Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/K2-MdD3sB-WgRrygpMP-U4gPREw.roa
File: K2-MdD3sB-WgRrygpMP-U4gPREw.roa (raw, json)
Hash identifier: d+FgOG6cYFeV+r1CdWc5U0pm6t1l2k0YcMKPINxNDGQ=
Subject key identifier: 2B:6F:8C:74:3D:EC:07:E5:A0:46:BC:A0:A4:C3:FE:53:88:0F:44:4C
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018505A4280A10266FAC6642FDEC7A1EE599
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/K2-MdD3sB-WgRrygpMP-U4gPREw.roa
Signing time: Mon 12 Dec 2022 09:22:02 +0000
ROA not before: Mon 12 Dec 2022 09:22:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31163
IP address blocks: 85.26.189.0/24 maxlen: 24
85.26.188.0/24 maxlen: 24
85.26.187.0/24 maxlen: 24
85.26.191.0/24 maxlen: 24
193.201.228.0/22 maxlen: 24
85.26.190.0/24 maxlen: 24
85.26.179.0/24 maxlen: 24
85.26.176.0/23 maxlen: 23
85.26.178.0/24 maxlen: 24
85.26.181.0/24 maxlen: 24
85.26.185.0/24 maxlen: 24
85.26.180.0/24 maxlen: 24
85.26.184.0/24 maxlen: 24
85.26.183.0/24 maxlen: 24
85.26.182.0/24 maxlen: 24
85.26.186.0/24 maxlen: 24
31.173.192.0/24 maxlen: 24
31.173.193.0/24 maxlen: 24
31.173.197.0/24 maxlen: 24
31.173.196.0/24 maxlen: 24
31.173.195.0/24 maxlen: 24
31.173.199.0/24 maxlen: 24
31.173.194.0/24 maxlen: 24
31.173.198.0/24 maxlen: 24
31.173.201.0/24 maxlen: 24
31.173.205.0/24 maxlen: 24
31.173.204.0/24 maxlen: 24
31.173.200.0/24 maxlen: 24
31.173.203.0/24 maxlen: 24
31.173.202.0/24 maxlen: 24
31.173.206.0/24 maxlen: 24
31.173.209.0/24 maxlen: 24
31.173.213.0/24 maxlen: 24
31.173.208.0/24 maxlen: 24
31.173.212.0/24 maxlen: 24
31.173.207.0/24 maxlen: 24
31.173.211.0/24 maxlen: 24
31.173.210.0/24 maxlen: 24
31.173.217.0/24 maxlen: 24
31.173.216.0/24 maxlen: 24
31.173.215.0/24 maxlen: 24
31.173.219.0/24 maxlen: 24
31.173.214.0/24 maxlen: 24
31.173.218.0/24 maxlen: 24
31.173.221.0/24 maxlen: 24
31.173.220.0/24 maxlen: 24
31.173.223.0/24 maxlen: 24
31.173.222.0/24 maxlen: 24
109.106.192.0/24 maxlen: 24
109.106.193.0/24 maxlen: 24
109.106.197.0/24 maxlen: 24
109.106.196.0/24 maxlen: 24
109.106.195.0/24 maxlen: 24
109.106.199.0/24 maxlen: 24
109.106.194.0/24 maxlen: 24
109.106.198.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
178.178.2.0/24 maxlen: 24
178.178.3.0/24 maxlen: 24
178.178.0.0/24 maxlen: 24
178.178.4.0/24 maxlen: 24
178.178.1.0/24 maxlen: 24
178.178.5.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
37.29.119.0/24 maxlen: 24
37.29.123.0/24 maxlen: 24
37.29.122.0/24 maxlen: 24
37.29.125.0/24 maxlen: 24
37.29.121.0/24 maxlen: 24
37.29.124.0/24 maxlen: 24
37.29.120.0/24 maxlen: 24
37.29.127.0/24 maxlen: 24
37.29.126.0/24 maxlen: 24
185.3.32.0/23 maxlen: 23
185.3.34.0/23 maxlen: 23
178.176.215.0/24 maxlen: 24
178.176.219.0/24 maxlen: 24
178.176.214.0/24 maxlen: 24
