Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Winpwl1tBxQG368jiLdNBTB8DRg.roa
File: Winpwl1tBxQG368jiLdNBTB8DRg.roa (raw, json)
Hash identifier: sx4sjlJox87+BoKP8ISpvdBuYUlP9gQU/IdNdZHHLu8=
Subject key identifier: 5A:29:E9:C2:5D:6D:07:14:06:DF:AF:23:88:B7:4D:05:30:7C:0D:18
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01847633545E69386BDF999CB697CCFEE1EE
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Winpwl1tBxQG368jiLdNBTB8DRg.roa
Signing time: Mon 14 Nov 2022 12:53:06 +0000
ROA not before: Mon 14 Nov 2022 12:53:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31208
IP address blocks: 109.188.0.0/16 maxlen: 24
46.29.192.0/21 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
178.178.84.0/22 maxlen: 22
178.178.82.0/24 maxlen: 24
193.201.228.0/22 maxlen: 24
178.178.80.0/23 maxlen: 23
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
78.25.64.0/18 maxlen: 24
185.210.140.0/22 maxlen: 24
178.176.230.0/23 maxlen: 23
212.119.160.0/19 maxlen: 24
37.28.186.0/24 maxlen: 24
188.170.50.0/24 maxlen: 24
37.28.184.0/24 maxlen: 24
37.28.185.0/24 maxlen: 24
188.170.49.0/24 maxlen: 24
188.170.48.0/24 maxlen: 24
188.170.55.0/24 maxlen: 24
80.247.176.0/20 maxlen: 24
188.170.52.0/24 maxlen: 24
188.170.57.0/24 maxlen: 24
188.170.54.0/24 maxlen: 24
37.28.187.0/24 maxlen: 24
188.170.56.0/24 maxlen: 24
188.170.53.0/24 maxlen: 24
91.193.212.0/22 maxlen: 24
188.170.63.0/24 maxlen: 24
188.170.60.0/24 maxlen: 24
188.170.62.0/24 maxlen: 24
188.170.59.0/24 maxlen: 24
188.170.61.0/24 maxlen: 24
37.29.74.0/24 maxlen: 24
37.29.73.0/24 maxlen: 24
37.29.75.0/24 maxlen: 24
37.29.72.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
178.176.56.0/24 maxlen: 24
178.176.58.0/24 maxlen: 24
178.176.57.0/24 maxlen: 24
178.176.62.0/24 maxlen: 24
178.176.59.0/24 maxlen: 24
178.176.61.0/24 maxlen: 24
178.176.63.0/24 maxlen: 24
178.176.60.0/24 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
81.24.128.0/20 maxlen: 24
83.149.41.0/24 maxlen: 24
83.149.44.0/23 maxlen: 23
83.149.42.0/23 maxlen: 23
83.149.40.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 24
83.149.46.0/23 maxlen: 23
83.169.192.0/18 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
46.232.200.0/21 maxlen: 24
62.64.0.0/19 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
46.229.128.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:76:33:54:5e:69:38:6b:df:99:9c:b6:97:cc:fe:e1:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Nov 14 12:53:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a29e9c25d6d071406dfaf2388b74d05307c0d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bb:50:5c:b7:71:19:e5:15:3a:4c:c7:08:66:
37:0d:9a:c5:fe:d2:0a:a3:83:80:42:23:d2:d2:ed:
e1:28:47:b7:b5:f6:a8:5e:62:55:48:d5:41:4d:4d:
c6:31:e7:4f:59:d5:41:d4:05:15:76:96:ce:d1:15:
c4:74:ff:f1:8a:e7:dc:dc:f8:0e:44:b8:c0:a6:41:
71:0a:a9:46:e4:69:dc:05:02:5b:d6:ad:d9:35:04:
64:a5:c8:8b:bc:55:d0:e0:52:06:ff:01:b5:b1:44:
fb:74:1b:48:b7:90:7f:9f:3b:f3:41:a2:9f:02:e0:
78:b0:28:ff:c6:c6:fd:a6:b2:46:6c:4b:49:71:32:
53:82:9b:ac:8b:89:b0:b8:67:d5:f3:f8:0d:c7:c3:
aa:98:24:5b:77:f3:36:61:ae:b3:6b:ad:a5:51:c8:
2d:53:49:81:79:59:9f:d6:a4:80:f8:ef:f6:6d:b0:
3b:f4:69:95:13:99:e3:2e:43:2a:90:45:be:6c:6e:
fc:33:8e:6e:69:69:7b:10:dc:ea:f9:72:87:da:b3:
29:4d:24:3d:b0:e4:c3:1f:58:cb:22:d7:9a:93:70:
08:ab:3f:5f:24:a6:26:95:c7:a7:89:93:3e:4d:ac:
5f:76:fe:08:f9:ae:bd:b2:36:f9:b4:ee:a8:43:d6:
3e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:29:E9:C2:5D:6D:07:14:06:DF:AF:23:88:B7:4D:05:30:7C:0D:18
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Winpwl1tBxQG368jiLdNBTB8DRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.28.184.0/22
37.29.72.0/22
46.29.192.0/21
46.229.128.0/20
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.149.40.0/21
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.56.0/21
178.176.230.0/23
178.178.80.0-178.178.82.255
178.178.84.0/22
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.48.0-188.170.50.255
188.170.52.0-188.170.57.255
188.170.59.0-188.170.63.255
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
74:de:45:ce:e5:56:27:60:99:12:fb:3f:46:3d:82:d3:ec:34:
cd:dd:d0:97:83:11:1c:92:26:df:93:dc:b1:51:96:ac:b6:c4:
01:76:fb:c9:8b:ef:66:8c:23:2b:d3:c9:8b:68:4b:c9:ce:bf:
ed:f6:52:51:96:4a:2b:4c:2a:95:ef:8f:2e:40:48:32:ab:ec:
6b:4e:c6:29:88:27:bb:70:de:be:e2:b2:b4:cc:2e:ee:75:19:
58:a2:82:a0:db:14:cf:5d:1d:a0:82:bd:8e:86:48:0f:f1:4d:
d2:4b:28:89:b2:3f:23:80:3a:41:83:f6:3f:4c:1c:d7:14:f4:
98:5b:02:ce:0e:d3:17:ea:ed:77:f9:a9:c5:bc:94:d9:7d:59:
6a:9b:7c:8c:4d:98:75:f9:d3:5d:99:a4:aa:c9:a8:7a:de:3e:
b0:c5:1e:a5:5d:62:af:32:76:1a:a4:7d:19:93:ab:8d:ad:ef:
21:ad:0d:c9:fc:23:5d:31:a7:b5:d6:b6:87:84:83:7d:e6:72:
1d:6b:fe:70:73:d9:be:ea:4e:47:cb:43:60:62:06:1a:5a:4b:
7c:03:7e:71:2d:2b:f4:7b:ec:d8:bd:f5:35:09:1e:9b:ac:1b:
5a:d4:8f:bd:32:d7:1a:ef:c0:03:40:1c:42:75:4a:fa:06:c3:
1d:cb:3d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:02 2025 by rpki-client