Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/X2NFzv4R_4QhPG6K4knUaDHLaOc.roa
File: X2NFzv4R_4QhPG6K4knUaDHLaOc.roa (raw, json)
Hash identifier: /+wQLabRtAJqRIm+7h0vgjkgf0q+aWGHFrJ0XodIbW8=
Subject key identifier: 5F:63:45:CE:FE:11:FF:84:21:3C:6E:8A:E2:49:D4:68:31:CB:68:E7
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018476590243F027C3B4D110367E04A7CC82
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/X2NFzv4R_4QhPG6K4knUaDHLaOc.roa
Signing time: Mon 14 Nov 2022 13:34:15 +0000
ROA not before: Mon 14 Nov 2022 13:34:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31163
IP address blocks: 109.188.0.0/16 maxlen: 24
85.26.128.0/17 maxlen: 24
193.201.228.0/22 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
31.173.192.0/24 maxlen: 24
31.173.193.0/24 maxlen: 24
31.173.196.0/24 maxlen: 24
31.173.199.0/24 maxlen: 24
31.173.194.0/24 maxlen: 24
31.173.197.0/24 maxlen: 24
31.173.195.0/24 maxlen: 24
31.173.198.0/24 maxlen: 24
31.173.201.0/24 maxlen: 24
31.173.204.0/24 maxlen: 24
31.173.202.0/24 maxlen: 24
31.173.205.0/24 maxlen: 24
31.173.200.0/24 maxlen: 24
31.173.203.0/24 maxlen: 24
31.173.206.0/24 maxlen: 24
31.173.209.0/24 maxlen: 24
31.173.212.0/24 maxlen: 24
31.173.207.0/24 maxlen: 24
31.173.210.0/24 maxlen: 24
31.173.213.0/24 maxlen: 24
31.173.208.0/24 maxlen: 24
31.173.211.0/24 maxlen: 24
31.173.217.0/24 maxlen: 24
31.173.215.0/24 maxlen: 24
31.173.218.0/24 maxlen: 24
31.173.216.0/24 maxlen: 24
31.173.219.0/24 maxlen: 24
31.173.214.0/24 maxlen: 24
31.173.220.0/24 maxlen: 24
31.173.223.0/24 maxlen: 24
31.173.221.0/24 maxlen: 24
31.173.222.0/24 maxlen: 24
78.25.64.0/18 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
109.106.192.0/24 maxlen: 24
109.106.197.0/24 maxlen: 24
109.106.195.0/24 maxlen: 24
109.106.198.0/24 maxlen: 24
109.106.193.0/24 maxlen: 24
109.106.196.0/24 maxlen: 24
109.106.199.0/24 maxlen: 24
109.106.194.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
46.232.200.0/21 maxlen: 24
62.64.0.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
178.178.3.0/24 maxlen: 24
178.178.0.0/24 maxlen: 24
178.178.2.0/24 maxlen: 24
178.178.4.0/24 maxlen: 24
178.178.1.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
37.29.123.0/24 maxlen: 24
37.29.125.0/24 maxlen: 24
37.29.120.0/24 maxlen: 24
37.29.119.0/24 maxlen: 24
37.29.122.0/24 maxlen: 24
37.29.121.0/24 maxlen: 24
37.29.124.0/24 maxlen: 24
37.29.126.0/24 maxlen: 24
37.29.127.0/24 maxlen: 24
79.171.8.0/21 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
185.3.32.0/22 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
178.176.215.0/24 maxlen: 24
178.176.218.0/24 maxlen: 24
178.176.217.0/24 maxlen: 24
178.176.219.0/24 maxlen: 24
178.176.214.0/24 maxlen: 24
178.176.216.0/24 maxlen: 24
178.176.223.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
178.176.220.0/24 maxlen: 24
178.176.222.0/24 maxlen: 24
178.176.221.0/24 maxlen: 24
188.170.187.0/24 maxlen: 24
188.170.190.0/24 maxlen: 24
188.170.189.0/24 maxlen: 24
188.170.192.0/24 maxlen: 24
188.170.191.0/24 maxlen: 24
188.170.188.0/24 maxlen: 24
188.170.195.0/24 maxlen: 24
188.170.198.0/24 maxlen: 24
188.170.197.0/24 maxlen: 24
188.170.199.0/24 maxlen: 24
188.170.194.0/24 maxlen: 24
188.170.193.0/24 maxlen: 24