178.176.218.0/24 maxlen: 24
178.176.217.0/24 maxlen: 24
178.176.216.0/24 maxlen: 24
178.176.223.0/24 maxlen: 24
178.176.222.0/24 maxlen: 24
178.176.221.0/24 maxlen: 24
178.176.220.0/24 maxlen: 24
188.170.191.0/24 maxlen: 24
188.170.187.0/24 maxlen: 24
188.170.190.0/24 maxlen: 24
188.170.189.0/24 maxlen: 24
188.170.192.0/24 maxlen: 24
188.170.188.0/24 maxlen: 24
188.170.195.0/24 maxlen: 24
188.170.199.0/24 maxlen: 24
188.170.194.0/24 maxlen: 24
188.170.198.0/24 maxlen: 24
188.170.193.0/24 maxlen: 24
188.170.197.0/24 maxlen: 24
188.170.196.0/24 maxlen: 24
188.170.200.0/22 maxlen: 22
188.170.204.0/22 maxlen: 22
188.170.211.0/24 maxlen: 24
188.170.210.0/24 maxlen: 24
188.170.209.0/24 maxlen: 24
188.170.213.0/24 maxlen: 24
188.170.208.0/24 maxlen: 24
188.170.212.0/24 maxlen: 24
188.170.215.0/24 maxlen: 24
188.170.214.0/24 maxlen: 24
188.170.218.0/24 maxlen: 24
188.170.217.0/24 maxlen: 24
188.170.219.0/24 maxlen: 24
188.170.216.0/24 maxlen: 24
188.170.220.0/24 maxlen: 24
188.170.224.0/24 maxlen: 24
188.170.221.0/24 maxlen: 24
188.170.225.0/24 maxlen: 24
188.170.222.0/24 maxlen: 24
188.170.226.0/24 maxlen: 24
188.170.223.0/24 maxlen: 24
188.170.227.0/24 maxlen: 24
37.29.112.0/24 maxlen: 24
37.29.115.0/24 maxlen: 24
37.29.114.0/24 maxlen: 24
37.29.118.0/24 maxlen: 24
37.29.113.0/24 maxlen: 24
37.29.117.0/24 maxlen: 24
37.29.116.0/24 maxlen: 24
188.170.171.0/24 maxlen: 24
188.170.170.0/24 maxlen: 24
188.170.169.0/24 maxlen: 24
188.170.168.0/21 maxlen: 21
188.170.172.0/24 maxlen: 24
188.170.175.0/24 maxlen: 24
188.170.179.0/24 maxlen: 24
188.170.174.0/24 maxlen: 24
188.170.178.0/24 maxlen: 24
188.170.173.0/24 maxlen: 24
188.170.177.0/24 maxlen: 24
188.170.176.0/24 maxlen: 24
188.170.183.0/24 maxlen: 24
188.170.182.0/24 maxlen: 24
188.170.186.0/24 maxlen: 24
188.170.181.0/24 maxlen: 24
188.170.185.0/24 maxlen: 24
188.170.180.0/24 maxlen: 24
188.170.184.0/24 maxlen: 24
83.149.24.0/24 maxlen: 24
83.149.28.0/24 maxlen: 24
83.149.25.0/24 maxlen: 24
83.149.29.0/24 maxlen: 24
83.149.31.0/24 maxlen: 24
83.149.30.0/24 maxlen: 24
83.169.232.0/24 maxlen: 24
83.169.233.0/24 maxlen: 24
83.169.240.0/24 maxlen: 24
83.169.237.0/24 maxlen: 24
83.169.234.0/24 maxlen: 24
83.169.238.0/24 maxlen: 24
83.169.235.0/24 maxlen: 24
83.169.239.0/24 maxlen: 24
83.169.244.0/24 maxlen: 24
83.169.241.0/24 maxlen: 24
83.169.245.0/24 maxlen: 24
83.169.242.0/24 maxlen: 24
83.169.246.0/24 maxlen: 24
83.169.243.0/24 maxlen: 24
83.169.247.0/24 maxlen: 24
178.176.192.0/24 maxlen: 24
178.176.195.0/24 maxlen: 24
178.176.194.0/24 maxlen: 24
178.176.198.0/24 maxlen: 24
178.176.193.0/24 maxlen: 24
178.176.197.0/24 maxlen: 24
178.176.196.0/24 maxlen: 24
178.176.203.0/24 maxlen: 24
178.176.202.0/24 maxlen: 24
