Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/OC3ayipjo9xujcX8JkTAh5cT1l0.roa
File: OC3ayipjo9xujcX8JkTAh5cT1l0.roa (raw, json)
Hash identifier: 4xIHS5RFUUh3E6GWRmMts9cmjwaDAoRGX6VrekJoe6w=
Subject key identifier: 38:2D:DA:CA:2A:63:A3:DC:6E:8D:C5:FC:26:44:C0:87:97:13:D6:5D
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184E2660FB4B631CAA230E117FAA431CCA7
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/OC3ayipjo9xujcX8JkTAh5cT1l0.roa
Signing time: Mon 05 Dec 2022 13:07:30 +0000
ROA not before: Mon 05 Dec 2022 13:07:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29648
IP address blocks: 109.188.0.0/16 maxlen: 24
85.26.128.0/17 maxlen: 24
193.201.228.0/22 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
31.173.119.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
91.193.212.0/22 maxlen: 24
195.5.128.0/19 maxlen: 24
77.233.160.0/19 maxlen: 19
77.233.160.0/24 maxlen: 24
77.233.166.0/24 maxlen: 24
77.233.161.0/24 maxlen: 24
77.233.164.0/24 maxlen: 24
77.233.162.0/24 maxlen: 24
77.233.167.0/24 maxlen: 24
77.233.170.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
31.173.104.0/24 maxlen: 24
31.173.105.0/24 maxlen: 24
31.173.112.0/24 maxlen: 24
31.173.109.0/24 maxlen: 24
31.173.110.0/24 maxlen: 24
31.173.107.0/24 maxlen: 24
31.173.108.0/24 maxlen: 24
31.173.106.0/24 maxlen: 24
31.173.111.0/24 maxlen: 24
31.173.117.0/24 maxlen: 24
31.173.118.0/24 maxlen: 24
31.173.115.0/24 maxlen: 24
31.173.116.0/24 maxlen: 24
31.173.113.0/24 maxlen: 24
31.173.114.0/24 maxlen: 24
77.233.173.0/24 maxlen: 24
77.233.178.0/24 maxlen: 24
77.233.181.0/24 maxlen: 24
77.233.182.0/24 maxlen: 24
77.233.185.0/24 maxlen: 24
77.233.180.0/24 maxlen: 24
77.233.186.0/24 maxlen: 24
77.233.190.0/24 maxlen: 24
77.233.188.0/24 maxlen: 24
77.233.191.0/24 maxlen: 24
212.44.64.0/19 maxlen: 24
195.16.96.0/19 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
185.3.32.0/22 maxlen: 24
86.109.192.0/19 maxlen: 24
188.170.98.0/24 maxlen: 24
188.170.97.0/24 maxlen: 24
188.170.96.0/24 maxlen: 24
188.170.103.0/24 maxlen: 24
188.170.100.0/24 maxlen: 24
188.170.105.0/24 maxlen: 24
188.170.102.0/24 maxlen: 24
188.170.99.0/24 maxlen: 24
188.170.104.0/24 maxlen: 24
188.170.101.0/24 maxlen: 24
188.170.106.0/24 maxlen: 24
188.170.111.0/24 maxlen: 24
188.170.108.0/24 maxlen: 24
188.170.110.0/24 maxlen: 24
188.170.107.0/24 maxlen: 24
212.69.96.0/19 maxlen: 24
188.170.109.0/24 maxlen: 24
188.170.112.0/24 maxlen: 24
188.170.114.0/24 maxlen: 24
188.170.113.0/24 maxlen: 24
188.170.116.0/24 maxlen: 24
188.170.115.0/24 maxlen: 24
188.170.118.0/24 maxlen: 24
188.170.117.0/24 maxlen: 24
188.170.119.0/24 maxlen: 24
188.170.122.0/24 maxlen: 24
188.170.121.0/24 maxlen: 24
188.170.124.0/24 maxlen: 24
188.170.123.0/24 maxlen: 24
188.170.125.0/24 maxlen: 24
188.170.120.0/24 maxlen: 24
188.170.127.0/24 maxlen: 24
188.170.126.0/24 maxlen: 24
78.109.120.0/24 maxlen: 24
78.109.121.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
178.176.96.0/24 maxlen: 24
178.176.98.0/24 maxlen: 24
178.176.97.0/24 maxlen: 24
178.176.102.0/24 maxlen: 24
178.176.99.0/24 maxlen: 24
178.176.101.0/24 maxlen: 24
