Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Ky8YjV5PUlorNK05oZs1T2eLsCw.roa
File: Ky8YjV5PUlorNK05oZs1T2eLsCw.roa (raw, json)
Hash identifier: pl9DdC8FdaPbwRaH4y329KKUIIn9X4LBiC/4i2w6QSk=
Subject key identifier: 2B:2F:18:8D:5E:4F:52:5A:2B:34:AD:39:A1:9B:35:4F:67:8B:B0:2C
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01841D9455D9E0681378FF1583695F62327F
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Ky8YjV5PUlorNK05oZs1T2eLsCw.roa
Signing time: Fri 28 Oct 2022 07:52:51 +0000
ROA not before: Fri 28 Oct 2022 07:52:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24866
IP address blocks: 109.188.0.0/16 maxlen: 24
46.29.192.0/21 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
81.24.128.0/20 maxlen: 24
79.171.8.0/21 maxlen: 24
78.41.100.0/22 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
83.169.192.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
46.232.200.0/21 maxlen: 24
37.29.0.0/17 maxlen: 24
37.28.160.0/19 maxlen: 24
62.64.0.0/19 maxlen: 24
78.25.64.0/18 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
178.176.229.0/24 maxlen: 24
178.176.228.0/24 maxlen: 24
178.176.227.0/24 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
212.44.64.0/19 maxlen: 24
46.229.128.0/20 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1d:94:55:d9:e0:68:13:78:ff:15:83:69:5f:62:32:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 28 07:52:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b2f188d5e4f525a2b34ad39a19b354f678bb02c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:b6:6e:59:f3:79:01:11:1b:2a:55:ee:a2:ea:
1c:30:5f:90:4a:b4:37:a8:35:2e:20:10:59:a7:e8:
12:1b:d3:7f:b3:16:d6:88:12:d8:39:e4:2c:15:7c:
88:d8:ce:e9:98:0f:69:a5:9d:4e:52:69:57:73:c0:
8e:29:70:11:3d:f7:a5:4a:5e:fe:5e:c6:45:2f:4b:
3b:87:24:5f:73:48:48:08:f3:dd:a4:c2:06:bb:51:
db:45:50:20:c0:3c:51:10:22:f2:fb:d7:d0:db:ae:
41:f0:ee:0e:c6:85:96:c2:84:26:ba:e5:2b:b5:4f:
22:3e:8c:47:e8:be:db:79:59:6a:26:6a:dc:35:e1:
3e:af:0c:cf:ee:59:94:16:49:e5:f5:13:b9:d6:1c:
87:aa:25:ed:f8:eb:18:9c:58:8a:be:b0:43:9f:61:
6d:71:0c:71:c3:e5:4d:31:c2:c3:f6:2c:32:e7:42:
92:73:3f:01:c5:a0:51:4c:01:c8:24:fd:21:93:40:
f5:c6:4e:fe:b3:4f:09:6f:44:24:b0:c9:47:d6:07:
a9:c0:56:c8:5b:fa:12:ff:4f:d2:af:aa:c5:eb:7c:
bc:a8:4d:c6:52:ad:27:3e:f0:68:dc:00:52:06:98:
c7:58:71:60:6d:e4:cf:ba:86:ba:da:c8:89:5b:2b:
55:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2F:18:8D:5E:4F:52:5A:2B:34:AD:39:A1:9B:35:4F:67:8B:B0:2C
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Ky8YjV5PUlorNK05oZs1T2eLsCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.28.160.0/19
37.29.0.0/17
46.29.192.0/21
46.229.128.0/20
