Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/NS5NfVpfy_KjCZmsNktAPHHInas.roa
File: NS5NfVpfy_KjCZmsNktAPHHInas.roa (raw, json)
Hash identifier: ntXyf47VmQeAOx8RYZOC/S5fJhwp87pA+vARONK3wiA=
Subject key identifier: 35:2E:4D:7D:5A:5F:CB:F2:A3:09:99:AC:36:4B:40:3C:71:C8:9D:AB
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F243D043D80E1DE803F71D1133A752B2
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/NS5NfVpfy_KjCZmsNktAPHHInas.roa
Signing time: Thu 08 Dec 2022 15:04:01 +0000
ROA not before: Thu 08 Dec 2022 15:04:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29648
IP address blocks: 193.201.228.0/22 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
31.173.119.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
77.233.160.0/19 maxlen: 19
77.233.161.0/24 maxlen: 24
77.233.164.0/24 maxlen: 24
77.233.160.0/24 maxlen: 24
77.233.162.0/24 maxlen: 24
77.233.166.0/24 maxlen: 24
77.233.167.0/24 maxlen: 24
77.233.170.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
31.173.104.0/24 maxlen: 24
31.173.105.0/24 maxlen: 24
31.173.112.0/24 maxlen: 24
31.173.108.0/24 maxlen: 24
31.173.109.0/24 maxlen: 24
31.173.110.0/24 maxlen: 24
31.173.106.0/24 maxlen: 24
31.173.111.0/24 maxlen: 24
31.173.107.0/24 maxlen: 24
31.173.116.0/24 maxlen: 24
31.173.113.0/24 maxlen: 24
31.173.117.0/24 maxlen: 24
31.173.114.0/24 maxlen: 24
31.173.118.0/24 maxlen: 24
31.173.115.0/24 maxlen: 24
77.233.173.0/24 maxlen: 24
77.233.178.0/24 maxlen: 24
77.233.185.0/24 maxlen: 24
77.233.181.0/24 maxlen: 24
77.233.180.0/24 maxlen: 24
77.233.186.0/24 maxlen: 24
77.233.182.0/24 maxlen: 24
77.233.188.0/24 maxlen: 24
77.233.191.0/24 maxlen: 24
77.233.190.0/24 maxlen: 24
212.44.64.0/19 maxlen: 24
195.16.96.0/19 maxlen: 24
188.170.98.0/24 maxlen: 24
86.109.192.0/19 maxlen: 19
86.109.192.0/20 maxlen: 20
188.170.96.0/24 maxlen: 24
188.170.97.0/24 maxlen: 24
188.170.102.0/24 maxlen: 24
86.109.193.0/24 maxlen: 24
188.170.103.0/24 maxlen: 24
188.170.99.0/24 maxlen: 24
188.170.100.0/24 maxlen: 24
188.170.104.0/24 maxlen: 24
86.109.195.0/24 maxlen: 24
188.170.101.0/24 maxlen: 24
188.170.105.0/24 maxlen: 24
188.170.110.0/24 maxlen: 24
188.170.106.0/24 maxlen: 24
188.170.111.0/24 maxlen: 24
188.170.107.0/24 maxlen: 24
86.109.200.0/23 maxlen: 23
188.170.108.0/24 maxlen: 24
212.69.96.0/19 maxlen: 24
188.170.109.0/24 maxlen: 24
188.170.112.0/24 maxlen: 24
188.170.114.0/24 maxlen: 24
86.109.213.0/24 maxlen: 24
188.170.115.0/24 maxlen: 24
188.170.116.0/24 maxlen: 24
86.109.212.0/24 maxlen: 24
86.109.208.0/24 maxlen: 24
188.170.118.0/24 maxlen: 24
188.170.117.0/24 maxlen: 24
188.170.113.0/24 maxlen: 24
86.109.210.0/24 maxlen: 24
188.170.119.0/24 maxlen: 24
188.170.123.0/24 maxlen: 24
86.109.216.0/24 maxlen: 24
188.170.122.0/24 maxlen: 24
86.109.215.0/24 maxlen: 24
86.109.218.0/23 maxlen: 23
188.170.125.0/24 maxlen: 24
188.170.121.0/24 maxlen: 24
188.170.120.0/24 maxlen: 24
86.109.214.0/24 maxlen: 24
188.170.124.0/24 maxlen: 24
188.170.127.0/24 maxlen: 24
86.109.220.0/24 maxlen: 24
188.170.126.0/24 maxlen: 24
86.109.223.0/24 maxlen: 24
86.109.222.0/24 maxlen: 24
78.109.120.0/24 maxlen: 24
78.109.121.0/24 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
178.176.98.0/24 maxlen: 24
195.149.111.0/24 maxlen: 24
178.176.96.0/24 maxlen: 24
178.176.97.0/24 maxlen: 24
178.176.102.0/24 maxlen: 24
178.176.103.0/24 maxlen: 24
