Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/NtNYCQbVPcecsQOZVS1dypGBlKk.roa
File: NtNYCQbVPcecsQOZVS1dypGBlKk.roa (raw, json)
Hash identifier: LnCyis3E4PQIw5Ca/iGfLxLe/KrXx/0o2gvnsu6/G8c=
Subject key identifier: 36:D3:58:09:06:D5:3D:C7:9C:B1:03:99:55:2D:5D:CA:91:81:94:A9
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018505A4263AF043473949803A8AE8F67BC3
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/NtNYCQbVPcecsQOZVS1dypGBlKk.roa
Signing time: Mon 12 Dec 2022 09:22:01 +0000
ROA not before: Mon 12 Dec 2022 09:22:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25159
IP address blocks: 195.16.96.0/19 maxlen: 24
193.201.228.0/22 maxlen: 24
109.188.112.0/23 maxlen: 23
109.188.114.0/24 maxlen: 24
85.26.144.0/20 maxlen: 20
109.188.64.0/19 maxlen: 19
109.188.96.0/21 maxlen: 21
78.25.119.0/24 maxlen: 24
94.25.131.0/24 maxlen: 24
94.25.144.0/20 maxlen: 20
94.25.164.0/24 maxlen: 24
94.25.160.0/24 maxlen: 24
212.69.106.0/24 maxlen: 24
94.25.172.0/22 maxlen: 22
94.25.168.0/22 maxlen: 22
212.69.113.0/24 maxlen: 24
212.69.114.0/24 maxlen: 24
188.170.25.0/24 maxlen: 24
188.170.32.0/21 maxlen: 21
188.170.40.0/21 maxlen: 21
37.28.176.0/21 maxlen: 21
178.177.0.0/18 maxlen: 18
178.177.3.0/24 maxlen: 24
78.25.112.0/22 maxlen: 22
78.25.116.0/23 maxlen: 23
78.25.118.0/24 maxlen: 24
94.25.176.0/21 maxlen: 21
212.69.125.0/24 maxlen: 24
94.25.184.0/21 maxlen: 21
195.5.128.0/19 maxlen: 24
128.204.78.0/23 maxlen: 23
128.204.76.0/22 maxlen: 22
37.29.32.0/21 maxlen: 21
128.204.76.0/23 maxlen: 23
178.176.52.0/22 maxlen: 22
178.176.72.0/21 maxlen: 21
31.173.0.0/21 maxlen: 21
195.230.70.0/23 maxlen: 23
31.173.8.0/21 maxlen: 21
178.176.0.0/19 maxlen: 19
213.243.109.0/24 maxlen: 24
213.243.116.0/24 maxlen: 24
83.229.254.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
178.176.32.0/21 maxlen: 21
178.176.40.0/21 maxlen: 21
31.173.72.0/21 maxlen: 21
31.173.80.0/21 maxlen: 21
31.173.88.0/21 maxlen: 21
188.170.0.0/19 maxlen: 19
188.170.24.0/24 maxlen: 24
31.173.16.0/21 maxlen: 21
31.173.24.0/21 maxlen: 21
195.230.91.0/24 maxlen: 24
195.230.92.0/24 maxlen: 24
31.173.32.0/19 maxlen: 19
31.173.60.0/24 maxlen: 24
31.173.64.0/21 maxlen: 21
188.162.0.0/16 maxlen: 24
62.64.0.0/20 maxlen: 20
83.229.211.0/24 maxlen: 24
46.229.128.0/22 maxlen: 22
83.222.212.0/22 maxlen: 22
83.222.216.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:a4:26:3a:f0:43:47:39:49:80:3a:8a:e8:f6:7b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 09:22:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36d3580906d53dc79cb10399552d5dca918194a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:65:de:0a:64:77:5c:5a:fd:45:5f:3f:94:1f:
a4:e1:c8:cb:a7:2c:78:fb:57:1a:9e:fc:88:59:f8:
65:ef:fc:93:b9:bd:3a:e1:e9:ff:3d:ee:48:36:73:
0a:c0:57:36:e0:b7:9f:e5:6f:7a:f3:8c:5a:fc:39:
63:c7:ff:72:fc:07:b1:21:e7:e6:af:db:6d:69:89:
77:88:ee:b8:c5:9b:14:0b:a1:df:2d:21:ba:4f:a4:
05:65:b1:e7:a4:ca:0f:50:45:9a:03:72:0c:32:47:
6f:a9:30:16:40:c8:7a:f8:69:60:1f:bf:81:c3:e5:
b6:38:67:33:61:7d:79:a3:d5:4f:6c:1f:59:a7:22:
a0:72:f2:cb:aa:15:d3:75:fe:6c:14:28:1b:f4:c0:
68:db:25:ca:36:a1:76:11:66:74:53:ab:f9:d8:fb:
fd:9d:6a:db:e5:17:8e:1b:5a:a3:2e:03:76:73:0f:
88:80:3e:e0:67:68:7a:dd:1b:b7:40:5f:53:da:4e:
30:48:67:86:57:c6:ea:07:cd:fa:59:00:1e:fb:dc:
1a:91:2d:c1:1f:a9:23:ff:b7:2b:d1:c5:65:67:ca:
e1:e3:b1:07:8a:3d:3d:43:11:30:87:5b:f4:15:7e:
c6:98:40:ac:24:0d:a4:c8:02:d0:a1:a8:cc:7a:f2:
72:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D3:58:09:06:D5:3D:C7:9C:B1:03:99:55:2D:5D:CA:91:81:94:A9
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/NtNYCQbVPcecsQOZVS1dypGBlKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.0.0-31.173.95.255
37.28.176.0/21
37.29.32.0/21
46.229.128.0/22
62.64.0.0/20
78.25.112.0/21
83.222.212.0-83.222.223.255
83.229.211.0/24
83.229.254.0/24
85.26.144.0/20
94.25.131.0/24
94.25.144.0-94.25.160.255
94.25.164.0/24
94.25.168.0-94.25.191.255
109.188.64.0-109.188.103.255
109.188.112.0-109.188.114.255
128.204.76.0/22
178.176.0.0-178.176.47.255
178.176.52.0/22
178.176.72.0/21
178.177.0.0/18
188.162.0.0/16
188.170.0.0-188.170.47.255
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.230.70.0/23
195.230.91.0-195.230.92.255
212.69.106.0/24
212.69.113.0-212.69.114.255
212.69.125.0/24
213.243.109.0/24
213.243.116.0/24
Signature Algorithm: sha256WithRSAEncryption
65:69:f1:10:c0:67:51:99:b4:fe:e4:a5:c0:8e:35:a1:92:00:
88:0c:c8:0b:c3:15:a9:af:89:67:b2:3f:ee:b6:5f:33:8b:74:
02:0d:1f:83:6f:86:50:8f:92:f5:48:37:6d:a3:3d:da:7c:a6:
57:b1:b7:7b:65:d2:01:a1:fd:3b:bb:de:97:3e:e2:68:eb:fc:
b8:94:15:d2:9a:ff:b0:04:88:e5:cb:8f:e9:7b:ab:fe:23:1f:
af:56:19:5c:c1:3c:76:65:b4:93:92:88:32:12:ff:3b:47:c7:
0b:97:8d:38:c4:44:19:5f:35:5b:3e:dd:67:a4:13:f0:4d:46:
45:3f:94:9b:0b:ab:b4:f6:6c:2d:69:92:96:f5:c2:e5:b6:96:
6c:b4:95:de:8f:bf:88:39:1d:c2:30:d6:c6:6f:32:8d:57:66:
7b:83:81:9b:23:1a:b3:d3:37:3e:75:0a:58:68:92:ff:a1:ac:
4a:d7:92:fe:1f:7e:96:88:ee:a7:9e:42:c1:d3:f5:df:05:32:
8b:1f:94:13:9b:7a:0f:b9:26:ce:f1:5b:9d:0e:95:b2:93:ff:
42:83:59:a0:df:cb:c0:78:f9:3d:0e:11:f0:fd:bd:a2:ae:a4:
42:f2:cf:c4:56:65:88:c8:23:3c:21:4c:e5:18:30:6b:15:7b:
9a:a2:15:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:25 2024 by rpki-client on console-fra.rpki-client.org