Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/XR6y6ilZz0FuCmJmGmYVff5dJ88.roa
File: XR6y6ilZz0FuCmJmGmYVff5dJ88.roa (raw, json)
Hash identifier: ESvCkEtnbAmL1wiY0uaw9MpCI0D/ztA1j81qh8ezgHQ=
Subject key identifier: 5D:1E:B2:EA:29:59:CF:41:6E:0A:62:66:1A:66:15:7D:FE:5D:27:CF
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184C3EFC886AB01C9857ED382FDCBFD73FA
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/XR6y6ilZz0FuCmJmGmYVff5dJ88.roa
Signing time: Tue 29 Nov 2022 15:09:42 +0000
ROA not before: Tue 29 Nov 2022 15:09:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29648
IP address blocks: 109.188.0.0/16 maxlen: 24
85.26.128.0/17 maxlen: 24
193.201.228.0/22 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
78.25.64.0/18 maxlen: 24
31.173.119.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
195.5.128.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
31.173.104.0/24 maxlen: 24
31.173.105.0/24 maxlen: 24
31.173.112.0/24 maxlen: 24
31.173.109.0/24 maxlen: 24
31.173.110.0/24 maxlen: 24
31.173.107.0/24 maxlen: 24
31.173.108.0/24 maxlen: 24
31.173.106.0/24 maxlen: 24
31.173.111.0/24 maxlen: 24
31.173.117.0/24 maxlen: 24
31.173.118.0/24 maxlen: 24
31.173.115.0/24 maxlen: 24
31.173.116.0/24 maxlen: 24
31.173.113.0/24 maxlen: 24
31.173.114.0/24 maxlen: 24
212.44.64.0/19 maxlen: 24
195.16.96.0/19 maxlen: 24
79.171.8.0/21 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
185.3.32.0/22 maxlen: 24
86.109.192.0/19 maxlen: 24
188.170.98.0/24 maxlen: 24
188.170.97.0/24 maxlen: 24
188.170.96.0/24 maxlen: 24
188.170.103.0/24 maxlen: 24
188.170.100.0/24 maxlen: 24
188.170.105.0/24 maxlen: 24
188.170.102.0/24 maxlen: 24
188.170.99.0/24 maxlen: 24
188.170.104.0/24 maxlen: 24
188.170.101.0/24 maxlen: 24
188.170.106.0/24 maxlen: 24
188.170.111.0/24 maxlen: 24
188.170.108.0/24 maxlen: 24
188.170.110.0/24 maxlen: 24
188.170.107.0/24 maxlen: 24
212.69.96.0/19 maxlen: 24
188.170.109.0/24 maxlen: 24
188.170.112.0/24 maxlen: 24
188.170.114.0/24 maxlen: 24
188.170.113.0/24 maxlen: 24
188.170.116.0/24 maxlen: 24
188.170.115.0/24 maxlen: 24
188.170.118.0/24 maxlen: 24
188.170.117.0/24 maxlen: 24
188.170.119.0/24 maxlen: 24
188.170.122.0/24 maxlen: 24
188.170.121.0/24 maxlen: 24
188.170.124.0/24 maxlen: 24
188.170.123.0/24 maxlen: 24
188.170.125.0/24 maxlen: 24
188.170.120.0/24 maxlen: 24
188.170.127.0/24 maxlen: 24
188.170.126.0/24 maxlen: 24
78.109.120.0/24 maxlen: 24
78.109.121.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
178.176.96.0/24 maxlen: 24
178.176.98.0/24 maxlen: 24
178.176.97.0/24 maxlen: 24
178.176.102.0/24 maxlen: 24
178.176.99.0/24 maxlen: 24
178.176.101.0/24 maxlen: 24
178.176.103.0/24 maxlen: 24
178.176.100.0/24 maxlen: 24
78.41.100.0/22 maxlen: 24
178.176.118.0/24 maxlen: 24
178.176.115.0/24 maxlen: 24
178.176.117.0/24 maxlen: 24
178.176.114.0/24 maxlen: 24
