Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/KVfqhTrmdpUPnPCDCjuEaH4qi-M.roa
File: KVfqhTrmdpUPnPCDCjuEaH4qi-M.roa (raw, json)
Hash identifier: v9wqbhf2rBGNpsw/Z+Y85X9JYZ7b/yW3MOLMKDGr5u4=
Subject key identifier: 29:57:EA:85:3A:E6:76:95:0F:9C:F0:83:0A:3B:84:68:7E:2A:8B:E3
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01847659091691AB5A464392F3A0DDAE0C2B
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/KVfqhTrmdpUPnPCDCjuEaH4qi-M.roa
Signing time: Mon 14 Nov 2022 13:34:17 +0000
ROA not before: Mon 14 Nov 2022 13:34:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50928
IP address blocks: 109.188.0.0/16 maxlen: 24
46.29.192.0/21 maxlen: 21
46.29.199.0/24 maxlen: 24
46.29.194.0/24 maxlen: 24
46.29.196.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
188.170.244.0/24 maxlen: 24
188.170.244.0/23 maxlen: 23
188.170.245.0/24 maxlen: 24
188.170.251.0/24 maxlen: 24
188.170.249.0/24 maxlen: 24
188.170.250.0/24 maxlen: 24
188.170.248.0/24 maxlen: 24
79.171.8.0/21 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
78.25.64.0/18 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
178.176.250.0/24 maxlen: 24
178.176.248.0/24 maxlen: 24
178.176.253.0/24 maxlen: 24
91.193.212.0/22 maxlen: 24
178.176.251.0/24 maxlen: 24
178.176.252.0/24 maxlen: 24
178.176.249.0/24 maxlen: 24
37.29.81.0/24 maxlen: 24
37.29.83.0/24 maxlen: 24
37.29.80.0/22 maxlen: 22
37.29.80.0/24 maxlen: 24
37.29.82.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
31.173.248.0/21 maxlen: 21
31.173.252.0/24 maxlen: 24
31.173.249.0/24 maxlen: 24
31.173.251.0/24 maxlen: 24
31.173.248.0/24 maxlen: 24
31.173.253.0/24 maxlen: 24
31.173.250.0/24 maxlen: 24
95.137.0.0/17 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
77.233.160.0/19 maxlen: 24
81.24.128.0/20 maxlen: 24
78.41.100.0/22 maxlen: 24
195.78.116.0/23 maxlen: 24
83.169.192.0/18 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 24
46.232.200.0/21 maxlen: 24
62.64.0.0/19 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
212.44.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:76:59:09:16:91:ab:5a:46:43:92:f3:a0:dd:ae:0c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Nov 14 13:34:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2957ea853ae676950f9cf0830a3b84687e2a8be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:72:4f:61:aa:bf:86:74:74:8b:4d:86:84:46:
a9:46:57:73:71:94:5f:fc:a6:45:2f:6c:80:66:59:
f3:c7:b8:64:bf:12:e7:4a:ea:90:77:7b:20:c4:35:
e4:8d:48:5f:2c:07:99:14:bb:5f:3c:ab:8e:31:bf:
de:a6:80:75:2c:f9:13:9b:65:b0:41:f1:d5:3c:e9:
ab:5e:7d:a1:6c:6a:7c:5c:5b:f2:a7:40:0d:a4:fc:
59:64:3e:a4:bb:08:6a:67:b2:e2:d3:94:77:e5:24:
14:2c:7a:39:b1:bb:19:df:f1:4c:64:12:13:26:3c:
ed:98:a6:3c:46:8c:61:e4:b5:c1:12:93:78:66:49:
3e:84:55:9f:33:14:cf:a5:01:b0:a6:a1:de:37:84:
af:99:2e:13:d0:87:16:e5:29:5a:67:11:cd:f3:14:
55:50:6d:1c:81:b7:36:09:27:8b:6e:24:4e:26:75:
ce:01:83:7c:c9:5f:4a:1b:87:37:7a:dc:ed:a8:8a:
ea:fd:7c:b4:7b:1d:06:09:da:2a:73:ed:a9:cd:9f:
1f:66:81:e1:50:62:2a:8b:5f:43:a0:5e:20:b8:f0:
f0:26:95:31:ba:64:63:5d:ec:d2:c8:38:19:16:b4:
