Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Y-d8gR_YamKd9OhLyA3R8bKec3Y.roa
File: Y-d8gR_YamKd9OhLyA3R8bKec3Y.roa (raw, json)
Hash identifier: R6jUfDtTeFc8E8TakzTm2v4Sq/+jHMrKnIAwMeboCbc=
Subject key identifier: 63:E7:7C:81:1F:D8:6A:62:9D:F4:E8:4B:C8:0D:D1:F1:B2:9E:73:76
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01847633541DF51123E8778AB93E06C20292
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Y-d8gR_YamKd9OhLyA3R8bKec3Y.roa
Signing time: Mon 14 Nov 2022 12:53:06 +0000
ROA not before: Mon 14 Nov 2022 12:53:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31205
IP address blocks: 109.188.0.0/16 maxlen: 24
46.29.192.0/21 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
188.170.247.0/24 maxlen: 24
79.171.8.0/21 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
78.25.64.0/18 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
178.176.240.0/22 maxlen: 22
178.176.244.0/22 maxlen: 22
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
37.29.86.0/23 maxlen: 23
188.170.240.0/22 maxlen: 22
31.173.240.0/23 maxlen: 23
195.5.128.0/19 maxlen: 24
31.173.242.0/23 maxlen: 23
128.204.64.0/18 maxlen: 24
31.173.244.0/22 maxlen: 22
95.137.0.0/17 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
81.24.128.0/20 maxlen: 24
83.149.50.0/24 maxlen: 24
78.41.100.0/22 maxlen: 24
83.149.48.0/24 maxlen: 24
83.149.51.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
83.149.49.0/24 maxlen: 24
178.176.48.0/24 maxlen: 24
83.169.192.0/18 maxlen: 24
109.74.112.0/20 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
46.232.200.0/21 maxlen: 24
62.64.0.0/19 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
46.229.128.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:76:33:54:1d:f5:11:23:e8:77:8a:b9:3e:06:c2:02:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Nov 14 12:53:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63e77c811fd86a629df4e84bc80dd1f1b29e7376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:35:8d:b8:1a:bf:f8:ba:d1:e6:1f:7e:61:7a:
72:33:4c:17:fd:82:4b:51:30:98:6e:4b:13:8e:25:
1a:7b:6a:83:ae:ee:0a:1f:24:24:90:3c:ab:14:f0:
9f:cb:b3:6a:b1:08:b7:ff:84:ca:fc:4f:b6:02:b9:
10:f3:42:64:e2:58:62:b1:b6:51:50:14:9b:ab:a8:
2c:27:d0:f9:45:70:59:29:09:dc:de:a1:dd:cb:7f:
20:35:fc:6f:8e:17:25:80:e0:d3:6e:5f:da:43:fb:
d5:51:f4:67:d4:3b:a2:49:2a:a7:a6:e0:84:c4:ac:
5a:35:59:97:ca:50:05:5d:61:9f:25:37:87:fa:8e:
59:83:f4:16:0e:18:07:d4:4e:ed:c1:4f:a5:e1:60:
2e:9a:54:45:be:70:c4:1f:64:d7:f6:a3:86:4b:f8:
9b:51:78:5f:2a:41:21:fd:bb:f2:77:65:61:a4:4b:
73:bd:5e:55:5d:b2:a5:7c:b6:72:9a:68:87:4f:56:
10:51:70:a2:d4:90:4f:f6:ff:6f:5b:fe:f4:df:fd:
97:e1:e4:70:92:e4:b4:ef:bf:45:c6:f7:12:dc:0c:
fd:c8:74:ff:93:07:fa:a2:c1:fc:95:9a:47:35:27:
55:c7:de:a8:b7:2f:85:9f:29:95:5b:8e:f3:e3:a6:
4e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E7:7C:81:1F:D8:6A:62:9D:F4:E8:4B:C8:0D:D1:F1:B2:9E:73:76
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Y-d8gR_YamKd9OhLyA3R8bKec3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.240.0/21
37.29.86.0/23
46.29.192.0/21
46.229.128.0/20
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.149.48.0/22
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.48.0/24
178.176.240.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.240.0/22
188.170.247.0/24
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
91:28:bb:b4:f1:15:c9:db:c0:aa:0e:61:76:00:84:78:33:16:
d1:c6:f1:7f:e1:28:df:dd:4f:04:6f:6f:15:c3:75:09:98:e9:
bd:b5:fb:f0:ad:0f:56:7c:ef:48:43:91:ef:3c:e0:74:8a:bd:
eb:2b:35:6b:10:53:a9:3f:a4:c2:ed:f5:58:21:90:a2:69:f6:
78:3a:2d:55:b2:3f:48:30:29:86:0d:a7:bf:f1:f7:d6:5c:e2:
df:a9:f3:29:f1:67:fd:2b:fb:ec:af:45:70:90:c1:26:0e:32:
38:cc:4e:a8:60:e6:35:94:34:50:33:27:7c:8b:a5:f1:50:e6:
8b:db:aa:b8:b8:1d:22:fc:07:55:45:ac:f8:b8:1a:c8:f2:8d:
07:27:b7:11:c4:b2:19:f0:b3:50:52:8e:2d:12:11:4a:e2:0d:
e5:29:ff:e7:08:ff:04:24:23:26:aa:ee:22:97:51:00:d8:30:
61:5e:d2:5e:e0:3b:d8:83:3a:e3:b3:73:95:ec:6c:b5:50:0d:
8c:0a:88:bd:15:12:af:59:7b:ff:24:64:e2:b4:5a:ec:7d:35:
3b:cf:75:fd:d9:39:c1:f9:4a:93:24:bc:1d:69:fd:d1:17:65:
83:91:9a:1e:24:35:9c:ea:9a:ef:a0:c0:d1:a7:f1:00:88:f6:
c2:f2:5f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:56 2025 by rpki-client