178.176.103.0/24 maxlen: 24
178.176.100.0/24 maxlen: 24
178.176.118.0/24 maxlen: 24
178.176.115.0/24 maxlen: 24
178.176.117.0/24 maxlen: 24
178.176.114.0/24 maxlen: 24
178.176.116.0/24 maxlen: 24
178.176.123.0/24 maxlen: 24
178.176.120.0/24 maxlen: 24
178.176.125.0/24 maxlen: 24
178.176.122.0/24 maxlen: 24
178.176.119.0/24 maxlen: 24
178.176.124.0/24 maxlen: 24
178.176.121.0/24 maxlen: 24
178.176.126.0/24 maxlen: 24
178.176.127.0/24 maxlen: 24
83.169.217.0/24 maxlen: 24
83.169.218.0/24 maxlen: 24
83.169.219.0/24 maxlen: 24
83.169.220.0/24 maxlen: 24
83.169.223.0/24 maxlen: 24
83.169.221.0/24 maxlen: 24
83.169.222.0/24 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e2:66:0f:b4:b6:31:ca:a2:30:e1:17:fa:a4:31:cc:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 5 13:07:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=382ddaca2a63a3dc6e8dc5fc2644c0879713d65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c6:3a:97:04:ed:93:ee:09:e7:cc:44:ab:a6:
9c:95:18:22:95:c7:38:32:37:c6:1d:31:3c:29:0d:
5e:1c:65:1f:d6:12:76:e2:7b:07:62:8c:4c:85:d7:
3c:f8:8e:de:1c:78:9e:5d:82:9f:47:31:19:d6:d1:
d3:96:ff:bd:a5:e6:5c:32:29:97:e2:d0:53:67:1e:
db:01:14:10:41:48:dc:18:20:e0:05:f5:9c:53:bd:
c3:84:2a:b8:70:90:dd:3a:3b:16:06:7b:cc:24:f3:
04:bd:d2:4f:93:be:3d:4d:07:bf:e6:6c:00:5a:bc:
b4:0c:2f:c7:c2:75:b9:b1:fd:83:20:5a:da:a2:d0:
21:c4:77:be:09:d6:73:d8:d4:3f:76:9d:70:51:96:
67:e7:62:c3:9f:bd:9b:e1:6c:97:ba:91:78:8d:d5:
54:55:53:79:41:61:f1:61:ce:b8:84:79:f5:a6:c2:
a6:72:98:14:31:98:f3:17:c1:0a:1e:e2:aa:9e:2d:
c8:10:a6:22:31:02:ea:2d:7d:8e:60:0c:f6:ba:54:
3e:4f:75:37:f2:fe:33:c2:3f:73:d1:ea:22:47:2a:
44:f7:6e:de:2e:29:ea:6f:a4:79:1e:55:a9:69:1b:
b7:60:ab:be:bc:a4:0d:81:73:47:f7:3c:f3:fe:4a:
cd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2D:DA:CA:2A:63:A3:DC:6E:8D:C5:FC:26:44:C0:87:97:13:D6:5D
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/OC3ayipjo9xujcX8JkTAh5cT1l0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.104.0-31.173.119.255
77.233.160.0/19
78.109.120.0/23
83.169.217.0-83.169.223.255
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.96.0/21
178.176.114.0-178.176.127.255
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.96.0/19
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
11:a7:ee:b4:0c:83:cf:ec:98:8b:fb:c9:bd:ac:5b:7c:79:87:
9d:2a:7b:c7:c7:6a:2d:87:d8:87:90:b2:15:1e:ff:03:42:43:
e6:1f:3d:12:47:37:cd:44:52:55:b7:83:e4:8b:d5:56:71:25:
55:d7:0b:d4:b4:88:5e:05:3e:f2:83:d7:d2:ad:5d:00:63:be:
e8:33:eb:d0:49:c2:ef:72:42:ff:17:ec:47:2a:aa:71:66:8e:
50:c8:fc:95:b2:20:ea:95:ed:cd:39:29:94:d8:c0:a7:1c:35:
1b:4d:37:4d:43:cb:60:6b:27:81:8d:64:41:68:dc:c3:78:ea:
8e:77:8d:7e:45:fc:4f:77:59:3b:38:7a:99:e4:86:8f:bc:92:
76:69:c5:fd:56:20:22:a4:7a:c2:44:6a:05:b1:a7:a0:4e:89:
c8:5a:14:10:13:92:74:54:35:82:c2:24:6b:73:29:e7:c8:77:
f1:76:f8:bd:6a:14:47:16:a0:37:75:aa:4c:e6:5a:57:81:72:
71:f4:d2:84:c4:60:97:16:94:3a:cf:8d:4b:c9:38:c0:a8:d1:
24:84:fe:be:0b:5f:88:bf:d0:18:8c:9d:bc:e5:9f:3c:15:89:
54:03:1b:f3:a7:96:17:c1:9a:18:5f:0c:7a:49:2a:5b:08:1e:
7b:fb:0b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:25 2024 by rpki-client on console-fra.rpki-client.org