188.170.196.0/24 maxlen: 24
188.170.200.0/22 maxlen: 22
188.170.204.0/22 maxlen: 22
188.170.211.0/24 maxlen: 24
188.170.213.0/24 maxlen: 24
188.170.208.0/24 maxlen: 24
188.170.210.0/24 maxlen: 24
188.170.209.0/24 maxlen: 24
188.170.212.0/24 maxlen: 24
188.170.214.0/24 maxlen: 24
188.170.219.0/24 maxlen: 24
188.170.216.0/24 maxlen: 24
188.170.215.0/24 maxlen: 24
188.170.218.0/24 maxlen: 24
188.170.217.0/24 maxlen: 24
188.170.224.0/24 maxlen: 24
188.170.221.0/24 maxlen: 24
188.170.222.0/24 maxlen: 24
188.170.220.0/24 maxlen: 24
188.170.225.0/24 maxlen: 24
188.170.226.0/24 maxlen: 24
188.170.223.0/24 maxlen: 24
188.170.227.0/24 maxlen: 24
37.29.112.0/24 maxlen: 24
37.29.115.0/24 maxlen: 24
37.29.118.0/24 maxlen: 24
37.29.117.0/24 maxlen: 24
37.29.114.0/24 maxlen: 24
37.29.113.0/24 maxlen: 24
37.29.116.0/24 maxlen: 24
128.204.64.0/18 maxlen: 24
188.170.171.0/24 maxlen: 24
188.170.170.0/24 maxlen: 24
188.170.169.0/24 maxlen: 24
188.170.168.0/21 maxlen: 21
188.170.172.0/24 maxlen: 24
188.170.179.0/24 maxlen: 24
188.170.174.0/24 maxlen: 24
95.137.0.0/17 maxlen: 24
188.170.173.0/24 maxlen: 24
188.170.176.0/24 maxlen: 24
188.170.175.0/24 maxlen: 24
188.170.178.0/24 maxlen: 24
188.170.177.0/24 maxlen: 24
188.170.182.0/24 maxlen: 24
188.170.181.0/24 maxlen: 24
188.170.184.0/24 maxlen: 24
188.170.183.0/24 maxlen: 24
188.170.186.0/24 maxlen: 24
188.170.185.0/24 maxlen: 24
188.170.180.0/24 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
83.149.24.0/24 maxlen: 24
83.149.29.0/24 maxlen: 24
83.149.30.0/24 maxlen: 24
83.149.28.0/24 maxlen: 24
83.149.25.0/24 maxlen: 24
83.149.31.0/24 maxlen: 24
78.41.100.0/22 maxlen: 24
178.176.192.0/24 maxlen: 24
178.176.194.0/24 maxlen: 24
178.176.193.0/24 maxlen: 24
178.176.196.0/24 maxlen: 24
178.176.195.0/24 maxlen: 24
178.176.198.0/24 maxlen: 24
178.176.197.0/24 maxlen: 24
178.176.202.0/24 maxlen: 24
178.176.203.0/24 maxlen: 24
178.176.210.0/24 maxlen: 24
178.176.209.0/24 maxlen: 24
178.176.212.0/24 maxlen: 24
178.176.211.0/24 maxlen: 24
178.176.213.0/24 maxlen: 24
178.176.208.0/24 maxlen: 24
83.169.192.0/18 maxlen: 24
109.74.112.0/20 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:76:59:02:43:f0:27:c3:b4:d1:10:36:7e:04:a7:cc:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Nov 14 13:34:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f6345cefe11ff84213c6e8ae249d46831cb68e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:11:a0:8f:87:2a:8e:6e:96:25:ee:9f:a2:5f:
45:1a:d5:e0:c7:cc:4c:76:2a:c5:dc:2b:ca:a2:1d:
da:c3:0d:e7:de:9a:0c:1a:d4:fb:0e:d6:95:c7:0d:
8c:2d:c4:66:10:68:e5:bb:3e:0c:ae:4c:31:78:13:
f8:97:b5:b2:65:53:61:55:c0:f1:dc:82:a8:ad:dd:
90:2b:db:cb:fe:f4:e0:c4:62:69:12:84:2e:9d:7d:
43:85:42:0d:82:e6:bd:2b:81:fe:b6:00:fb:56:4b:
82:77:cf:26:60:ce:30:9f:1f:99:75:34:7e:5a:42:
d0:38:fa:c5:72:33:7e:24:9d:96:b5:ca:14:d8:80:
f1:33:85:ad:f7:51:52:98:c0:b6:61:22:30:03:65:
87:38:3e:f6:11:4b:fa:2a:bb:df:d6:0e:9c:1c:30:
d9:75:79:38:65:2e:68:83:9c:77:7b:e6:29:1b:0c:
72:9f:d5:13:53:53:25:1d:f7:7d:9d:15:88:89:70:
7b:0f:23:24:34:7b:03:db:c2:c3:2f:fb:46:ec:a5:
ff:a7:9f:73:5f:aa:41:46:2e:5b:bc:29:cb:3d:d3:
01:7f:92:aa:60:dc:d5:d9:4f:49:3a:2d:aa:a1:fd:
a1:cf:bb:de:00:dc:dc:31:81:b1:0d:2a:91:68:59:
88:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:63:45:CE:FE:11:FF:84:21:3C:6E:8A:E2:49:D4:68:31:CB:68:E7
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/X2NFzv4R_4QhPG6K4knUaDHLaOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.192.0/19
37.29.112.0/20
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.149.24.0/23
83.149.28.0/22
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.106.192.0/21
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.192.0-178.176.198.255
178.176.202.0/23
178.176.208.0/20
178.178.0.0-178.178.4.255
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.168.0-188.170.227.255
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
13:1a:b8:9a:c4:a7:91:e5:aa:3d:79:30:e6:a8:f9:db:bc:38:
a6:27:4d:f0:86:98:14:19:2e:37:c6:66:0f:d8:e7:de:0d:fd:
96:8c:5a:e1:05:bc:92:b5:10:66:57:9c:7b:d7:80:d5:93:ed:
a1:29:e5:64:ab:a7:11:f9:c5:79:1d:26:47:47:81:63:fb:7e:
a6:81:93:74:76:2b:78:5c:ee:20:07:db:fc:95:f1:66:e7:46:
72:cf:1c:86:f4:a2:31:ef:f9:0f:41:ad:a7:bd:35:8a:f6:e0:
3a:66:08:b8:2b:6a:92:62:b2:12:97:32:41:36:47:f6:3e:d1:
39:53:47:c9:3d:fc:39:1f:3f:e5:7f:34:55:e7:8a:a0:d1:4a:
25:60:7a:8b:f8:89:68:41:be:9e:99:8a:bc:b0:9d:ee:f8:cc:
1e:73:69:3e:12:cf:f9:aa:a3:ee:cb:71:90:db:3f:fb:fc:92:
d5:2f:ca:89:ca:ac:cd:b6:20:59:45:92:c5:a3:c5:69:80:59:
0d:04:38:fd:ce:35:c7:5e:1d:f4:0f:64:8d:37:31:67:97:13:
89:54:a1:29:07:c0:e7:2e:fd:21:8f:0b:2e:2f:0b:a3:6f:e8:
b3:3f:90:53:ff:21:53:c3:33:1f:f7:39:8d:38:e6:d7:f8:90:
b5:03:2b:71
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgISAYR2WQJD8CfDtNEQNn4Ep8yCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMTE0MTMzNDE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjYzNDVjZWZlMTFmZjg0MjEzYzZlOGFlMjQ5ZDQ2ODMxY2I2OGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohGgj4cqjm6WJe6fol9FGtXgx8xM
dirF3CvKoh3aww3n3poMGtT7DtaVxw2MLcRmEGjluz4MrkwxeBP4l7WyZVNhVcDx
3IKord2QK9vL/vTgxGJpEoQunX1DhUINgua9K4H+tgD7VkuCd88mYM4wnx+ZdTR+
WkLQOPrFcjN+JJ2WtcoU2IDxM4Wt91FSmMC2YSIwA2WHOD72EUv6Krvf1g6cHDDZ
dXk4ZS5og5x3e+YpGwxyn9UTU1MlHfd9nRWIiXB7DyMkNHsD28LDL/tG7KX/p59z
X6pBRi5bvCnLPdMBf5KqYNzV2U9JOi2qof2hz7veANzcMYGxDSqRaFmIewIDAQAB
o4IDTjCCA0owHQYDVR0OBBYEFF9jRc7+Ef+EITxuiuJJ1Ggxy2jnMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvWDJORnp2NFJfNFFoUEc2SzRrblVhREhMYU9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBYgYIKwYBBQUHAQcBAf8EggFRMIIBTTCCAUkEAgABMIIB
QQMEBR+twAMEBCUdcAMEAy7oyAMEBT5AAAMEBU3poAMEBk4ZQAMEAk4pZAMEA0+r
CAMEBFD3sAMEBFEYgAMEAVOVGAMEAlOVHAMEBlOpwAMEBVPewAMEB1PlgAMEB1Ua
gAMEBVZtwAMEAlvB1AMEB12ZgAMEB14ZgAMEB1+JAAMEBG1KcAMEA21qwAMEBm18
QAMDAG28AwQGgMxAAwQDsheQMAwDBAaysMADBACysMYDBAGysMoDBASysNAwCwMD
AbKyAwQAsrIEAwQCuQMgAwQCudKMAwQDvF6oAwMAvKIwDAMEA7yqqAMEAryq4AME
AsHJ5AMEBcMFgAMEBcMQYAMEAcNOdAMEAMOVbwMEBcPmQAMEBdQOoAMEBdQsQAME
BdRFYAMEBdR3oAMEBdWaoAMEBdWoIAMEBtXzQAMEBNlzUDANBgkqhkiG9w0BAQsF
AAOCAQEAExq4msSnkeWqPXkw5qj527w4pidN8IaYFBkuN8ZmD9jn3g39loxa4QW8
krUQZlece9eA1ZPtoSnlZKunEfnFeR0mR0eBY/t+poGTdHYreFzuIAfb/JXxZudG
cs8chvSiMe/5D0Gtp701ivbgOmYIuCtqkmKyEpcyQTZH9j7ROVNHyT38OR8/5X80
VeeKoNFKJWB6i/iJaEG+npmKvLCd7vjMHnNpPhLP+aqj7stxkNs/+/yS1S/Kicqs
zbYgWUWSxaPFaYBZDQQ4/c41x14d9A9kjTcxZ5cTiVShKQfA5y79IY8LLi8Lo2/o
sz+QU/8hU8MzH/c5jTjm1/iQtQMrcQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:25 2024 by rpki-client on console-fra.rpki-client.org