178.176.99.0/24 maxlen: 24
178.176.100.0/24 maxlen: 24
178.176.101.0/24 maxlen: 24
178.176.118.0/24 maxlen: 24
178.176.114.0/24 maxlen: 24
178.176.115.0/24 maxlen: 24
178.176.116.0/24 maxlen: 24
178.176.117.0/24 maxlen: 24
178.176.122.0/24 maxlen: 24
178.176.123.0/24 maxlen: 24
178.176.119.0/24 maxlen: 24
178.176.124.0/24 maxlen: 24
178.176.120.0/24 maxlen: 24
178.176.125.0/24 maxlen: 24
178.176.121.0/24 maxlen: 24
178.176.126.0/24 maxlen: 24
178.176.127.0/24 maxlen: 24
83.169.217.0/24 maxlen: 24
83.169.218.0/24 maxlen: 24
83.169.219.0/24 maxlen: 24
83.169.220.0/24 maxlen: 24
83.169.221.0/24 maxlen: 24
83.169.222.0/24 maxlen: 24
83.169.223.0/24 maxlen: 24
188.94.168.0/24 maxlen: 24
188.94.172.0/24 maxlen: 24
188.94.169.0/24 maxlen: 24
188.94.170.0/24 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.171.0/24 maxlen: 24
188.94.173.0/24 maxlen: 24
188.94.174.0/24 maxlen: 24
188.94.175.0/24 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f2:43:d0:43:d8:0e:1d:e8:03:f7:1d:11:33:a7:52:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 15:04:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=352e4d7d5a5fcbf2a30999ac364b403c71c89dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:87:ea:04:59:d4:50:c1:75:29:44:7d:63:5a:
80:4b:d4:f0:47:02:e3:ae:15:c2:3a:f0:44:ce:4f:
43:b0:6d:de:f7:96:cf:4f:ba:bb:f5:ed:ce:bd:1c:
08:3c:08:33:86:98:d2:24:42:3d:75:4a:5b:06:a1:
e7:83:5c:72:87:83:ec:67:a9:38:db:ab:a4:08:3b:
b4:5e:9b:80:e3:50:0f:67:58:d8:79:e3:03:f7:20:
4a:46:07:c3:67:6b:7d:ee:25:56:5f:87:59:b3:22:
3e:2a:75:6d:34:07:81:18:b0:e2:de:e6:86:e5:82:
15:71:79:6c:e8:e5:3a:f1:56:e3:56:76:ae:59:1f:
24:68:bc:8e:54:e6:09:30:11:ca:98:a8:3d:ee:b4:
15:8d:25:0f:3a:c0:98:66:30:9a:2f:52:b6:37:e5:
0c:01:bf:66:18:9e:25:c5:28:34:39:ba:d1:e4:3b:
fb:2e:4c:ee:fe:a4:9c:80:bf:34:bb:b1:b3:66:0d:
da:91:b3:a8:52:69:47:75:7d:b2:49:21:6c:0f:5b:
c1:0b:bd:d6:6b:c9:76:c1:89:e0:4f:e1:0e:d5:e2:
1c:30:0f:12:f9:02:6d:9e:b2:bc:9c:44:6a:3d:62:
f9:d8:d0:c5:7b:41:5b:11:55:dc:4a:d1:0a:3e:aa:
f1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2E:4D:7D:5A:5F:CB:F2:A3:09:99:AC:36:4B:40:3C:71:C8:9D:AB
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/NS5NfVpfy_KjCZmsNktAPHHInas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.104.0-31.173.119.255
77.233.160.0/19
78.109.120.0/23
83.169.217.0-83.169.223.255
86.109.192.0/19
178.176.96.0/21
178.176.114.0-178.176.127.255
188.94.168.0/21
188.162.0.0/16
188.170.96.0/19
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
81:33:a0:33:03:55:80:86:97:06:dc:66:0f:d8:ea:e5:6e:f2:
f5:89:c8:55:cb:7c:f2:74:b1:bb:81:5f:f6:2e:c0:7c:bf:be:
b9:c4:5a:be:c5:f8:54:ec:92:e3:a3:da:b8:53:86:a0:5d:5e:
18:58:f7:1b:80:27:71:02:20:50:7d:1e:48:0a:97:97:53:88:
91:0d:61:27:2a:e9:82:aa:de:be:9e:92:23:34:67:82:ed:c6:
93:42:9b:89:f4:ee:2d:c2:5a:45:42:8c:02:7d:fc:76:87:1e:
42:34:e0:bd:16:61:1e:58:b6:2c:15:84:98:93:6d:9a:65:65:
f5:5a:3c:11:54:20:3b:87:31:c0:77:ec:fb:6c:6e:d5:2d:6d:
a9:94:12:99:32:16:bf:49:52:5b:6c:fa:51:16:5f:dd:ae:b0:
b5:78:3c:92:89:42:b9:96:ff:ad:9e:20:71:64:2b:20:9e:24:
78:06:ea:24:42:fd:cd:ef:0f:e7:9d:a1:76:d7:61:af:ee:96:
9d:a5:6c:f7:72:2c:13:8b:28:d1:14:13:30:24:ef:37:61:c3:
0f:eb:48:50:2a:75:e4:6a:e2:e3:ba:c6:ed:78:24:e2:f0:ae:
5d:dc:e3:7b:a7:c5:bc:3d:1a:ba:d6:2e:e5:88:3e:bd:85:47:
cc:36:0c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:25 2024 by rpki-client on console-fra.rpki-client.org