:39:04:b7:e2:82:
f4:ee:c6:db:fe:90:e7:6e:7d:2b:1f:1c:a3:1a:2e:a3:ee:8f:
90:d0:51:bd:36:df:9c:de:9d:26:da:9d:d4:06:bb:5a:39:1b:
bc:81:5c:5b:7b:b5:3d:49:bc:f6:d1:66:7f:9f:a7:5b:16:4a:
06:21:4b:d2:fb:70:3c:15:61:52:98:76:7f:32:24:43:ee:2b:
a0:fe:7c:ca:61:0f:27:a2:35:0f:e0:fd:d0:1e:d3:26:fd:de:
5c:65:2f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:34 2024 by rpki-client on console-ams.rpki-client.org