Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/XuthYCV40e59SIjzhVNtSng_eJI.roa
File: XuthYCV40e59SIjzhVNtSng_eJI.roa (raw, json)
Hash identifier: ezNZQ+ewkr8LMvTw5tmdPKRko0SsRtxR3mJX1sgiU3I=
Subject key identifier: 5E:EB:61:60:25:78:D1:EE:7D:48:88:F3:85:53:6D:4A:78:3F:78:92
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F1F51A2588A6B9BEF5AD8D7D8D06440D
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/XuthYCV40e59SIjzhVNtSng_eJI.roa
Signing time: Thu 08 Dec 2022 13:38:02 +0000
ROA not before: Thu 08 Dec 2022 13:38:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31224
IP address blocks: 195.16.96.0/19 maxlen: 24
85.26.192.0/22 maxlen: 22
193.201.228.0/22 maxlen: 24
178.178.88.0/22 maxlen: 22
178.178.92.0/22 maxlen: 22
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
212.69.96.0/19 maxlen: 24
31.173.123.0/24 maxlen: 24
31.173.122.0/24 maxlen: 24
31.173.121.0/24 maxlen: 24
31.173.125.0/24 maxlen: 24
31.173.120.0/24 maxlen: 24
31.173.124.0/24 maxlen: 24
31.173.127.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
31.173.126.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
78.25.88.0/22 maxlen: 22
195.5.128.0/19 maxlen: 24
128.204.68.0/24 maxlen: 24
128.204.69.0/24 maxlen: 24
37.29.44.0/22 maxlen: 22
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
178.176.104.0/21 maxlen: 21
83.149.32.0/22 maxlen: 22
83.149.36.0/22 maxlen: 22
83.149.34.0/24 maxlen: 24
83.149.37.0/24 maxlen: 24
83.149.39.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
31.173.96.0/24 maxlen: 24
31.173.97.0/24 maxlen: 24
31.173.102.0/24 maxlen: 24
31.173.99.0/24 maxlen: 24
31.173.103.0/24 maxlen: 24
31.173.100.0/24 maxlen: 24
31.173.100.0/23 maxlen: 23
31.173.101.0/24 maxlen: 24
178.176.112.0/24 maxlen: 24
178.176.113.0/24 maxlen: 24
83.169.216.0/24 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
46.229.132.0/22 maxlen: 22
212.44.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:f5:1a:25:88:a6:b9:be:f5:ad:8d:7d:8d:06:44:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 13:38:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5eeb61602578d1ee7d4888f385536d4a783f7892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a4:06:ca:53:57:02:42:09:3e:1a:a4:fe:5c:
28:f4:86:b9:88:92:6a:b6:aa:6e:43:88:39:04:e9:
de:cf:cc:01:6c:dc:06:94:13:29:83:d6:6f:5b:66:
c4:20:29:90:c2:61:bf:e1:3c:30:75:a7:3e:ec:e6:
4e:1a:9c:c2:a2:12:df:f7:88:c0:d8:f8:8b:02:a0:
07:f2:1e:b6:de:86:44:15:69:44:41:ee:9b:2e:3f:
5c:59:73:9e:1d:e0:f0:a2:41:0e:40:a2:60:b3:1a:
ba:c6:94:56:64:2c:de:8b:d0:ad:22:73:0d:e5:b6:
28:40:ca:9e:81:e6:25:8c:3e:a0:27:da:eb:c1:f5:
36:e2:b5:78:5a:64:65:e0:b2:96:5a:0e:0b:e0:44:
42:ec:9d:78:e9:6a:77:15:c3:a7:6f:a8:40:c6:9b:
80:bf:dc:68:7e:9d:0b:15:e3:21:fa:05:b9:26:3a:
8f:22:25:78:76:0e:75:97:7a:e5:e9:73:19:9f:b8:
62:65:87:6f:f6:f1:11:f4:c2:14:37:8c:28:6b:b4:
29:51:db:92:09:d7:a1:35:6d:b5:d6:8c:c5:8a:46:
44:12:c8:52:a0:2d:bc:f6:f1:4d:f2:c8:bc:93:3c:
12:3d:9f:0d:48:60:02:2f:13:ad:41:ae:b1:ab:39:
5d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:EB:61:60:25:78:D1:EE:7D:48:88:F3:85:53:6D:4A:78:3F:78:92
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/XuthYCV40e59SIjzhVNtSng_eJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.96.0/23
31.173.99.0-31.173.103.255
31.173.120.0/21
37.29.44.0/22
46.229.132.0/22
78.25.88.0/22
83.149.32.0/21
83.169.216.0/24
85.26.192.0/22
128.204.68.0/23
178.176.104.0-178.176.113.255
178.178.88.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
65:60:23:69:aa:f4:da:6e:1a:bd:a9:0b:07:aa:73:26:6f:d6:
66:08:c4:1b:fb:b3:22:4a:cd:9c:c4:30:d3:ee:4a:f0:69:8d:
a1:05:af:c6:08:0e:e3:1a:71:46:14:2f:87:ae:d4:90:c1:c5:
ca:80:c7:76:4a:19:79:f1:e0:e0:53:1c:e5:45:2e:6e:aa:b0:
fd:cf:25:cd:a5:14:39:af:aa:e8:15:01:bb:6a:15:b7:94:ee:
f6:c4:cd:95:4f:b6:0a:73:95:51:12:53:41:32:9a:ba:03:3f:
52:95:f6:bd:fb:08:ae:74:fd:6d:22:8b:d7:6f:d9:01:e0:f9:
9f:0f:94:71:1c:f8:d8:75:fe:6f:9c:c4:c3:e8:b9:cb:2c:74:
4c:df:9e:f5:0f:04:13:6e:e0:f9:8b:47:03:b6:5e:24:9a:a5:
f1:84:5a:66:68:42:db:fd:64:c8:4d:e5:c7:fd:05:d4:18:ad:
ef:57:a8:39:4d:d8:05:62:ea:da:12:71:83:18:47:75:85:f3:
c3:5c:e4:3e:ef:b1:74:3b:c2:02:28:10:ea:09:54:48:8e:4f:
0d:9b:db:6c:bc:55:0e:fd:ca:5f:08:9e:ca:a6:58:03:ec:84:
c0:50:cb:1a:bd:e3:78:dd:bc:9d:40:04:4b:d4:40:b1:18:a3:
8b:57:e7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:19 2025 by rpki-client