178.176.116.0/24 maxlen: 24
178.176.123.0/24 maxlen: 24
178.176.120.0/24 maxlen: 24
178.176.125.0/24 maxlen: 24
178.176.122.0/24 maxlen: 24
178.176.119.0/24 maxlen: 24
178.176.124.0/24 maxlen: 24
178.176.121.0/24 maxlen: 24
178.176.126.0/24 maxlen: 24
178.176.127.0/24 maxlen: 24
83.169.192.0/18 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c3:ef:c8:86:ab:01:c9:85:7e:d3:82:fd:cb:fd:73:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Nov 29 15:09:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d1eb2ea2959cf416e0a62661a66157dfe5d27cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0f:ac:ef:bf:99:08:65:5d:be:97:c3:11:80:
93:ea:53:82:51:f9:e3:2e:e4:b5:39:8d:7a:96:3e:
7a:92:60:fd:5a:7f:c3:52:12:fd:7f:d9:e3:c2:c2:
72:34:74:c8:3c:ef:cb:eb:5d:01:ba:60:91:f5:a5:
d9:78:0c:e2:de:fc:59:66:a9:dd:15:6b:67:ed:3a:
ae:31:54:36:ed:79:55:d6:95:bd:2f:c3:b2:f2:38:
65:4b:f6:94:73:81:bf:0f:53:18:d6:27:1a:8c:88:
c2:fb:a6:ce:f2:90:b5:90:a1:32:74:0d:02:c6:61:
e8:bd:06:de:ad:50:92:1b:ab:86:63:35:35:6e:42:
56:26:00:f7:93:f3:90:b9:8b:fc:3a:96:c8:44:81:
d9:84:b5:a9:30:9b:c9:75:93:9a:83:e7:14:a7:f1:
c9:e2:99:8c:45:82:77:7d:f2:92:bc:18:a0:f6:64:
74:f3:62:bb:19:82:f5:94:d9:a9:ea:0a:69:13:0e:
11:33:ef:6f:d7:b4:44:f5:d6:40:c3:74:94:22:0f:
5a:ae:df:66:29:c6:04:c4:4c:a7:d4:3c:ff:e1:e4:
7b:8e:11:4c:79:a6:ed:7c:38:b2:7a:80:76:2b:4c:
56:71:2e:91:1e:9e:ae:5b:db:fc:92:27:d9:42:e0:
94:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:1E:B2:EA:29:59:CF:41:6E:0A:62:66:1A:66:15:7D:FE:5D:27:CF
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/XR6y6ilZz0FuCmJmGmYVff5dJ88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.104.0-31.173.119.255
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
78.109.120.0/23
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.96.0/21
178.176.114.0-178.176.127.255
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.96.0/19
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
1b:f5:0c:bd:18:b3:e2:72:82:64:52:fe:e6:f9:ab:13:c3:d0:
1c:4d:39:61:ea:a1:62:52:16:f7:82:ce:5b:fb:ed:55:6b:a7:
3b:19:f8:af:12:45:a2:d5:f2:8d:b9:30:67:05:12:d4:74:df:
1e:1b:d3:df:f6:10:01:3c:19:13:0c:1b:0b:b0:d9:04:0f:f2:
b9:6c:e6:4c:26:43:b7:cf:ec:3f:cd:ed:b1:3f:da:0a:d5:e9:
b5:b7:05:cd:2a:74:58:66:bb:ed:8a:20:d8:33:aa:62:c2:d1:
cb:4e:4a:f2:1f:7c:1d:b1:28:ae:04:b5:76:9b:04:de:18:e6:
2c:2d:28:9a:80:af:ef:aa:f5:bb:4f:92:e7:2a:95:17:0a:96:
06:43:96:f9:5c:3b:cd:62:1f:5f:56:87:51:15:1d:35:45:48:
76:88:56:a6:dd:b4:ce:7e:06:8a:66:f9:20:1b:7d:06:55:22:
10:ea:8f:73:ec:30:aa:e2:d3:4c:16:8b:fb:4a:45:ca:2c:63:
c1:72:db:e7:e2:5d:a6:2c:1e:3c:a8:4b:ef:20:70:91:56:12:
e4:97:76:7b:76:90:75:e6:f8:9c:c1:93:be:5b:ad:0e:4f:2a:
11:70:1e:00:c0:da:3d:2f:eb:e2:48:40:a1:fb:19:b6:60:60:
f0:f7:f2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:25 2024 by rpki-client on console-fra.rpki-client.org