Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/MSxu2Bnv6N37Su5Hk8ecGHgTMYA.roa
File: MSxu2Bnv6N37Su5Hk8ecGHgTMYA.roa (raw, json)
Hash identifier: d3ITcsyTW+L2KyUwChY0/0URstfa7wpXdzMqmRbu3/o=
Subject key identifier: 31:2C:6E:D8:19:EF:E8:DD:FB:4A:EE:47:93:C7:9C:18:78:13:31:80
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018413E2F9EAF104ACD998CD527923801474
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/MSxu2Bnv6N37Su5Hk8ecGHgTMYA.roa
Signing time: Wed 26 Oct 2022 10:42:32 +0000
ROA not before: Wed 26 Oct 2022 10:42:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31133
IP address blocks: 109.188.0.0/16 maxlen: 24
85.26.128.0/17 maxlen: 24
193.201.228.0/22 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
31.173.174.0/24 maxlen: 24
31.173.178.0/24 maxlen: 24
31.173.177.0/24 maxlen: 24
31.173.175.0/24 maxlen: 24
31.173.181.0/24 maxlen: 24
31.173.182.0/24 maxlen: 24
31.173.186.0/24 maxlen: 24
31.173.185.0/24 maxlen: 24
93.153.128.0/17 maxlen: 24
31.173.180.0/24 maxlen: 24
31.173.184.0/24 maxlen: 24
31.173.183.0/24 maxlen: 24
94.25.128.0/17 maxlen: 24
31.173.190.0/24 maxlen: 24
31.173.189.0/24 maxlen: 24
31.173.188.0/24 maxlen: 24
31.173.187.0/24 maxlen: 24
31.173.191.0/24 maxlen: 24
31.173.224.0/24 maxlen: 24
78.25.64.0/18 maxlen: 24
31.173.130.0/23 maxlen: 23
31.173.129.0/24 maxlen: 24
31.173.128.0/24 maxlen: 24
31.173.138.0/24 maxlen: 24
31.173.137.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
31.173.136.0/24 maxlen: 24
31.173.139.0/24 maxlen: 24
31.173.142.0/24 maxlen: 24
31.173.141.0/24 maxlen: 24
31.173.140.0/24 maxlen: 24
31.173.150.0/24 maxlen: 24
80.247.176.0/20 maxlen: 24
31.173.149.0/24 maxlen: 24
31.173.152.0/24 maxlen: 24
31.173.148.0/24 maxlen: 24
31.173.147.0/24 maxlen: 24
31.173.151.0/24 maxlen: 24
31.173.154.0/24 maxlen: 24
31.173.158.0/24 maxlen: 24
31.173.153.0/24 maxlen: 24
91.193.212.0/22 maxlen: 24
31.173.157.0/24 maxlen: 24
31.173.156.0/24 maxlen: 24
31.173.159.0/24 maxlen: 24
31.173.155.0/24 maxlen: 24
31.173.166.0/24 maxlen: 24
31.173.165.0/24 maxlen: 24
31.173.164.0/24 maxlen: 24
31.173.160.0/22 maxlen: 22
31.173.170.0/24 maxlen: 24
31.173.169.0/24 maxlen: 24
31.173.168.0/24 maxlen: 24
31.173.167.0/24 maxlen: 24
31.173.171.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
31.173.234.0/24 maxlen: 24
77.233.160.0/19 maxlen: 24
31.173.0.0/16 maxlen: 16
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
46.232.200.0/21 maxlen: 24
62.64.0.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
46.29.192.0/21 maxlen: 24
195.16.96.0/19 maxlen: 24
79.171.8.0/21 maxlen: 24
178.178.111.0/24 maxlen: 24
178.178.110.0/24 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
185.3.32.0/22 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
37.29.0.0/17 maxlen: 24
37.28.160.0/19 maxlen: 24
