Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/M3TXSEw3auFQLDCNll5ulT8x19Y.roa
File: M3TXSEw3auFQLDCNll5ulT8x19Y.roa (raw, json)
Hash identifier: 2ZDfewvdlCeoUUXTw/Hd4Gz7ylMgDRT8hdcQYBqAFmw=
Subject key identifier: 33:74:D7:48:4C:37:6A:E1:50:2C:30:8D:96:5E:6E:95:3F:31:D7:D6
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018200FC97190F98F30898395B5868579E0D
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/M3TXSEw3auFQLDCNll5ulT8x19Y.roa
Signing time: Fri 15 Jul 2022 08:32:09 +0000
ROA not before: Fri 15 Jul 2022 08:32:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31133
IP address blocks: 109.188.0.0/16 maxlen: 24
46.29.192.0/21 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
81.24.128.0/20 maxlen: 24
79.171.8.0/21 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 24
193.201.228.0/22 maxlen: 24
178.178.111.0/24 maxlen: 24
178.178.110.0/24 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
83.169.192.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 24
188.162.0.0/16 maxlen: 24
46.232.200.0/21 maxlen: 24
37.29.0.0/17 maxlen: 24
62.64.0.0/19 maxlen: 24
37.28.160.0/19 maxlen: 24
78.25.64.0/18 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
46.229.128.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:00:fc:97:19:0f:98:f3:08:98:39:5b:58:68:57:9e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jul 15 08:32:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3374d7484c376ae1502c308d965e6e953f31d7d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c7:c9:2c:fd:62:51:5b:7a:9e:4b:bf:09:ef:
c1:26:6c:e9:d6:06:18:0f:cd:f7:7a:f3:1f:93:bb:
f4:d6:83:d5:d0:9e:ba:12:18:31:a1:16:17:8e:3e:
1a:db:e8:4f:50:43:44:84:4d:86:38:9f:69:67:75:
1f:1e:b2:3f:18:8e:97:de:3a:57:d5:6d:b6:af:ae:
09:66:c8:37:34:71:97:47:7f:9a:86:21:35:19:d8:
2e:9c:8f:a7:44:29:f3:fc:66:6f:92:df:b4:b4:13:
1e:c6:7d:29:8d:92:65:0d:29:ad:b9:7d:d7:b6:9e:
86:32:dd:52:54:4f:02:f0:7d:bf:d4:65:a3:e4:08:
66:57:df:bc:91:90:45:50:25:09:23:6c:b6:91:6b:
cd:8b:25:0e:ea:09:e2:5e:1b:62:df:66:6b:7b:ec:
00:5a:6e:c4:30:52:3f:44:46:2d:32:e5:98:ea:1f:
c5:e5:c5:73:20:e6:e5:d7:7d:a4:35:82:81:2a:f1:
61:cd:46:bd:73:fb:e5:c5:56:42:23:fc:79:89:ee:
b8:e9:0d:cc:1d:47:33:ae:bc:c1:9f:08:e3:a4:3c:
ef:56:dc:1f:af:95:a8:19:f3:f8:b6:63:bb:53:15:
b2:78:28:5c:56:56:97:61:68:ab:f2:8b:cb:da:99:
ef:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:74:D7:48:4C:37:6A:E1:50:2C:30:8D:96:5E:6E:95:3F:31:D7:D6
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/M3TXSEw3auFQLDCNll5ulT8x19Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.28.160.0/19
37.29.0.0/17
46.29.192.0/21
46.229.128.0/20
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.178.110.0/23
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
25:17:e1:7d:b6:8f:1b:fb:26:67:b8:34:e1:a0:c9:02:59:fa:
af:f5:dd:e8:6d:34:fc:ac:c9:76:63:fc:91:b2:d5:25:28:4d:
db:4d:1e:cf:37:fe:b3:44:f2:9a:35:95:22:9a:1c:48:45:fc:
99:10:1f:fd:06:b6:33:7d:56:49:70:6b:81:a4:c8:50:51:2a:
05:c7:ea:ab:92:ce:00:96:15:fe:be:ca:0a:3f:85:d0:6d:39:
f2:b7:21:4e:4f:59:eb:0a:3e:4e:5c:1e:27:cc:52:5b:5c:93:
7c:ff:fe:9f:44:04:30:25:c8:9a:85:86:30:f0:21:7f:1c:ba:
c7:cb:b0:83:c6:65:a2:6f:79:9a:a7:d3:63:0e:11:84:87:17:
c5:0f:8b:cb:9f:6b:d3:e3:cc:1b:d4:b7:eb:b6:fe:83:9a:94:
d8:ab:82:6a:15:29:a3:3c:72:40:54:22:c8:19:03:03:ca:67:
b4:b6:b1:31:d0:f1:16:30:e6:18:70:9c:5a:43:70:9b:0c:41:
a8:01:d5:73:f6:e2:d0:17:25:b5:a7:05:5f:30:06:4a:dc:22:
14:9d:d0:84:37:bb:80:59:4b:52:8e:31:5a:1d:99:cc:15:09:
6e:49:77:ee:e7:dc:d8:31:50:68:0f:67:cf:10:e6:76:8c:db:
88:2c:b6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:25 2024 by rpki-client on console-fra.rpki-client.org