178.176.211.0/24 maxlen: 24
178.176.210.0/24 maxlen: 24
178.176.213.0/24 maxlen: 24
178.176.209.0/24 maxlen: 24
178.176.212.0/24 maxlen: 24
178.176.208.0/24 maxlen: 24
188.162.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:a4:28:0a:10:26:6f:ac:66:42:fd:ec:7a:1e:e5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 09:22:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b6f8c743dec07e5a046bca0a4c3fe53880f444c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:37:f5:5c:36:9b:ed:dc:c9:c6:c5:ca:85:15:
0d:f6:39:86:c8:d2:39:2e:e3:1e:0b:39:45:ef:95:
49:7c:f8:5e:a9:6c:da:29:cc:a0:60:85:66:77:4a:
84:0e:0c:d2:cf:cd:22:47:d5:f3:3c:42:18:c2:75:
84:f1:b8:b6:fb:ab:8a:8e:82:8a:d9:e1:d6:fc:81:
98:b3:0d:4a:33:b3:c7:50:a3:f3:4a:cd:ea:ec:bd:
fe:d1:43:27:b4:c7:b9:26:ac:a2:29:30:b7:6c:39:
67:55:4d:93:bc:37:87:c6:7a:4b:68:45:06:f0:9c:
d1:6a:e3:13:7a:51:90:be:c5:79:0b:e1:2a:48:17:
29:8a:3b:9c:6a:b0:fc:f2:1f:27:e3:a1:2d:07:e2:
84:f3:5e:2d:a4:0a:02:07:7a:d4:d2:52:4b:1d:dd:
90:d6:0f:7c:30:c0:54:83:f0:ca:16:92:b9:da:08:
09:d9:1e:85:4b:83:a3:c1:e3:f6:f4:8d:c3:08:0d:
10:76:e9:ff:3e:e5:43:0d:df:ce:40:16:99:a9:6d:
6f:ba:4e:3d:3b:95:06:a9:62:40:4d:8e:ca:5a:e1:
e5:6a:91:93:ba:85:c0:4a:4e:3d:89:a0:58:c1:57:
4a:15:4b:0a:b9:af:8c:e8:52:a2:29:cc:ea:9e:14:
88:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6F:8C:74:3D:EC:07:E5:A0:46:BC:A0:A4:C3:FE:53:88:0F:44:4C
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/K2-MdD3sB-WgRrygpMP-U4gPREw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.192.0/19
37.29.112.0/20
83.149.24.0/23
83.149.28.0/22
83.169.232.0/22
83.169.237.0-83.169.247.255
85.26.176.0/20
109.106.192.0/21
178.176.192.0-178.176.198.255
178.176.202.0/23
178.176.208.0/20
178.178.0.0-178.178.5.255
185.3.32.0/22
188.162.0.0/16
188.170.168.0-188.170.227.255
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:13:b5:fb:0d:07:f3:f3:ce:44:e8:a6:64:b9:99:4f:34:e5:
a2:4b:52:1c:63:5a:e0:71:75:88:de:d8:ff:d1:a9:24:c8:ac:
ad:4e:a8:16:05:f6:c5:e9:f1:cc:98:da:6d:43:f8:85:db:a6:
4c:30:1d:ea:f7:a3:3a:87:0a:ce:a2:db:44:83:a2:70:b5:b7:
3c:79:8a:54:ba:dc:98:be:d6:05:45:57:b7:c4:03:7d:ab:49:
10:01:2b:da:82:df:de:bd:40:57:0e:00:8f:6c:e1:e7:72:9e:
7e:b6:13:6d:16:de:d3:f0:8a:e3:6b:1d:13:0d:fa:85:e5:af:
49:b6:d2:ea:a9:1d:bd:b5:73:d2:93:a7:07:f7:c1:7b:36:c9:
6d:78:10:70:7a:0b:87:78:27:6b:42:1a:86:03:76:73:a0:06:
4d:65:56:de:d3:34:5e:28:cd:c5:65:09:88:36:d9:ce:b8:f7:
9b:97:be:ef:40:30:55:fd:8a:3a:64:b0:69:a0:ca:fd:e6:91:
9e:e5:66:31:d4:35:81:0b:58:cb:e3:0e:c0:11:5a:a0:21:38:
a6:b8:20:b1:a4:ae:d5:62:25:15:db:df:29:9a:5f:c7:7e:50:
11:76:b2:e1:93:2f:66:64:2a:95:3c:cd:1b:17:f9:c5:c8:39:
c7:e0:53:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:25 2024 by rpki-client on console-fra.rpki-client.org