Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/UFplj01P_ByQkgSWlLm48dTb5f4.roa
File: UFplj01P_ByQkgSWlLm48dTb5f4.roa (raw, json)
Hash identifier: HdUN+Ox29z+xh1pFYsihRA+APfvkf7onqvt2fDmk5yk=
Subject key identifier: 50:5A:65:8F:4D:4F:FC:1C:90:92:04:96:94:B9:B8:F1:D4:DB:E5:FE
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01842D620D4F740DE05B68E256140357CA34
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/UFplj01P_ByQkgSWlLm48dTb5f4.roa
Signing time: Mon 31 Oct 2022 09:31:51 +0000
ROA not before: Mon 31 Oct 2022 09:31:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20632
IP address blocks: 109.188.0.0/16 maxlen: 24
84.204.230.0/24 maxlen: 24
46.29.192.0/21 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
84.204.160.0/20 maxlen: 20
84.204.176.0/21 maxlen: 21
79.171.8.0/21 maxlen: 24
84.204.188.0/22 maxlen: 22
84.204.192.0/18 maxlen: 18
193.201.228.0/22 maxlen: 24
217.195.64.0/19 maxlen: 19
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
84.204.0.0/17 maxlen: 17
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
37.29.0.0/17 maxlen: 24
78.25.64.0/18 maxlen: 24
37.28.160.0/19 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
84.204.132.0/22 maxlen: 22
84.204.138.0/24 maxlen: 24
84.204.136.0/24 maxlen: 24
84.204.139.0/24 maxlen: 24
84.204.140.0/22 maxlen: 22
84.204.144.0/20 maxlen: 20
195.5.128.0/19 maxlen: 24
82.140.64.0/18 maxlen: 18
128.204.64.0/18 maxlen: 24
82.140.93.0/24 maxlen: 24
95.137.0.0/17 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
82.196.64.0/19 maxlen: 19
81.24.128.0/20 maxlen: 24
78.41.100.0/22 maxlen: 24
195.78.116.0/23 maxlen: 24
83.169.192.0/18 maxlen: 24
213.172.0.0/19 maxlen: 19
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 24
46.232.200.0/21 maxlen: 24
62.64.0.0/19 maxlen: 24
195.144.224.0/19 maxlen: 19
81.3.128.0/18 maxlen: 18
213.243.64.0/18 maxlen: 24
213.182.160.0/19 maxlen: 19
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
46.229.128.0/20 maxlen: 24
83.229.128.0/17 maxlen: 24
46.47.192.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2d:62:0d:4f:74:0d:e0:5b:68:e2:56:14:03:57:ca:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 31 09:31:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=505a658f4d4ffc1c9092049694b9b8f1d4dbe5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4b:54:d5:be:91:97:37:32:74:36:1c:09:ec:
62:24:ba:b8:7c:76:33:3f:ae:56:dd:24:b6:fb:e4:
a7:21:77:c2:f2:6a:f3:61:46:95:b9:2d:5f:e4:0e:
29:4e:35:4f:cc:8b:4b:cb:79:62:34:b6:56:e6:c1:
7b:34:d8:2d:77:54:fa:4a:46:53:fe:36:42:a4:19:
41:12:d4:d4:3a:c0:5f:65:ad:84:9f:34:24:af:05:
d6:10:4d:be:df:1d:d4:79:e7:8b:52:e5:b6:28:44:
6d:54:c4:71:83:1b:84:14:40:5c:1b:26:fd:c7:b5:
21:61:f0:cf:db:64:6f:da:e8:8d:03:ad:ff:5a:9b:
0c:f7:3d:2a:88:b9:e7:6f:b1:7b:ff:cb:32:e4:cf:
53:50:29:44:98:12:f7:37:98:db:6c:02:03:72:40:
8f:a4:ed:07:10:5a:59:77:6b:1e:87:93:08:61:e5:
5c:39:56:dc:56:df:6d:1e:54:7a:03:d8:1c:bb:02:
ef:88:da:1e:52:77:fc:b5:7a:42:b4:06:91:86:3e:
41:69:4c:da:12:0d:35:91:99:78:d7:2a:21:47:13:
f3:14:d2:ba:28:83:e5:16:bd:80:72:5c:62:0a:27:
ab:d2:d2:1a:a8:81:4e:fc:1c:91:0d:02:8f:0c:59:
19:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5A:65:8F:4D:4F:FC:1C:90:92:04:96:94:B9:B8:F1:D4:DB:E5:FE
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/UFplj01P_ByQkgSWlLm48dTb5f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.28.160.0/19
37.29.0.0/17
46.29.192.0/21
46.47.192.0/18
46.229.128.0/20
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.3.128.0/18
81.24.128.0/20
82.140.64.0/18
82.196.64.0/19
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
84.204.0.0/17
84.204.132.0-84.204.136.255
84.204.138.0-84.204.183.255
84.204.188.0-84.204.255.255
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.144.224.0/19
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.172.0.0/19
213.182.160.0/19
213.243.64.0/18
217.115.80.0/20
217.195.64.0/19
Signature Algorithm: sha256WithRSAEncryption
8a:c6:f0:42:33:b2:90:45:d9:1f:d2:d5:33:51:8e:c7:0f:44:
1a:2d:fc:78:66:67:c8:80:fc:95:bc:aa:b7:cf:63:c6:95:76:
f6:4f:b5:4e:10:a5:02:0c:87:2a:03:8c:04:27:f1:41:c4:e4:
82:e0:92:61:e2:d6:b7:bb:07:bd:f6:01:72:f0:b5:8f:15:ba:
64:7a:b9:76:e6:c6:dc:ad:e4:7f:fe:2f:7b:2f:5c:0a:39:d7:
1e:d1:b0:2d:3a:57:68:4e:f5:0c:ab:42:53:e6:6f:30:fc:25:
c4:72:d6:d9:fa:ee:0e:3e:73:86:3b:7a:72:63:bf:1f:1a:d5:
86:97:80:b1:ec:ef:57:22:19:6d:a9:7e:25:d1:10:42:75:70:
7d:b2:71:d8:5c:ec:6d:2a:7e:71:b9:cd:30:69:e7:b9:f8:ee:
77:27:2a:a5:f7:fa:b1:75:bf:f3:a9:3e:62:6d:5a:be:d4:73:
76:ae:13:fe:a1:ff:c9:51:6f:1a:6e:9c:d7:5e:1d:dd:c5:f9:
e3:3b:2f:e5:0e:0d:20:f1:95:62:68:d3:d7:b9:18:fb:d7:54:
3d:fd:5b:e1:c7:63:f3:18:c1:be:58:50:64:47:d4:36:9e:af:
dc:aa:5c:b0:9e:c2:d0:f1:b5:c8:bf:aa:e0:a9:dc:ae:69:5b:
2a:0a:04:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:55 2025 by rpki-client