Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/YAzXgyKZAwOcaCE1mYmk8mYukN8.roa
File: YAzXgyKZAwOcaCE1mYmk8mYukN8.roa (raw, json)
Hash identifier: NhBmo6juQW1JSlWl3cx0GtMEBcsd1nc4TY6vvbm2CYU=
Subject key identifier: 60:0C:D7:83:22:99:03:03:9C:68:21:35:99:89:A4:F2:66:2E:90:DF
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01840A795A97BFA585A565927D3D64F38A46
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/YAzXgyKZAwOcaCE1mYmk8mYukN8.roa
Signing time: Mon 24 Oct 2022 14:50:35 +0000
ROA not before: Mon 24 Oct 2022 14:50:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31133
IP address blocks: 109.188.0.0/16 maxlen: 24
46.29.192.0/21 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
193.201.228.0/22 maxlen: 24
178.178.111.0/24 maxlen: 24
178.178.110.0/24 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
31.173.174.0/24 maxlen: 24
31.173.178.0/24 maxlen: 24
31.173.177.0/24 maxlen: 24
31.173.175.0/24 maxlen: 24
31.173.181.0/24 maxlen: 24
31.173.182.0/24 maxlen: 24
31.173.186.0/24 maxlen: 24
31.173.185.0/24 maxlen: 24
93.153.128.0/17 maxlen: 24
31.173.180.0/24 maxlen: 24
31.173.184.0/24 maxlen: 24
31.173.183.0/24 maxlen: 24
94.25.128.0/17 maxlen: 24
31.173.190.0/24 maxlen: 24
86.109.192.0/19 maxlen: 24
31.173.189.0/24 maxlen: 24
31.173.188.0/24 maxlen: 24
31.173.187.0/24 maxlen: 24
31.173.191.0/24 maxlen: 24
212.69.96.0/19 maxlen: 24
37.29.0.0/17 maxlen: 24
31.173.224.0/24 maxlen: 24
37.28.160.0/19 maxlen: 24
78.25.64.0/18 maxlen: 24
31.173.130.0/23 maxlen: 23
31.173.129.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
31.173.128.0/24 maxlen: 24
31.173.138.0/24 maxlen: 24
31.173.137.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
31.173.136.0/24 maxlen: 24
31.173.139.0/24 maxlen: 24
31.173.142.0/24 maxlen: 24
31.173.141.0/24 maxlen: 24
31.173.140.0/24 maxlen: 24
31.173.150.0/24 maxlen: 24
80.247.176.0/20 maxlen: 24
31.173.149.0/24 maxlen: 24
31.173.152.0/24 maxlen: 24
31.173.148.0/24 maxlen: 24
31.173.147.0/24 maxlen: 24
31.173.151.0/24 maxlen: 24
31.173.154.0/24 maxlen: 24
31.173.158.0/24 maxlen: 24
31.173.153.0/24 maxlen: 24
91.193.212.0/22 maxlen: 24
31.173.157.0/24 maxlen: 24
31.173.156.0/24 maxlen: 24
31.173.159.0/24 maxlen: 24
31.173.155.0/24 maxlen: 24
31.173.166.0/24 maxlen: 24
31.173.165.0/24 maxlen: 24
31.173.164.0/24 maxlen: 24
31.173.160.0/22 maxlen: 22
31.173.170.0/24 maxlen: 24
31.173.169.0/24 maxlen: 24
31.173.168.0/24 maxlen: 24
31.173.167.0/24 maxlen: 24
31.173.171.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
31.173.234.0/24 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 24
83.169.192.0/18 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 24