17:80:c8:40:a3:f7:b2:f3:ec:8f:42:e1:29:ac:d1:
55:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:57:EA:85:3A:E6:76:95:0F:9C:F0:83:0A:3B:84:68:7E:2A:8B:E3
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/KVfqhTrmdpUPnPCDCjuEaH4qi-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.248.0/21
37.29.80.0/22
46.29.192.0/21
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.248.0-178.176.253.255
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.244.0/23
188.170.248.0/22
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
11:38:0c:c8:8c:96:58:46:9a:45:f0:57:f0:b6:78:3f:c1:c5:
7a:ac:90:e1:21:56:1d:29:f1:5e:b1:59:74:0b:79:0c:db:bd:
57:0f:ca:f8:bf:6a:dd:8b:0a:49:af:9c:3d:a5:c8:ff:0a:cd:
f6:dd:9c:56:72:c0:f9:35:a8:81:91:c1:2a:18:b8:37:18:e9:
73:bc:40:d7:d3:3d:b0:00:e9:00:04:dd:1e:f5:97:b2:d8:34:
0e:c3:fc:7d:d7:7d:c7:a9:ed:62:f2:8f:31:52:ff:78:1e:ec:
d5:37:bb:30:0d:c8:64:3b:41:bd:9a:ce:21:76:45:8d:a1:46:
2b:1c:95:11:1c:1e:4e:75:cf:fe:db:8c:59:2b:8f:39:e8:8a:
ad:7a:62:91:40:eb:d4:88:73:78:a8:13:f9:86:12:cf:32:4e:
07:79:25:62:5b:5d:7a:18:ae:05:dd:52:6f:46:a1:d5:97:72:
5e:82:e0:2c:3a:12:bc:67:99:af:6c:e9:dc:10:c2:c0:d3:b7:
99:ed:8a:79:c8:7b:49:c2:6c:1d:32:4b:be:f6:67:01:db:16:
22:81:cc:36:34:87:af:1c:4a:a6:d2:21:14:1c:1d:5c:c3:ed:
8e:1c:69:49:c4:7f:e4:4f:2a:ac:33:77:32:a7:cb:79:35:c7:
a5:73:ca:9c
-----BEGIN CERTIFICATE-----
MIIGGzCCBQOgAwIBAgISAYR2WQkWkataRkOS86DdrgwrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMTE0MTMzNDE3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTU3ZWE4NTNhZTY3Njk1MGY5Y2YwODMwYTNiODQ2ODdlMmE4YmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHJPYaq/hnR0i02GhEapRldzcZRf
/KZFL2yAZlnzx7hkvxLnSuqQd3sgxDXkjUhfLAeZFLtfPKuOMb/epoB1LPkTm2Ww
QfHVPOmrXn2hbGp8XFvyp0ANpPxZZD6kuwhqZ7Li05R35SQULHo5sbsZ3/FMZBIT
JjztmKY8Roxh5LXBEpN4Zkk+hFWfMxTPpQGwpqHeN4SvmS4T0IcW5SlaZxHN8xRV
UG0cgbc2CSeLbiROJnXOAYN8yV9KG4c3etztqIrq/Xy0ex0GCdoqc+2pzZ8fZoHh
UGIqi19DoF4guPDwJpUxumRjXezSyDgZFrQXgMhAo/ey8+yPQuEprNFVvQIDAQAB
o4IDJzCCAyMwHQYDVR0OBBYEFClX6oU65naVD5zwgwo7hGh+KovjMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvS1ZmcWhUcm1kcFVQblBDRENqdUVhSDRxaS1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBOwYIKwYBBQUHAQcBAf8EggEqMIIBJjCCASIEAgABMIIB
GgMEAx+t+AMEAiUdUAMEAy4dwAMEAy7oyAMEBT5AAAMEBU3poAMEBk4ZQAMEAk4p
ZAMEA0+rCAMEBFD3sAMEBFEYgAMEBlOpwAMEBVPewAMEB1PlgAMEB1UagAMEBVZt
wAMEAlvB1AMEB12ZgAMEB14ZgAMEB1+JAAMEBG1KcAMEBm18QAMDAG28AwQGgMxA
AwQDsheQMAwDBAOysPgDBAGysPwDBAK5AyADBAK50owDBAO8XqgDAwC8ogMEAbyq
9AMEAryq+AMEAsHJ5AMEBcMFgAMEBcMQYAMEAcNOdAMEAMOVbwMEBcPmQAMEBdQO
oAMEBdQsQAMEBdRFYAMEBdR3oAMEBdWaoAMEBdWoIAMEBtXzQAMEBNlzUDANBgkq
hkiG9w0BAQsFAAOCAQEAETgMyIyWWEaaRfBX8LZ4P8HFeqyQ4SFWHSnxXrFZdAt5
DNu9Vw/K+L9q3YsKSa+cPaXI/wrN9t2cVnLA+TWogZHBKhi4Nxjpc7xA19M9sADp
AATdHvWXstg0DsP8fdd9x6ntYvKPMVL/eB7s1Te7MA3IZDtBvZrOIXZFjaFGKxyV
ERweTnXP/tuMWSuPOeiKrXpikUDr1IhzeKgT+YYSzzJOB3klYltdehiuBd1Sb0ah
1ZdyXoLgLDoSvGeZr2zp3BDCwNO3me2Kech7ScJsHTJLvvZnAdsWIoHMNjSHrxxK
ptIhFBwdXMPtjhxpScR/5E8qrDN3MqfLeTXHpXPKnA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:34 2024 by rpki-client on console-ams.rpki-client.org