Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/JpnfVMiPsirWmsTEBHe5rG4Ql9A.roa
File: JpnfVMiPsirWmsTEBHe5rG4Ql9A.roa (raw, json)
Hash identifier: nIPDf/9hL4sgOMioC1gOWM3cZjAvpQaOgEIkEipQO3w=
Subject key identifier: 26:99:DF:54:C8:8F:B2:2A:D6:9A:C4:C4:04:77:B9:AC:6E:10:97:D0
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F1C2C1E5ECC1A0D730DD5F878E5805E4
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/JpnfVMiPsirWmsTEBHe5rG4Ql9A.roa
Signing time: Thu 08 Dec 2022 12:43:03 +0000
ROA not before: Thu 08 Dec 2022 12:43:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31224
IP address blocks: 195.16.96.0/19 maxlen: 24
85.26.192.0/22 maxlen: 22
193.201.228.0/22 maxlen: 24
178.178.88.0/22 maxlen: 22
178.178.92.0/22 maxlen: 22
178.23.144.0/21 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
212.69.96.0/19 maxlen: 24
31.173.123.0/24 maxlen: 24
31.173.122.0/24 maxlen: 24
31.173.121.0/24 maxlen: 24
31.173.125.0/24 maxlen: 24
31.173.120.0/24 maxlen: 24
31.173.124.0/24 maxlen: 24
31.173.127.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
31.173.126.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
78.25.88.0/22 maxlen: 22
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
37.29.44.0/22 maxlen: 22
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
178.176.104.0/21 maxlen: 21
83.149.32.0/22 maxlen: 22
83.149.36.0/22 maxlen: 22
83.149.34.0/24 maxlen: 24
83.149.37.0/24 maxlen: 24
83.149.39.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
31.173.96.0/24 maxlen: 24
31.173.97.0/24 maxlen: 24
31.173.102.0/24 maxlen: 24
31.173.99.0/24 maxlen: 24
31.173.103.0/24 maxlen: 24
31.173.100.0/24 maxlen: 24
31.173.100.0/23 maxlen: 23
31.173.101.0/24 maxlen: 24
178.176.112.0/24 maxlen: 24
178.176.113.0/24 maxlen: 24
83.169.216.0/24 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
46.229.132.0/22 maxlen: 22
212.44.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:c2:c1:e5:ec:c1:a0:d7:30:dd:5f:87:8e:58:05:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 12:43:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2699df54c88fb22ad69ac4c40477b9ac6e1097d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8e:9c:2b:2a:7d:49:c1:c8:ba:21:b8:50:ff:
0f:61:1d:11:a0:8b:fb:20:b1:af:7f:b7:50:59:18:
f7:95:14:b9:5b:67:63:f5:95:e6:e0:44:d6:2b:2a:
1a:2a:22:69:f2:84:0b:91:2b:e6:49:60:db:82:d6:
f0:eb:7c:5f:89:d1:eb:6f:5e:5e:fb:8e:7c:4c:21:
ea:e1:70:08:6d:e8:f2:db:71:c1:74:66:37:17:08:
79:fb:10:26:51:3a:7c:08:cc:88:45:f8:5f:3f:28:
85:9a:71:74:a9:26:a5:df:18:30:31:c0:23:05:60:
c8:2a:db:a1:7d:c1:e0:8e:15:86:02:92:43:0c:f2:
7f:b8:28:d0:ff:52:04:6d:bf:a5:1c:ff:a0:03:f8:
8d:4d:19:de:29:27:df:72:cd:d1:96:cb:5e:a4:08:
81:f4:45:18:bc:d7:09:34:83:c3:91:cc:4c:22:b1:
95:f4:23:4c:cb:36:47:6e:72:9b:19:34:b2:13:34:
e2:d4:32:a8:26:85:3f:a3:22:74:8e:ad:85:d9:77:
b7:10:8f:06:af:73:94:d9:2c:c7:e0:4e:1e:98:e9:
1c:28:18:10:9c:9b:5d:1d:7e:af:db:d9:99:5a:38:
c0:a3:d3:c1:00:62:8f:d6:ee:df:cc:26:4f:4b:4a:
c4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:99:DF:54:C8:8F:B2:2A:D6:9A:C4:C4:04:77:B9:AC:6E:10:97:D0
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/JpnfVMiPsirWmsTEBHe5rG4Ql9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.96.0/23
31.173.99.0-31.173.103.255
31.173.120.0/21
37.29.44.0/22
46.229.132.0/22
78.25.88.0/22
83.149.32.0/21
83.169.216.0/24
85.26.192.0/22
128.204.64.0/18
178.23.144.0/21
178.176.104.0-178.176.113.255
178.178.88.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
12:b3:36:14:b7:63:2b:8c:70:58:f2:f5:7d:da:2d:6a:e3:ba:
bb:e0:8b:fc:9c:dc:91:2c:f6:e0:5a:c2:da:65:b5:83:b9:92:
a5:f8:2b:f9:c3:ce:81:2e:28:45:52:b0:a7:12:81:d9:38:43:
36:8e:d2:f8:3a:6f:ae:ba:97:b9:ea:46:4f:89:c2:d7:00:44:
1e:65:89:d8:61:52:64:f5:5e:bd:e8:22:ae:c1:2d:c3:f5:15:
9e:65:83:63:14:37:1c:1c:7e:79:fd:cb:ba:8a:45:34:3c:69:
93:d0:f1:0f:63:2e:e2:a3:86:c2:b4:28:1c:3a:73:91:eb:fd:
0a:1e:96:b8:8f:7e:a6:32:a8:83:b7:db:2a:68:7e:75:ea:d9:
d9:f1:af:b3:c2:85:1b:22:67:5b:6b:9a:d1:87:90:97:8f:3c:
32:d9:9b:b4:58:56:f9:c6:7a:4a:c4:75:e9:af:87:2d:4e:1e:
7f:ea:ce:78:a9:f9:a6:0d:32:0b:49:f1:1a:f2:ac:4a:fa:d8:
ef:eb:c3:aa:8d:a1:6b:0c:c5:a2:69:b6:00:fe:e1:c3:9a:93:
c9:41:fe:33:4c:57:51:4b:2e:ed:6f:b5:58:83:da:49:8b:7d:
71:fb:07:f3:f7:0d:58:9c:c6:d6:98:0f:39:b5:c5:d5:93:2f:
f2:74:e4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:25 2024 by rpki-client on console-fra.rpki-client.org