Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/O7pMgj0KwDEgq8UJEzOQERPEc68.roa
File: O7pMgj0KwDEgq8UJEzOQERPEc68.roa (raw, json)
Hash identifier: YZ1fKOS21yd03DlFgGeKQKhxykCZY/+2I2sC0pgbyjk=
Subject key identifier: 3B:BA:4C:82:3D:0A:C0:31:20:AB:C5:09:13:33:90:11:13:C4:73:AF
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01842D486C20876E0EC1FC09E36AAD75E396
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/O7pMgj0KwDEgq8UJEzOQERPEc68.roa
Signing time: Mon 31 Oct 2022 09:03:51 +0000
ROA not before: Mon 31 Oct 2022 09:03:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31163
IP address blocks: 109.188.0.0/16 maxlen: 24
85.26.128.0/17 maxlen: 24
193.201.228.0/22 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
31.173.192.0/24 maxlen: 24
31.173.193.0/24 maxlen: 24
31.173.196.0/24 maxlen: 24
31.173.199.0/24 maxlen: 24
31.173.194.0/24 maxlen: 24
31.173.197.0/24 maxlen: 24
31.173.195.0/24 maxlen: 24
31.173.198.0/24 maxlen: 24
31.173.201.0/24 maxlen: 24
31.173.204.0/24 maxlen: 24
31.173.202.0/24 maxlen: 24
31.173.205.0/24 maxlen: 24
31.173.200.0/24 maxlen: 24
31.173.203.0/24 maxlen: 24
31.173.206.0/24 maxlen: 24
31.173.209.0/24 maxlen: 24
31.173.212.0/24 maxlen: 24
31.173.207.0/24 maxlen: 24
31.173.210.0/24 maxlen: 24
31.173.213.0/24 maxlen: 24
31.173.208.0/24 maxlen: 24
31.173.211.0/24 maxlen: 24
31.173.217.0/24 maxlen: 24
31.173.215.0/24 maxlen: 24
31.173.218.0/24 maxlen: 24
31.173.216.0/24 maxlen: 24
31.173.219.0/24 maxlen: 24
31.173.214.0/24 maxlen: 24
31.173.220.0/24 maxlen: 24
31.173.223.0/24 maxlen: 24
31.173.221.0/24 maxlen: 24
31.173.222.0/24 maxlen: 24
78.25.64.0/18 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
109.106.192.0/24 maxlen: 24
109.106.197.0/24 maxlen: 24
109.106.195.0/24 maxlen: 24
109.106.198.0/24 maxlen: 24
109.106.193.0/24 maxlen: 24
109.106.196.0/24 maxlen: 24
109.106.199.0/24 maxlen: 24
109.106.194.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
46.232.200.0/21 maxlen: 24
62.64.0.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
46.29.192.0/21 maxlen: 24
178.178.3.0/24 maxlen: 24
178.178.0.0/24 maxlen: 24
178.178.2.0/24 maxlen: 24
178.178.4.0/24 maxlen: 24
178.178.1.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
79.171.8.0/21 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
185.3.32.0/22 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
37.29.0.0/17 maxlen: 24
178.176.215.0/24 maxlen: 24
178.176.218.0/24 maxlen: 24
178.176.217.0/24 maxlen: 24
178.176.219.0/24 maxlen: 24
37.28.160.0/19 maxlen: 24
178.176.214.0/24 maxlen: 24
178.176.216.0/24 maxlen: 24
178.176.223.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
178.176.220.0/24 maxlen: 24
178.176.222.0/24 maxlen: 24
178.176.221.0/24 maxlen: 24
188.170.187.0/24 maxlen: 24
188.170.190.0/24 maxlen: 24
188.170.189.0/24 maxlen: 24
188.170.192.0/24 maxlen: 24
188.170.191.0/24 maxlen: 24
188.170.188.0/24 maxlen: 24
188.170.195.0/24 maxlen: 24
188.170.198.0/24 maxlen: 24
188.170.197.0/24 maxlen: 24
188.170.199.0/24 maxlen: 24
188.170.194.0/24 maxlen: 24
188.170.193.0/24 maxlen: 24
188.170.196.0/24 maxlen: 24
188.170.200.0/22 maxlen: 22
188.170.204.0/22 maxlen: 22
188.170.211.0/24 maxlen: 24
188.170.213.0/24 maxlen: 24
188.170.208.0/24 maxlen: 24
188.170.210.0/24 maxlen: 24
188.170.209.0/24 maxlen: 24
188.170.212.0/24 maxlen: 24
188.170.214.0/24 maxlen: 24
188.170.219.0/24 maxlen: 24
188.170.216.0/24 maxlen: 24
188.170.215.0/24 maxlen: 24
188.170.218.0/24 maxlen: 24
188.170.217.0/24 maxlen: 24
188.170.224.0/24 maxlen: 24
188.170.221.0/24 maxlen: 24
188.170.222.0/24 maxlen: 24
188.170.220.0/24 maxlen: 24
188.170.225.0/24 maxlen: 24
188.170.226.0/24 maxlen: 24
188.170.223.0/24 maxlen: 24
188.170.227.0/24 maxlen: 24
128.204.64.0/18 maxlen: 24
188.170.171.0/24 maxlen: 24
188.170.170.0/24 maxlen: 24
188.170.169.0/24 maxlen: 24
188.170.168.0/21 maxlen: 21
188.170.172.0/24 maxlen: 24