188.162.0.0/16 maxlen: 24
46.232.200.0/21 maxlen: 24
62.64.0.0/19 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
46.229.128.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0a:79:5a:97:bf:a5:85:a5:65:92:7d:3d:64:f3:8a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 24 14:50:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=600cd783229903039c6821359989a4f2662e90df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:69:86:29:6a:f0:95:8b:41:a5:37:56:a9:db:
b2:c0:88:c1:7c:91:09:15:32:98:ee:ae:8a:1f:60:
b9:0f:40:fc:43:a9:b5:4c:5a:17:d4:a2:bf:b4:c0:
94:ae:f0:f1:1c:ff:a7:96:6e:4c:d1:a1:5f:6f:28:
0d:a4:d3:f7:08:db:93:11:48:e5:02:23:4e:23:ac:
a8:49:dc:56:c1:85:52:06:5e:80:0a:30:78:14:8f:
51:aa:b3:b9:2a:cb:a1:2d:c0:6f:0a:9f:17:18:bb:
27:dd:47:81:b8:df:ad:1b:69:b8:b4:a8:cb:90:d0:
c2:ca:a0:3e:25:c3:50:fb:a3:6b:52:7a:1e:27:0a:
b1:5e:85:30:e1:89:95:77:f5:6f:24:17:36:59:db:
e3:ab:a7:a4:91:df:9a:41:70:97:89:bc:96:e1:45:
3d:0c:24:a5:e6:a7:12:16:aa:96:58:16:e9:25:62:
22:da:fe:9b:3f:2f:6c:28:00:bc:a2:a4:14:80:3b:
3d:16:c5:13:76:3e:13:2a:d4:6a:d3:ab:f8:07:2d:
64:0f:03:e4:50:58:94:7e:c4:6e:d1:cf:3d:96:04:
23:f5:69:c0:0e:7a:75:9d:38:e6:74:7f:ef:cd:f2:
02:e0:cd:4c:78:da:79:9d:ec:30:fa:78:36:84:f6:
fd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0C:D7:83:22:99:03:03:9C:68:21:35:99:89:A4:F2:66:2E:90:DF
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/YAzXgyKZAwOcaCE1mYmk8mYukN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.128.0/22
31.173.136.0-31.173.142.255
31.173.147.0-31.173.171.255
31.173.174.0/23
31.173.177.0-31.173.178.255
31.173.180.0-31.173.191.255
31.173.224.0/24
31.173.234.0/24
37.28.160.0/19
37.29.0.0/17
46.29.192.0/21
46.229.128.0/20
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.178.110.0/23
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
a2:6d:3d:82:63:a0:3f:ba:cb:2c:30:b9:2a:49:e1:26:0f:97:
60:eb:9f:93:5b:4e:30:20:cb:1b:a6:1e:06:fc:97:3a:83:e6:
7f:36:fd:eb:c6:7a:1e:e4:17:19:9c:f8:ac:6f:c0:77:9d:fa:
aa:82:2f:f0:0d:85:a4:24:8b:e3:41:7d:f3:c2:e5:5f:0a:0e:
21:86:dc:51:de:f6:e3:99:96:f5:6f:12:9f:fa:9a:84:1f:bd:
82:ce:38:d6:20:20:bb:45:de:6a:7a:54:88:b8:50:be:f1:e3:
e8:b0:15:7c:61:44:7e:20:33:80:dd:69:bd:c5:89:f2:9f:52:
01:1f:df:a7:d2:a8:12:30:7b:86:a6:a6:de:c2:ea:53:3e:26:
20:b3:13:87:3f:a8:3e:13:ac:50:46:45:4f:cd:c2:dc:db:80:
a4:c9:40:e9:d9:2a:92:a8:52:c5:8a:77:47:98:71:f5:8c:0f:
4e:f1:a6:f1:e1:4d:88:4a:12:67:b5:ac:3b:b0:cf:7e:a8:1c:
e3:f3:50:33:24:80:86:64:4f:d3:c6:1c:45:08:d5:06:b7:aa:
63:61:14:62:39:9b:43:66:b6:e5:75:1f:5f:7c:19:93:89:b1:
13:fa:94:2f:ec:b0:96:77:9d:4a:8c:da:14:ef:f6:32:9f:e6:
9e:80:27:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:09:59 2025 by rpki-client