185.210.140.0/22 maxlen: 24
128.204.64.0/18 maxlen: 24
62.89.194.0/24 maxlen: 24
95.137.0.0/17 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
78.41.100.0/22 maxlen: 24
83.169.192.0/18 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 24
188.162.0.0/16 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
46.229.128.0/20 maxlen: 24
83.229.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:13:e2:f9:ea:f1:04:ac:d9:98:cd:52:79:23:80:14:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 26 10:42:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=312c6ed819efe8ddfb4aee4793c79c1878133180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:97:e5:71:82:26:10:a1:ea:26:87:84:ec:cd:
1e:fd:ba:08:6f:52:c6:4b:bc:0b:62:68:a8:62:30:
b8:e0:23:d0:d5:1e:8c:7f:3c:05:62:a2:d7:6e:c2:
d5:77:87:f5:28:c0:f0:2c:89:f5:8a:89:f3:f5:68:
6b:3d:d0:42:1d:bb:07:56:63:93:28:bf:ef:e9:76:
da:b4:82:90:18:80:e0:23:c4:b4:33:93:4f:55:a9:
19:d6:45:aa:69:21:55:6e:2f:8a:bf:38:ba:19:2b:
d9:ec:ca:67:5e:bd:3c:36:6c:5b:69:26:f8:b8:ea:
e0:1f:b6:d8:87:39:02:e3:8c:c4:e5:10:d8:5f:9a:
8f:14:06:2c:1b:a3:25:64:9d:44:b4:f0:dd:ce:4e:
3d:40:12:e9:05:e4:64:92:84:3f:88:4e:e6:19:e3:
d8:fb:88:fa:43:8f:30:a7:ef:cf:fd:2c:96:72:66:
0b:8e:b3:af:f0:83:58:aa:f0:eb:ae:1e:32:45:ef:
8f:7b:0f:e6:ec:43:8a:b7:e9:aa:91:56:08:88:c5:
7f:0c:88:12:9e:79:8b:87:76:e4:6b:10:29:1a:df:
1f:4c:a4:4d:21:2c:54:9c:c5:42:ac:4b:50:4c:29:
29:34:6f:20:97:c3:c5:c0:bb:47:96:99:a0:dd:a3:
e8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:2C:6E:D8:19:EF:E8:DD:FB:4A:EE:47:93:C7:9C:18:78:13:31:80
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/MSxu2Bnv6N37Su5Hk8ecGHgTMYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.0.0/16
37.28.160.0/19
37.29.0.0/17
46.29.192.0/21
46.229.128.0/20
46.232.200.0/21
62.64.0.0/19
62.89.194.0/24
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.178.110.0/23
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
12:b8:7b:12:b0:fa:a1:64:ca:9a:43:7c:bc:80:1c:69:16:1d:
63:8d:0b:26:f4:f5:51:a7:08:1f:2b:39:4c:26:fb:30:d9:d8:
00:48:6a:ac:a0:c7:26:80:b3:ef:78:f2:d0:ce:5b:f4:ba:3d:
43:e1:8a:6b:91:86:3b:1b:7c:ec:c6:8c:5f:46:79:d7:10:ef:
d0:fb:c7:1a:ca:d0:89:47:ef:93:3b:7b:84:7a:b9:67:3b:f6:
14:73:2e:34:8e:95:e5:73:6e:aa:8b:04:c7:11:84:e1:08:43:
81:2f:04:ab:d9:00:0f:bc:d8:04:be:c8:1a:53:9b:b1:48:0f:
6a:77:89:32:2a:1e:2b:ce:39:79:22:64:bf:f2:58:e6:55:9c:
32:5f:2e:0e:46:2d:c1:e6:d9:01:43:df:20:ad:29:49:67:55:
6f:d9:7f:8c:19:f9:8c:4f:9a:83:33:d7:65:1a:74:f4:d0:12:
5d:28:45:e8:43:e1:01:98:fb:de:37:41:98:a4:39:c2:ca:9c:
f8:b5:a4:1c:4d:f2:f2:d4:60:77:3a:3d:78:2f:90:a7:92:1f:
ae:32:0b:07:eb:ad:f0:97:02:ad:4f:53:89:4b:02:23:61:a6:
3a:4e:72:38:45:c4:2b:a5:0b:c7:30:59:c2:43:bf:80:c1:5f:
73:b0:7e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:34 2024 by rpki-client on console-ams.rpki-client.org