188.170.179.0/24 maxlen: 24
188.170.174.0/24 maxlen: 24
95.137.0.0/17 maxlen: 24
188.170.173.0/24 maxlen: 24
188.170.176.0/24 maxlen: 24
188.170.175.0/24 maxlen: 24
188.170.178.0/24 maxlen: 24
188.170.177.0/24 maxlen: 24
188.170.182.0/24 maxlen: 24
188.170.181.0/24 maxlen: 24
188.170.184.0/24 maxlen: 24
188.170.183.0/24 maxlen: 24
188.170.186.0/24 maxlen: 24
188.170.185.0/24 maxlen: 24
188.170.180.0/24 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
83.149.24.0/24 maxlen: 24
83.149.29.0/24 maxlen: 24
83.149.30.0/24 maxlen: 24
83.149.28.0/24 maxlen: 24
83.149.25.0/24 maxlen: 24
83.149.31.0/24 maxlen: 24
78.41.100.0/22 maxlen: 24
178.176.192.0/24 maxlen: 24
178.176.194.0/24 maxlen: 24
178.176.193.0/24 maxlen: 24
178.176.196.0/24 maxlen: 24
178.176.195.0/24 maxlen: 24
178.176.198.0/24 maxlen: 24
178.176.197.0/24 maxlen: 24
178.176.202.0/24 maxlen: 24
178.176.203.0/24 maxlen: 24
178.176.210.0/24 maxlen: 24
178.176.209.0/24 maxlen: 24
178.176.212.0/24 maxlen: 24
178.176.211.0/24 maxlen: 24
178.176.213.0/24 maxlen: 24
178.176.208.0/24 maxlen: 24
83.169.192.0/18 maxlen: 24
109.74.112.0/20 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
46.229.128.0/20 maxlen: 24
83.229.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2d:48:6c:20:87:6e:0e:c1:fc:09:e3:6a:ad:75:e3:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 31 09:03:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3bba4c823d0ac03120abc5091333901113c473af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9e:16:16:ba:9c:92:bf:d9:03:0e:3e:11:09:
eb:e3:9f:05:3a:40:56:46:f1:48:2d:7c:03:b5:5a:
10:43:2d:d1:88:82:a3:dc:cf:15:9a:c2:cf:75:2f:
79:61:62:b9:66:79:4a:6a:d6:e9:e1:00:d0:34:dd:
a3:6f:13:d8:7e:de:f1:91:32:b8:85:6e:84:37:2e:
81:6a:0f:e9:ea:1a:45:4b:39:6e:50:9d:a2:d8:eb:
7a:8b:b6:41:16:f9:21:6b:84:86:ef:98:1a:ee:6e:
b2:e8:51:c0:c9:6a:96:f4:18:5b:e5:81:99:57:b1:
0c:59:7a:da:ca:bc:52:a9:8b:85:87:b4:47:da:2b:
d4:c5:74:5e:b8:b2:54:f1:37:27:91:44:9c:09:34:
ad:11:49:aa:9e:a9:e2:92:50:a7:2e:a3:a7:b7:fb:
4e:8a:b0:81:76:15:ee:c6:27:cc:85:40:4a:6c:6a:
c4:14:de:a5:86:7c:d9:dd:8a:8b:69:45:f5:01:1c:
fe:62:16:28:e7:88:c3:7b:25:62:ab:da:08:90:8e:
88:11:be:b5:fb:c4:4f:d0:07:f4:2c:40:f5:d2:75:
6c:e0:59:ba:1b:62:df:1e:19:c1:c5:99:75:aa:60:
46:fe:fb:91:73:be:f4:95:b8:48:ee:a7:e0:0d:5c:
70:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BA:4C:82:3D:0A:C0:31:20:AB:C5:09:13:33:90:11:13:C4:73:AF
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/O7pMgj0KwDEgq8UJEzOQERPEc68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.192.0/19
37.28.160.0/19
37.29.0.0/17
46.29.192.0/21
46.229.128.0/20
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.149.24.0/23
83.149.28.0/22
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.106.192.0/21
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.192.0-178.176.198.255
178.176.202.0/23
178.176.208.0/20
178.178.0.0-178.178.4.255
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.168.0-188.170.227.255
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
43:5d:0f:ea:c4:cc:8b:84:e6:83:c4:a9:7a:82:a7:00:b6:5f:
71:11:04:e8:d1:8f:d6:71:17:47:ef:3b:03:b4:ce:bb:80:40:
a6:9b:a2:b4:12:b5:d0:ce:f8:a2:8f:47:66:91:7a:4a:a3:04:
a0:54:15:fb:ea:95:22:89:6b:30:cb:e4:5d:a9:70:27:90:4f:
9d:9e:8f:ba:73:14:89:aa:b8:3d:92:88:be:bd:9c:fb:a0:dd:
75:74:1a:f4:67:df:bf:ee:b5:5c:11:b9:28:6d:58:e5:0b:99:
62:11:ae:e2:9b:dc:f6:90:ec:57:6b:3d:55:dd:88:6d:17:88:
46:71:f5:f1:3d:a4:e6:14:f5:a6:1b:15:1e:07:1d:7e:ec:d3:
0b:dd:1b:f3:54:1c:ff:ba:13:39:a6:49:26:40:64:09:b3:ae:
a6:71:66:62:35:3c:f3:06:41:c3:2e:01:46:96:b8:39:8f:22:
16:48:b7:25:8f:61:a8:a4:4a:44:63:f8:18:90:0e:89:e4:10:
d6:e4:c0:ab:e9:8a:f9:21:7c:59:dc:f2:89:68:f2:6b:c0:73:
f6:fc:6e:8e:8b:30:6e:96:34:08:c5:93:42:f3:64:f8:c0:ba:
85:f7:a2:1f:cd:52:62:c9:d6:13:c8:04:ea:25:dc:3c:a4:d4:
ad:a3:58:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:37 2025 by rpki-client