Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/PTp7vVAJExVpmmSwqAbdZtg2YBk.roa
File: PTp7vVAJExVpmmSwqAbdZtg2YBk.roa (raw, json)
Hash identifier: 6gK3rBMm1NYI8OUHWAcldkVBa2oVDocs6mj664ORbik=
Subject key identifier: 3D:3A:7B:BD:50:09:13:15:69:9A:64:B0:A8:06:DD:66:D8:36:60:19
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01869D21968061773D3A83E16CABAD8797B8
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/PTp7vVAJExVpmmSwqAbdZtg2YBk.roa
Signing time: Wed 01 Mar 2023 12:24:29 +0000
ROA not before: Wed 01 Mar 2023 12:24:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29648
IP address blocks: 31.173.119.0/24 maxlen: 24
77.233.160.0/19 maxlen: 19
77.233.160.0/24 maxlen: 24
77.233.166.0/24 maxlen: 24
77.233.161.0/24 maxlen: 24
77.233.164.0/24 maxlen: 24
77.233.162.0/24 maxlen: 24
77.233.167.0/24 maxlen: 24
77.233.170.0/24 maxlen: 24
31.173.104.0/24 maxlen: 24
31.173.105.0/24 maxlen: 24
31.173.112.0/24 maxlen: 24
31.173.109.0/24 maxlen: 24
31.173.110.0/24 maxlen: 24
31.173.107.0/24 maxlen: 24
31.173.108.0/24 maxlen: 24
31.173.106.0/24 maxlen: 24
31.173.111.0/24 maxlen: 24
31.173.117.0/24 maxlen: 24
31.173.118.0/24 maxlen: 24
31.173.115.0/24 maxlen: 24
31.173.116.0/24 maxlen: 24
31.173.113.0/24 maxlen: 24
31.173.114.0/24 maxlen: 24
77.233.173.0/24 maxlen: 24
77.233.178.0/24 maxlen: 24
77.233.181.0/24 maxlen: 24
77.233.182.0/24 maxlen: 24
77.233.185.0/24 maxlen: 24
77.233.180.0/24 maxlen: 24
77.233.186.0/24 maxlen: 24
77.233.190.0/24 maxlen: 24
77.233.188.0/24 maxlen: 24
77.233.191.0/24 maxlen: 24
188.170.98.0/24 maxlen: 24
86.109.192.0/19 maxlen: 19
86.109.192.0/20 maxlen: 20
188.170.97.0/24 maxlen: 24
188.170.96.0/24 maxlen: 24
188.170.100.0/24 maxlen: 24
188.170.103.0/24 maxlen: 24
86.109.195.0/24 maxlen: 24
188.170.105.0/24 maxlen: 24
188.170.102.0/24 maxlen: 24
86.109.193.0/24 maxlen: 24
188.170.99.0/24 maxlen: 24
188.170.104.0/24 maxlen: 24
188.170.101.0/24 maxlen: 24
188.170.106.0/24 maxlen: 24
188.170.111.0/24 maxlen: 24
86.109.200.0/23 maxlen: 23
188.170.108.0/24 maxlen: 24
188.170.110.0/24 maxlen: 24
188.170.107.0/24 maxlen: 24
188.170.109.0/24 maxlen: 24
188.170.112.0/24 maxlen: 24
188.170.114.0/24 maxlen: 24
86.109.213.0/24 maxlen: 24
86.109.210.0/24 maxlen: 24
86.109.208.0/24 maxlen: 24
188.170.113.0/24 maxlen: 24
188.170.116.0/24 maxlen: 24
188.170.115.0/24 maxlen: 24
86.109.212.0/24 maxlen: 24
188.170.118.0/24 maxlen: 24
188.170.117.0/24 maxlen: 24
188.170.119.0/24 maxlen: 24
86.109.216.0/24 maxlen: 24
188.170.122.0/24 maxlen: 24
188.170.121.0/24 maxlen: 24
188.170.120.0/24 maxlen: 24
86.109.214.0/24 maxlen: 24
188.170.124.0/24 maxlen: 24
188.170.123.0/24 maxlen: 24
86.109.215.0/24 maxlen: 24
86.109.218.0/23 maxlen: 23
188.170.125.0/24 maxlen: 24
188.170.127.0/24 maxlen: 24
86.109.222.0/24 maxlen: 24
86.109.220.0/24 maxlen: 24
188.170.126.0/24 maxlen: 24
86.109.223.0/24 maxlen: 24
78.109.120.0/24 maxlen: 24
78.109.121.0/24 maxlen: 24
195.149.111.0/24 maxlen: 24
178.176.96.0/24 maxlen: 24
178.176.98.0/24 maxlen: 24
178.176.97.0/24 maxlen: 24
178.176.102.0/24 maxlen: 24
178.176.99.0/24 maxlen: 24
178.176.101.0/24 maxlen: 24
178.176.103.0/24 maxlen: 24
178.176.100.0/24 maxlen: 24
178.176.118.0/24 maxlen: 24
178.176.115.0/24 maxlen: 24
178.176.117.0/24 maxlen: 24
178.176.114.0/24 maxlen: 24
178.176.116.0/24 maxlen: 24
178.176.123.0/24 maxlen: 24
178.176.120.0/24 maxlen: 24
178.176.125.0/24 maxlen: 24
178.176.122.0/24 maxlen: 24
178.176.119.0/24 maxlen: 24
