Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/R89lxtMODI6I1Mq1rmfV4JyhEq4.roa
File: R89lxtMODI6I1Mq1rmfV4JyhEq4.roa (raw, json)
Hash identifier: V7V1k4RPWl4gBncvK5ocpO425PLdahY+Fnmfi9BQQxc=
Subject key identifier: 47:CF:65:C6:D3:0E:0C:8E:88:D4:CA:B5:AE:67:D5:E0:9C:A1:12:AE
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F1F5188D8A7D9A607CA693C2B54758F1
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/R89lxtMODI6I1Mq1rmfV4JyhEq4.roa
Signing time: Thu 08 Dec 2022 13:38:02 +0000
ROA not before: Thu 08 Dec 2022 13:38:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31205
IP address blocks: 212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.16.96.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
188.170.247.0/24 maxlen: 24
83.149.50.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
83.149.49.0/24 maxlen: 24
83.149.48.0/24 maxlen: 24
83.149.51.0/24 maxlen: 24
178.176.48.0/24 maxlen: 24
193.201.228.0/22 maxlen: 24
83.169.252.0/22 maxlen: 22
83.169.248.0/22 maxlen: 22
85.26.226.0/24 maxlen: 24
85.26.224.0/24 maxlen: 24
85.26.230.0/24 maxlen: 24
85.26.229.0/24 maxlen: 24
85.26.228.0/24 maxlen: 24
85.26.231.0/24 maxlen: 24
85.26.227.0/24 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
212.69.96.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
46.232.202.0/23 maxlen: 23
46.232.200.0/23 maxlen: 23
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
178.176.240.0/22 maxlen: 22
178.176.244.0/22 maxlen: 22
78.25.92.0/23 maxlen: 23
78.25.94.0/23 maxlen: 23
37.29.86.0/23 maxlen: 23
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
188.170.240.0/22 maxlen: 22
31.173.240.0/23 maxlen: 23
195.5.128.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
128.204.66.0/24 maxlen: 24
31.173.242.0/23 maxlen: 23
128.204.67.0/24 maxlen: 24
31.173.244.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:f5:18:8d:8a:7d:9a:60:7c:a6:93:c2:b5:47:58:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 13:38:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47cf65c6d30e0c8e88d4cab5ae67d5e09ca112ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:55:7b:61:ef:2e:1e:4a:3b:0a:c8:a9:96:d9:
94:67:de:81:41:bd:a9:fa:52:37:c4:e0:44:83:12:
4a:8a:df:b2:62:6e:ba:c7:3c:2e:2a:7a:30:d8:6e:
2d:4d:bc:14:a1:54:38:d0:4d:ef:41:40:b2:1a:c2:
1e:63:28:56:b0:b3:b2:fa:e3:56:14:08:6d:26:19:
7d:f7:19:39:db:a3:c4:fc:c7:76:93:60:de:2b:80:
1a:97:89:bb:7d:73:4b:27:42:ed:f3:56:a2:46:61:
e9:f5:74:4d:8f:65:d1:11:fa:e1:8b:17:aa:66:ef:
22:bc:b4:25:3e:d6:41:24:d0:08:f4:1f:fa:1a:a6:
fa:e6:3f:c9:c4:2b:af:e7:48:dd:05:74:53:8e:6f:
d1:d8:27:47:ea:ba:e4:c0:51:78:97:01:f9:9c:f8:
7d:c5:a4:a0:87:8b:ce:5e:e8:fb:fd:e3:00:c7:b0:
00:7a:e6:03:d2:b9:97:d4:ad:0e:2c:2f:ca:79:1f:
7b:34:e2:f4:46:92:bc:0e:3a:f1:b4:9f:ba:70:d1:
75:55:07:b8:bc:76:67:73:cb:85:1a:c2:a6:90:b4:
92:30:14:58:88:05:a2:a6:0b:60:b5:71:52:15:7c:
8c:f7:61:73:a7:69:17:43:cb:f3:ab:f8:f2:87:06:
69:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:CF:65:C6:D3:0E:0C:8E:88:D4:CA:B5:AE:67:D5:E0:9C:A1:12:AE
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/R89lxtMODI6I1Mq1rmfV4JyhEq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.240.0/21
37.29.86.0/23
46.232.200.0/22
78.25.92.0/22
83.149.48.0/22
83.169.248.0/21
85.26.224.0/24
85.26.226.0-85.26.231.255
128.204.66.0/23
178.176.48.0/24
178.176.240.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.240.0/22
188.170.247.0/24
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
a4:21:22:d5:80:7b:7a:5b:c8:83:8a:4f:ef:ee:38:e9:0e:53:
77:ab:cc:ef:7b:27:d8:25:39:c6:1e:f0:d3:e2:0c:3f:76:62:
88:ca:48:d5:98:0e:32:3c:f3:0b:ee:27:8a:1b:41:7c:1b:c1:
e4:32:f9:7b:52:07:d8:33:a6:10:6c:5c:4b:10:24:89:c0:63:
4b:c5:83:22:85:ce:b5:c7:c3:93:c0:56:26:a4:bb:eb:06:04:
70:73:ff:af:ba:96:0c:0a:49:34:44:c5:5b:1d:5e:0f:e0:0c:
9c:ee:89:c5:96:ce:9e:92:97:ff:21:6e:60:5f:ad:08:19:4f:
35:4b:a8:0a:30:d0:0c:5e:8a:5b:81:d7:cc:4d:3b:75:02:20:
ba:1d:35:e5:14:2b:a5:66:c9:84:55:78:e8:8e:94:a2:66:61:
7c:4a:58:a5:b5:0f:02:fc:40:a5:eb:52:37:54:47:f5:3d:21:
c5:a6:b0:c9:2f:e0:5d:20:b3:13:6b:68:fa:a9:9f:b0:a1:27:
c8:48:b9:e6:67:d5:d1:ae:3f:71:3f:d8:2f:7b:f5:81:42:85:
1f:ed:1c:d6:38:dd:aa:5e:3e:b4:d6:56:d1:77:97:c5:48:8f:
3c:c8:f9:8e:f3:d4:d6:76:bd:83:6f:e5:0b:45:37:7e:9b:73:
51:db:75:9e
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgISAYTx9RiNin2aYHymk8K1R1jxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMjA4MTMzODAyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2NmNjVjNmQzMGUwYzhlODhkNGNhYjVhZTY3ZDVlMDljYTExMmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVV7Ye8uHko7CsipltmUZ96BQb2p
+lI3xOBEgxJKit+yYm66xzwuKnow2G4tTbwUoVQ40E3vQUCyGsIeYyhWsLOy+uNW
FAhtJhl99xk526PE/Md2k2DeK4Aal4m7fXNLJ0Lt81aiRmHp9XRNj2XREfrhixeq
Zu8ivLQlPtZBJNAI9B/6Gqb65j/JxCuv50jdBXRTjm/R2CdH6rrkwFF4lwH5nPh9
xaSgh4vOXuj7/eMAx7AAeuYD0rmX1K0OLC/KeR97NOL0RpK8DjrxtJ+6cNF1VQe4
vHZnc8uFGsKmkLSSMBRYiAWipgtgtXFSFXyM92Fzp2kXQ8vzq/jyhwZpSwIDAQAB
o4ICyTCCAsUwHQYDVR0OBBYEFEfPZcbTDgyOiNTKta5n1eCcoRKuMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvUjg5bHh0TU9ESTZJMU1xMXJtZlY0SnloRXE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHeBggrBgEFBQcBBwEB/wSBzjCByzCByAQCAAEwgcEDBAMf
rfADBAElHVYDBAIu6MgDBAJOGVwDBAJTlTADBANTqfgDBABVGuAwDAMEAVUa4gME
A1Ua4AMEAYDMQgMEALKwMAMEA7Kw8AMEArkDIAMEArnSjAMEA7xeqAMDALyiAwQC
vKrwAwQAvKr3AwQCwcnkAwQFwwWAAwQFwxBgAwQBw050AwQAw5VvAwQFw+ZAAwQF
1A6gAwQF1CxAAwQF1EVgAwQF1HegAwQF1ZqgAwQF1aggAwQG1fNAAwQE2XNQMA0G
CSqGSIb3DQEBCwUAA4IBAQCkISLVgHt6W8iDik/v7jjpDlN3q8zveyfYJTnGHvDT
4gw/dmKIykjVmA4yPPML7ieKG0F8G8HkMvl7UgfYM6YQbFxLECSJwGNLxYMihc61
x8OTwFYmpLvrBgRwc/+vupYMCkk0RMVbHV4P4Ayc7onFls6ekpf/IW5gX60IGU81
S6gKMNAMXopbgdfMTTt1AiC6HTXlFCulZsmEVXjojpSiZmF8SliltQ8C/ECl61I3
VEf1PSHFprDJL+BdILMTa2j6qZ+woSfISLnmZ9XRrj9xP9gve/WBQoUf7RzWON2q
Xj601lbRd5fFSI88yPmO89TWdr2Db+ULRTd+m3NR23We
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:12 2025 by rpki-client