Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Vpr4ZiazjkTrSWyX7IXl2JLM0_E.roa
File: Vpr4ZiazjkTrSWyX7IXl2JLM0_E.roa (raw, json)
Hash identifier: K55H/KJpW/CpIgLpUwrPffukVUECiPG5PzjsLOm9ynk=
Subject key identifier: 56:9A:F8:66:26:B3:8E:44:EB:49:6C:97:EC:85:E5:D8:92:CC:D3:F1
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01842D486E032361548BC64B5D0CE531CABC
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Vpr4ZiazjkTrSWyX7IXl2JLM0_E.roa
Signing time: Mon 31 Oct 2022 09:03:52 +0000
ROA not before: Mon 31 Oct 2022 09:03:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31205
IP address blocks: 109.188.0.0/16 maxlen: 24
46.29.192.0/21 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
188.170.247.0/24 maxlen: 24
79.171.8.0/21 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
37.29.0.0/17 maxlen: 24
78.25.64.0/18 maxlen: 24
37.28.160.0/19 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
178.176.240.0/22 maxlen: 22
178.176.244.0/22 maxlen: 22
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
188.170.240.0/22 maxlen: 22
31.173.240.0/23 maxlen: 23
195.5.128.0/19 maxlen: 24
31.173.242.0/23 maxlen: 23
128.204.64.0/18 maxlen: 24
31.173.244.0/22 maxlen: 22
95.137.0.0/17 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
81.24.128.0/20 maxlen: 24
83.149.50.0/24 maxlen: 24
78.41.100.0/22 maxlen: 24
83.149.48.0/24 maxlen: 24
83.149.51.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
83.149.49.0/24 maxlen: 24
178.176.48.0/24 maxlen: 24
83.169.192.0/18 maxlen: 24
109.74.112.0/20 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
46.232.200.0/21 maxlen: 24
62.64.0.0/19 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
46.229.128.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2d:48:6e:03:23:61:54:8b:c6:4b:5d:0c:e5:31:ca:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 31 09:03:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=569af86626b38e44eb496c97ec85e5d892ccd3f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c3:a4:fe:4a:9c:6a:6b:56:d7:20:09:28:2f:
bf:30:dd:a3:45:6c:7a:d4:d8:3d:8b:a4:bc:b4:4d:
95:42:02:12:9f:87:35:1b:90:b9:16:26:b1:e2:47:
c0:07:6e:ed:dd:2a:f9:0c:37:e7:0f:40:41:51:cc:
3b:f8:ef:f7:22:e6:ea:61:a2:e6:86:29:b0:f1:f1:
47:b9:f6:b7:27:49:74:5a:1e:1f:9f:9b:86:b9:80:
ff:a1:5a:57:4d:ba:64:e8:31:bd:1d:26:09:84:48:
c8:7f:47:1a:31:7d:ec:38:45:65:d4:70:15:7f:e1:
a8:5c:66:de:89:79:7a:0d:d5:a6:5c:ac:22:a0:0f:
ec:c1:94:63:29:e3:bd:9a:0d:01:36:90:37:ce:9a:
b0:ca:2e:fb:b6:22:10:27:7f:20:92:ec:06:1e:69:
c1:7d:2c:25:e3:c2:f8:9e:8d:30:62:29:4f:04:10:
f7:f2:0e:58:98:c7:68:6f:09:3d:41:de:8d:51:2b:
1a:b7:e8:d6:03:41:b1:4f:07:2c:de:84:c4:54:0c:
51:c0:38:7b:04:4f:f1:85:ce:9d:96:01:e6:08:8f:
37:b9:39:f2:03:17:6c:9b:7d:a7:74:91:88:d2:f5:
14:9a:f8:e0:a2:e1:b1:90:db:a2:01:71:f8:65:1e:
48:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9A:F8:66:26:B3:8E:44:EB:49:6C:97:EC:85:E5:D8:92:CC:D3:F1
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Vpr4ZiazjkTrSWyX7IXl2JLM0_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.240.0/21
37.28.160.0/19
37.29.0.0/17
46.29.192.0/21
46.229.128.0/20
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.149.48.0/22
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.48.0/24
178.176.240.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.240.0/22
188.170.247.0/24
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
90:dc:a6:0b:b4:4c:73:8a:f1:57:a3:5c:d0:4a:de:c8:cc:82:
03:a5:8d:6a:27:b0:f3:87:54:69:44:21:f7:ef:59:ab:01:aa:
06:69:20:ea:df:3f:c9:c6:a7:11:e0:c1:4a:b6:1e:21:2a:d3:
61:10:20:e5:ca:89:4b:0c:33:4e:29:1b:74:76:a3:0d:f7:fb:
b5:35:16:55:97:68:9b:59:84:26:dd:e5:02:e7:ba:2c:78:8f:
4f:a7:64:7d:da:1e:9f:e8:85:b4:29:9b:a8:c4:b2:4f:b0:37:
15:ae:49:d6:bf:19:80:45:ad:e0:06:0b:fb:f5:00:ee:02:a8:
1d:29:0d:7a:fc:ed:57:b8:86:00:8f:24:21:80:d5:8a:34:92:
87:d7:09:9f:3d:a7:36:8a:78:9f:b3:71:1f:63:5b:9d:e6:95:
1a:25:50:4f:c2:3f:30:a3:57:83:e0:1b:14:77:de:fc:45:3e:
b2:e0:7a:f7:51:6b:82:66:31:fd:ec:33:27:55:4d:c9:99:69:
95:a1:52:99:59:3f:a2:ec:09:f3:cb:1d:0a:35:fa:2c:31:b2:
ad:05:96:95:9a:21:d3:98:e8:22:91:f7:ff:f0:12:19:6d:03:
da:c7:8d:7f:70:87:e5:6c:d4:57:03:18:04:92:94:e7:d2:59:
fa:bd:d4:b7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:25 2024 by rpki-client on console-fra.rpki-client.org