178.176.124.0/24 maxlen: 24
178.176.121.0/24 maxlen: 24
178.176.126.0/24 maxlen: 24
178.176.127.0/24 maxlen: 24
83.169.217.0/24 maxlen: 24
83.169.218.0/24 maxlen: 24
83.169.219.0/24 maxlen: 24
83.169.220.0/24 maxlen: 24
83.169.223.0/24 maxlen: 24
83.169.221.0/24 maxlen: 24
83.169.222.0/24 maxlen: 24
188.94.172.0/24 maxlen: 24
188.94.169.0/24 maxlen: 24
188.94.170.0/24 maxlen: 24
188.94.168.0/24 maxlen: 24
188.94.171.0/24 maxlen: 24
188.94.175.0/24 maxlen: 24
188.94.173.0/24 maxlen: 24
188.94.174.0/24 maxlen: 24
217.115.81.0/24 maxlen: 24
217.115.80.0/20 maxlen: 20
217.115.80.0/24 maxlen: 24
217.115.91.0/24 maxlen: 24
2a03:d005:800::/40 maxlen: 40
2a03:d005:600::/40 maxlen: 40
2a03:d005:300::/40 maxlen: 40
2a03:d005::/40 maxlen: 40
2a03:d005:500::/40 maxlen: 40
2a03:d005:200::/40 maxlen: 40
2a03:d005:700::/40 maxlen: 40
2a03:d005:400::/40 maxlen: 40
2a03:d005:900::/40 maxlen: 40
2a03:d005:100::/40 maxlen: 40
2a03:d000:9004::/46 maxlen: 46
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9d:21:96:80:61:77:3d:3a:83:e1:6c:ab:ad:87:97:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Mar 1 12:24:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d3a7bbd50091315699a64b0a806dd66d8366019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f8:78:2b:49:da:78:86:1b:03:51:3f:4c:af:
4c:c5:37:97:98:89:3e:72:4c:f7:3f:5e:a2:ac:47:
ce:01:f8:4b:7a:a0:56:d9:68:2a:18:4f:dd:a4:af:
a1:10:1f:2b:60:34:2b:ec:38:81:f9:95:91:e4:b1:
7f:aa:8c:7f:07:e9:ff:3f:26:88:7d:18:52:d5:93:
2f:88:de:76:ed:08:c7:79:99:a0:36:05:4d:66:b0:
1c:e7:0b:6f:d5:1e:03:8d:60:fe:84:6e:e6:bc:4b:
9b:5e:0c:32:1e:03:9b:9e:72:bb:04:fd:f7:bd:75:
4d:32:8c:16:d6:2a:1d:3f:f5:9b:9d:53:b5:58:fd:
2b:a2:79:70:51:d0:83:ac:85:c3:3c:a7:f8:08:bd:
22:68:2c:db:6a:0b:76:ad:30:af:22:61:2a:e1:a1:
8b:7b:2c:d2:6a:1f:04:c0:a3:02:18:e8:3e:fa:01:
60:c7:84:bc:f5:a5:ef:c4:c4:15:bd:d6:ee:08:a0:
0a:b1:e9:25:f4:0e:36:e0:09:89:d1:aa:b0:38:ad:
9a:00:3c:77:16:c5:b4:86:44:56:5f:cc:42:70:0f:
ac:e0:4a:8a:49:aa:29:f7:33:30:a6:35:4a:b9:93:
32:bf:69:3a:b5:bf:2f:9a:c6:82:b8:7d:91:c5:fb:
83:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3A:7B:BD:50:09:13:15:69:9A:64:B0:A8:06:DD:66:D8:36:60:19
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/PTp7vVAJExVpmmSwqAbdZtg2YBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.104.0-31.173.119.255
77.233.160.0/19
78.109.120.0/23
83.169.217.0-83.169.223.255
86.109.192.0/19
178.176.96.0/21
178.176.114.0-178.176.127.255
188.94.168.0/21
188.170.96.0/19
195.149.111.0/24
217.115.80.0/20
IPv6:
2a03:d000:9004::/46
2a03:d005::-2a03:d005:9ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
42:46:18:b2:4a:fa:e1:2d:7f:28:9f:37:ef:24:05:1e:88:9e:
6a:3b:42:be:29:89:1b:8a:58:c2:b8:4b:0e:8a:00:2c:45:b3:
df:4d:b4:f2:74:86:cc:37:fe:91:55:5f:40:5f:ba:f8:e1:ba:
0d:a9:e2:bd:db:77:58:2d:76:0a:a0:1c:30:d7:3c:2e:b3:ac:
ce:5a:78:2f:f0:b5:2f:8f:be:d3:30:b5:26:63:5a:8c:02:f4:
3a:74:2a:49:59:e9:72:3d:85:6a:b7:83:7f:61:5c:e3:c5:ed:
1b:84:40:34:15:c7:ce:01:9c:35:89:f6:d7:aa:b7:bf:c4:df:
79:cb:2c:c2:b0:25:46:bc:fe:3b:aa:32:4e:5d:52:90:11:df:
cb:9f:2f:2a:ed:2c:5a:7d:da:39:27:db:ca:37:5f:87:99:f5:
6f:f5:f0:be:65:ef:e4:1b:e9:bd:b6:38:03:46:6e:89:66:8b:
b2:4a:aa:37:28:11:2b:dc:bf:ed:81:55:a5:6d:19:2f:d8:20:
5e:2b:1c:fc:e1:46:70:4f:df:44:b4:22:ef:42:7c:29:b8:2b:
69:c1:f7:c7:69:99:9e:7b:e6:42:31:aa:5c:8b:8c:30:c6:2c:
c3:2f:80:8c:ed:09:6d:93:a7:cf:ba:6d:0f:f6:03:7b:7c:e8:
49:9d:a1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:36:23 2025 by rpki-client