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.227.0-178.176.229.255
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
aa:e7:5d:2a:1a:ef:9d:5c:30:06:a5:a1:80:ea:5b:9a:17:05:
7e:bf:77:b0:02:ca:92:57:a3:c0:11:7c:94:a1:93:c8:4e:6d:
a3:c6:1b:48:08:b5:e3:29:29:1c:eb:29:c8:c8:be:21:a1:a4:
7d:f0:f1:52:ec:4e:e3:23:5c:a0:cd:32:db:01:0c:04:20:cf:
fd:4c:d5:9b:14:2e:e4:85:3e:87:ff:c8:05:ff:24:42:02:97:
e6:b3:e0:80:b4:ed:26:df:ca:14:c1:1e:68:fd:0a:70:96:aa:
90:b4:cb:24:98:c4:e8:cc:7c:36:9c:6b:3d:89:d8:11:28:79:
e8:da:67:94:1a:f1:a2:b5:ed:fc:58:51:eb:12:69:9b:06:f8:
d1:bb:a2:30:bf:bf:8e:65:d9:a3:9d:bf:96:f2:8e:4e:bf:93:
55:d8:2c:e5:a6:7f:6b:27:66:da:74:42:bc:de:0f:0b:dd:bc:
42:ca:d0:76:68:78:21:d0:b0:e5:4c:65:25:8a:c7:fe:92:6f:
58:74:ac:6d:c8:e8:f4:ab:05:41:97:89:77:44:3f:cd:54:30:
6f:5e:37:f1:3d:2b:bb:c8:c6:61:a7:9b:0e:c4:20:5d:d4:0f:
e6:72:35:e5:b0:a9:d5:c7:23:c9:0a:18:9f:43:ca:b7:ce:36:
af:ab:43:bc
-----BEGIN CERTIFICATE-----
MIIGFTCCBP2gAwIBAgISAYQdlFXZ4GgTeP8Vg2lfYjJ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMDI4MDc1MjUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjJmMTg4ZDVlNGY1MjVhMmIzNGFkMzlhMTliMzU0ZjY3OGJiMDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA87ZuWfN5AREbKlXuouocMF+QSrQ3
qDUuIBBZp+gSG9N/sxbWiBLYOeQsFXyI2M7pmA9ppZ1OUmlXc8COKXARPfelSl7+
XsZFL0s7hyRfc0hICPPdpMIGu1HbRVAgwDxRECLy+9fQ265B8O4OxoWWwoQmuuUr
tU8iPoxH6L7beVlqJmrcNeE+rwzP7lmUFknl9RO51hyHqiXt+OsYnFiKvrBDn2Ft
cQxxw+VNMcLD9iwy50KScz8BxaBRTAHIJP0hk0D1xk7+s08Jb0QksMlH1gepwFbI
W/oS/0/Sr6rF63y8qE3GUq0nPvBo3ABSBpjHWHFgbeTPuoa62siJWytVCwIDAQAB
o4IDITCCAx0wHQYDVR0OBBYEFCsvGI1eT1JaKzStOaGbNU9ni7AsMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvS3k4WWpWNVBVbG9yTkswNW9aczFUMmVMc0N3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBNQYIKwYBBQUHAQcBAf8EggEkMIIBIDCCARwEAgABMIIB
FAMEBSUcoAMEByUdAAMEAy4dwAMEBC7lgAMEAy7oyAMEBT5AAAMEBU3poAMEBk4Z
QAMEAk4pZAMEA0+rCAMEBFD3sAMEBFEYgAMEBlOpwAMEBVPewAMEB1PlgAMEB1Ua
gAMEBVZtwAMEAlvB1AMEB12ZgAMEB14ZgAMEB1+JAAMEBG1KcAMEBm18QAMDAG28
AwQGgMxAAwQDsheQMAwDBACysOMDBAGysOQDBAK5AyADBAK50owDBAO8XqgDAwC8
ogMEAsHJ5AMEBcMFgAMEBcMQYAMEAcNOdAMEAMOVbwMEBcPmQAMEBdQOoAMEBdQs
QAMEBdRFYAMEBdR3oAMEBdWaoAMEBdWoIAMEBtXzQAMEBNlzUDANBgkqhkiG9w0B
AQsFAAOCAQEAquddKhrvnVwwBqWhgOpbmhcFfr93sALKklejwBF8lKGTyE5to8Yb
SAi14ykpHOspyMi+IaGkffDxUuxO4yNcoM0y2wEMBCDP/UzVmxQu5IU+h//IBf8k
QgKX5rPggLTtJt/KFMEeaP0KcJaqkLTLJJjE6Mx8NpxrPYnYESh56NpnlBrxorXt
/FhR6xJpmwb40buiML+/jmXZo52/lvKOTr+TVdgs5aZ/aydm2nRCvN4PC928QsrQ
dmh4IdCw5UxlJYrH/pJvWHSsbcjo9KsFQZeJd0Q/zVQwb1438T0ru8jGYaebDsQg
XdQP5nI15bCp1ccjyQoYn0PKt842r6tDvA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:34 2024 by rpki-client on console-ams.rpki-client.org