Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/WWXYlqdjCHUwC4goGcmuBplPIeY.roa
File: WWXYlqdjCHUwC4goGcmuBplPIeY.roa (raw, json)
Hash identifier: EJx3uPFw/i7R9Szc2Ilzq0bn4Ak0dz+uISyDoWHegeY=
Subject key identifier: 59:65:D8:96:A7:63:08:75:30:0B:88:28:19:C9:AE:06:99:4F:21:E6
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01840EB3D851D8E6D8472F92B299007829ED
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/WWXYlqdjCHUwC4goGcmuBplPIeY.roa
Signing time: Tue 25 Oct 2022 10:32:58 +0000
ROA not before: Tue 25 Oct 2022 10:32:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31163
IP address blocks: 109.188.0.0/16 maxlen: 24
46.29.192.0/21 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
31.173.192.0/24 maxlen: 24
31.173.193.0/24 maxlen: 24
31.173.197.0/24 maxlen: 24
31.173.196.0/24 maxlen: 24
31.173.195.0/24 maxlen: 24
31.173.199.0/24 maxlen: 24
31.173.194.0/24 maxlen: 24
31.173.198.0/24 maxlen: 24
31.173.201.0/24 maxlen: 24
31.173.205.0/24 maxlen: 24
31.173.204.0/24 maxlen: 24
31.173.200.0/24 maxlen: 24
212.69.96.0/19 maxlen: 24
31.173.203.0/24 maxlen: 24
31.173.202.0/24 maxlen: 24
31.173.206.0/24 maxlen: 24
31.173.209.0/24 maxlen: 24
31.173.213.0/24 maxlen: 24
31.173.208.0/24 maxlen: 24
31.173.212.0/24 maxlen: 24
31.173.207.0/24 maxlen: 24
31.173.211.0/24 maxlen: 24
31.173.210.0/24 maxlen: 24
31.173.217.0/24 maxlen: 24
31.173.216.0/24 maxlen: 24
37.29.0.0/17 maxlen: 24
31.173.215.0/24 maxlen: 24
31.173.219.0/24 maxlen: 24
31.173.214.0/24 maxlen: 24
31.173.218.0/24 maxlen: 24
31.173.221.0/24 maxlen: 24
31.173.220.0/24 maxlen: 24
31.173.223.0/24 maxlen: 24
31.173.222.0/24 maxlen: 24
37.28.160.0/19 maxlen: 24
78.25.64.0/18 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 24
83.169.192.0/18 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
46.232.200.0/21 maxlen: 24
62.64.0.0/19 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
46.229.128.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0e:b3:d8:51:d8:e6:d8:47:2f:92:b2:99:00:78:29:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 25 10:32:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5965d896a7630875300b882819c9ae06994f21e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e8:32:1e:7e:31:32:d3:c1:6b:dc:28:29:c9:
82:2d:01:03:57:bf:ff:15:14:e4:a7:7a:36:f9:45:
2d:7c:e7:27:08:1a:5c:50:ad:f0:5a:e1:a5:be:04:
75:27:c6:61:f2:67:4b:56:8e:16:db:5b:70:92:da:
9b:be:64:03:65:c3:4d:f7:23:12:80:35:ba:d1:29:
a1:25:ee:cc:87:47:62:31:79:ff:2a:03:21:83:c4:
ef:c5:de:c1:d1:8d:be:21:1e:40:0a:02:d7:e0:d3:
13:65:3b:8a:39:4d:d5:ac:ca:f6:42:b4:91:ea:60:
30:2b:50:28:b6:76:98:5a:6b:6b:1f:72:f4:7b:d7:
83:95:70:16:e5:80:7f:30:74:53:9d:d4:d2:a2:d8:
18:78:ee:be:29:cb:79:fe:71:37:89:c6:02:7d:7f:
15:bc:46:de:93:5a:2c:71:40:92:db:5d:6d:75:15:
72:d5:ff:a5:02:3d:aa:b7:2e:c1:a1:dc:b6:6f:3d:
d7:a8:71:38:48:2e:16:09:b7:07:72:47:84:fb:6c:
c8:e6:44:7c:b0:6e:e0:da:37:e5:11:e5:13:da:e3:
bb:b1:ed:e1:e2:88:6d:7c:d4:b9:81:01:81:8f:01:
7b:2d:f3:19:e9:73:36:5a:78:16:5f:2c:49:30:4e:
30:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:65:D8:96:A7:63:08:75:30:0B:88:28:19:C9:AE:06:99:4F:21:E6
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/WWXYlqdjCHUwC4goGcmuBplPIeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.192.0/19
37.28.160.0/19
37.29.0.0/17
46.29.192.0/21
46.229.128.0/20
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
15:b8:e9:82:0c:be:20:84:57:ac:f3:90:16:a8:62:5b:87:36:
87:9e:71:c8:9f:bb:2d:2b:d5:ca:22:6f:f9:5f:8e:77:67:71:
d7:94:58:fb:83:47:ab:d6:f4:92:3e:c0:26:76:37:00:a2:2b:
7c:ef:71:d1:0f:88:83:ea:db:2e:e6:9d:d1:39:33:c2:7e:99:
2f:d9:5d:8d:5e:fc:3e:f5:6c:b2:25:28:6b:04:e2:fa:70:d0:
f9:ae:5a:44:d1:64:db:c7:54:6d:7f:c9:89:50:11:6d:df:ca:
35:57:85:11:e6:45:57:f9:4a:0b:42:0c:3b:93:ad:33:1a:9e:
53:d6:ba:62:c9:2a:1d:65:ae:03:9a:ca:90:76:3a:b9:81:c2:
b8:1a:0e:28:db:57:c6:e2:6a:1e:64:2e:65:51:d9:ce:ce:4e:
b4:39:73:9e:5e:8b:0b:2f:f3:37:41:a2:a6:f3:e3:ca:45:f9:
71:e1:ea:f5:3a:17:9d:c4:e4:91:4e:92:4f:2e:eb:d3:c3:50:
47:8f:93:d6:dd:c4:5e:d7:55:91:84:24:d1:c9:9e:a4:d5:b5:
0e:e5:cf:c2:7a:a8:a4:79:cc:13:06:17:69:f1:b1:89:5e:68:
03:e3:a0:cd:81:6c:0c:e5:e8:0b:55:b3:be:be:cc:69:40:3d:
94:45:2c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:25 2024 by rpki-client on console-fra.rpki-client.org