Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/JYuWBBXkIscmM6e7sJP-wcgtnV8.roa
File: JYuWBBXkIscmM6e7sJP-wcgtnV8.roa (raw, json)
Hash identifier: rpXFA6g+EFqb48s2RyROeDJP5/59NCdb+Tn04b8E8Ws=
Subject key identifier: 25:8B:96:04:15:E4:22:C7:26:33:A7:BB:B0:93:FE:C1:C8:2D:9D:5F
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184D30EAB42444DCE14ED2F0A26C884C9CD
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/JYuWBBXkIscmM6e7sJP-wcgtnV8.roa
Signing time: Fri 02 Dec 2022 13:37:44 +0000
ROA not before: Fri 02 Dec 2022 13:37:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31205
IP address blocks: 109.188.0.0/16 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
188.170.247.0/24 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
178.176.240.0/22 maxlen: 22
78.25.92.0/23 maxlen: 23
78.25.94.0/23 maxlen: 23
178.176.244.0/22 maxlen: 22
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
37.29.86.0/23 maxlen: 23
188.170.240.0/22 maxlen: 22
31.173.240.0/23 maxlen: 23
195.5.128.0/19 maxlen: 24
31.173.242.0/23 maxlen: 23
128.204.64.0/18 maxlen: 24
31.173.244.0/22 maxlen: 22
95.137.0.0/17 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
81.24.128.0/20 maxlen: 24
83.149.50.0/24 maxlen: 24
83.149.48.0/24 maxlen: 24
83.149.51.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
83.149.49.0/24 maxlen: 24
178.176.48.0/24 maxlen: 24
83.169.192.0/18 maxlen: 24
109.74.112.0/20 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
46.232.202.0/23 maxlen: 23
46.232.200.0/23 maxlen: 23
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
212.44.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d3:0e:ab:42:44:4d:ce:14:ed:2f:0a:26:c8:84:c9:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 2 13:37:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=258b960415e422c72633a7bbb093fec1c82d9d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4e:15:27:f8:9e:cb:1e:18:d3:2a:6f:48:e0:
f8:27:0a:cc:ab:6c:9b:90:0e:b2:5c:d3:c1:8b:c0:
56:1f:11:3d:4e:f2:fc:9a:1a:5d:39:84:58:d7:94:
21:27:06:21:56:bb:9b:ea:0a:d7:98:6d:b9:75:0a:
5f:e7:b8:9b:82:d2:dd:36:6b:4d:73:1e:b5:b5:3a:
b4:aa:1d:c9:46:73:ae:0a:09:fb:46:62:be:b9:0d:
cd:2f:19:5c:dd:76:d1:e9:09:ee:dd:58:7f:d2:85:
b6:d8:f1:8e:9c:c1:f4:f6:52:2c:72:be:54:7c:69:
31:09:ed:67:0d:27:91:80:02:0d:d9:c2:08:38:4d:
a2:ec:21:50:7b:bc:43:6c:c8:f0:e3:57:54:93:46:
8b:f1:a0:6e:43:35:95:9b:df:2f:ce:3c:37:c0:bd:
b7:61:18:63:73:22:af:c3:cf:69:af:60:2e:95:db:
90:59:62:30:24:e3:3b:53:60:3f:f4:0d:4e:d1:47:
3f:98:bc:55:43:b3:13:0f:8e:c9:51:59:3d:4a:df:
17:e3:d9:1d:70:47:c5:ef:e2:fb:be:01:50:df:64:
87:6e:28:f0:62:aa:de:16:41:1c:49:d7:4c:24:c8:
22:0f:a8:ac:29:b5:0d:5e:e5:55:1b:bb:73:1e:3f:
a6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8B:96:04:15:E4:22:C7:26:33:A7:BB:B0:93:FE:C1:C8:2D:9D:5F
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/JYuWBBXkIscmM6e7sJP-wcgtnV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.240.0/21
37.29.86.0/23
46.232.200.0/22
78.25.92.0/22
80.247.176.0/20
81.24.128.0/20
83.149.48.0/22
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.48.0/24
178.176.240.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.240.0/22
188.170.247.0/24
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
34:cd:74:57:44:83:e6:47:d8:23:9a:37:45:b3:b5:fb:4e:68:
0c:4b:26:ed:e0:21:6c:ac:49:27:1a:f5:2b:a6:f2:b3:f9:d6:
89:84:c1:fe:44:67:9c:65:f2:74:cd:4f:03:3c:4c:80:af:93:
79:81:34:88:92:50:28:48:70:65:1d:26:af:4f:be:0f:ef:c7:
5b:a0:d3:4d:20:26:b1:6e:98:48:2a:72:eb:60:32:50:de:f7:
0f:1b:5e:a2:63:c5:0e:4d:b3:68:33:7b:93:79:7d:73:1a:aa:
1b:9c:b0:de:9b:9e:c2:11:ec:a3:6c:18:a5:9e:45:ef:b9:b2:
68:4d:74:b5:80:f4:35:8d:be:ea:c5:52:d4:86:90:85:18:7d:
4d:ce:8a:fc:2f:bd:84:3b:5b:26:db:16:65:6f:3f:56:7d:54:
ee:c2:7f:8f:fa:6b:92:c1:b3:71:75:1b:b7:da:fd:c1:3b:d1:
5d:e6:22:0c:4e:37:29:c0:cc:21:a5:e1:e6:e4:eb:85:23:a9:
fa:db:f3:23:60:18:5c:c7:e2:ca:e8:cb:e1:7d:ba:c3:af:38:
8f:ca:34:f4:7f:e8:13:3e:e0:ea:90:d5:a5:ad:25:84:69:2d:
f7:59:55:f2:b5:01:de:76:81:d8:0b:74:23:51:66:00:5e:87:
7f:94:9a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:53 2025 by rpki-client