Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/YXumSqgXjLUbRcMTbU5FWVTeIaU.roa
File: YXumSqgXjLUbRcMTbU5FWVTeIaU.roa (raw, json)
Hash identifier: vqpjl9bVkqsi3aji9Cisgk/xvbQNuAWy8PWOd+LODno=
Subject key identifier: 61:7B:A6:4A:A8:17:8C:B5:1B:45:C3:13:6D:4E:45:59:54:DE:21:A5
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018505911028B24338DC98BE2AA940400D9C
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/YXumSqgXjLUbRcMTbU5FWVTeIaU.roa
Signing time: Mon 12 Dec 2022 09:01:11 +0000
ROA not before: Mon 12 Dec 2022 09:01:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31195
IP address blocks: 195.16.96.0/19 maxlen: 24
193.201.228.0/22 maxlen: 24
85.26.240.0/22 maxlen: 22
178.178.64.0/24 maxlen: 24
178.178.71.0/24 maxlen: 24
178.178.67.0/24 maxlen: 24
178.178.70.0/24 maxlen: 24
178.178.66.0/24 maxlen: 24
178.178.65.0/24 maxlen: 24
178.178.68.0/24 maxlen: 24
178.178.73.0/24 maxlen: 24
178.178.72.0/24 maxlen: 24
78.25.124.0/22 maxlen: 22
78.25.127.0/24 maxlen: 24
31.173.225.0/24 maxlen: 24
31.173.226.0/24 maxlen: 24
31.173.132.0/23 maxlen: 23
31.173.134.0/23 maxlen: 23
31.173.135.0/24 maxlen: 24
178.176.233.0/24 maxlen: 24
178.176.235.0/24 maxlen: 24
178.176.234.0/24 maxlen: 24
31.173.143.0/24 maxlen: 24
37.28.190.0/24 maxlen: 24
37.28.188.0/22 maxlen: 22
37.28.191.0/24 maxlen: 24
37.29.91.0/24 maxlen: 24
37.29.88.0/22 maxlen: 22
37.29.89.0/24 maxlen: 24
37.29.95.0/24 maxlen: 24
37.29.94.0/24 maxlen: 24
37.29.92.0/22 maxlen: 22
188.170.232.0/24 maxlen: 24
188.170.233.0/24 maxlen: 24
188.170.230.0/24 maxlen: 24
188.170.231.0/24 maxlen: 24
188.170.228.0/23 maxlen: 23
188.170.236.0/24 maxlen: 24
188.170.237.0/24 maxlen: 24
188.170.234.0/24 maxlen: 24
188.170.239.0/24 maxlen: 24
188.170.235.0/24 maxlen: 24
31.173.230.0/24 maxlen: 24
31.173.231.0/24 maxlen: 24
31.173.228.0/23 maxlen: 23
31.173.232.0/23 maxlen: 23
31.173.228.0/24 maxlen: 24
31.173.229.0/24 maxlen: 24
31.173.238.0/24 maxlen: 24
31.173.235.0/24 maxlen: 24
31.173.239.0/24 maxlen: 24
31.173.236.0/23 maxlen: 23
195.5.128.0/19 maxlen: 24
37.29.43.0/24 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
83.149.52.0/22 maxlen: 22
83.169.230.0/24 maxlen: 24
83.169.228.0/23 maxlen: 23
83.169.227.0/24 maxlen: 24
83.169.226.0/24 maxlen: 24
83.169.224.0/23 maxlen: 23
188.162.0.0/16 maxlen: 24
85.26.244.0/22 maxlen: 22
85.26.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:91:10:28:b2:43:38:dc:98:be:2a:a9:40:40:0d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 09:01:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=617ba64aa8178cb51b45c3136d4e455954de21a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e1:03:1d:25:7b:e0:29:b7:1c:2f:4e:da:db:
48:7e:92:2b:2b:36:5a:2b:94:52:42:f9:f7:f6:ab:
4e:6e:76:95:e0:b9:54:3b:86:5b:06:af:f3:17:78:
35:3e:7b:a8:80:a4:0a:ed:35:fe:f4:52:6b:72:a2:
33:18:9b:cd:90:03:ca:a6:c7:39:16:d6:a5:ad:8f:
a3:e3:dc:d3:0b:c4:17:88:32:52:cc:c6:7f:e5:ef:
8a:e4:ef:6c:75:68:4f:66:42:cb:e3:77:3e:31:f1:
28:1c:7d:ae:d1:53:96:6a:ef:6b:1b:a6:d0:58:cb:
9c:05:39:b7:da:9c:b3:0d:29:3c:f9:7e:43:1e:9b:
8f:cb:2c:e4:c6:17:cf:a4:6a:f3:23:2f:66:25:fb:
62:2a:64:7b:ea:01:4f:84:8b:8a:9c:4d:d0:f7:1e:
89:7e:b9:50:df:6f:86:c1:35:47:40:96:a5:70:4b:
03:76:a4:ef:bb:97:75:aa:5c:c1:05:9f:15:38:95:
ac:fc:f7:82:c8:e5:4d:fd:a3:eb:eb:5b:4b:f1:ad:
7a:04:8d:c9:86:4e:64:63:53:09:0a:30:e1:c6:73:
c5:aa:df:f6:1a:f4:14:9e:86:8d:09:e3:b5:ec:01:
f8:e3:2f:bd:c1:90:35:47:4b:ee:f8:17:04:1e:cf:
73:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7B:A6:4A:A8:17:8C:B5:1B:45:C3:13:6D:4E:45:59:54:DE:21:A5
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/YXumSqgXjLUbRcMTbU5FWVTeIaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.132.0/22
31.173.143.0/24
31.173.225.0-31.173.226.255
31.173.228.0-31.173.233.255
31.173.235.0-31.173.239.255
37.28.188.0/22
37.29.43.0/24
37.29.88.0/21
78.25.124.0/22
83.149.52.0/22
83.169.224.0-83.169.230.255
85.26.240.0/21
178.176.233.0-178.176.235.255
178.178.64.0-178.178.68.255
178.178.70.0-178.178.73.255
188.162.0.0/16
188.170.228.0-188.170.237.255
188.170.239.0/24
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
Signature Algorithm: sha256WithRSAEncryption
77:db:14:fc:d8:bd:00:5a:24:d3:98:b8:76:cf:fa:79:89:8b:
81:3e:e0:87:0f:eb:4b:5a:6f:6c:b0:8d:f9:92:cb:6f:67:d5:
65:d4:5b:64:13:71:c2:f0:fb:df:f0:cb:6e:40:c9:90:8d:76:
2e:fa:fa:24:15:59:bf:4e:37:86:b9:71:fd:72:b1:1b:34:46:
c4:fc:c8:bf:f8:06:81:88:6b:49:c6:22:9e:68:8c:45:0a:71:
11:4c:9f:d9:66:47:28:e8:ec:ea:03:35:91:e0:0e:c2:a0:12:
e9:3c:74:76:d6:d9:9c:c1:f1:b7:81:7b:3e:6d:ac:d3:4f:d2:
3a:a2:5a:e2:28:62:65:36:59:b9:f7:5a:1b:8b:bb:b0:dd:76:
0b:0b:18:55:2c:9b:00:a0:ea:70:09:99:a5:55:66:35:ec:93:
45:2f:68:ea:5b:98:27:e9:5a:80:78:d0:63:cf:57:7e:63:e3:
7a:f6:ad:3f:ad:f2:22:0e:5b:81:43:11:21:f9:b3:ff:24:f9:
b2:f0:34:0b:bb:53:43:31:c0:f0:e8:81:ae:a6:42:2c:c3:f8:
a0:29:db:c8:5a:42:0c:7f:a5:74:7b:e6:6f:7c:fc:a9:11:a0:
72:b8:1e:13:48:2d:db:e0:65:8d:ad:88:8d:71:54:76:f4:22:
82:98:4c:68
-----BEGIN CERTIFICATE-----
MIIF0TCCBLmgAwIBAgISAYUFkRAoskM43Ji+KqlAQA2cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMjEyMDkwMTExWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTdiYTY0YWE4MTc4Y2I1MWI0NWMzMTM2ZDRlNDU1OTU0ZGUyMWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheEDHSV74Cm3HC9O2ttIfpIrKzZa
K5RSQvn39qtObnaV4LlUO4ZbBq/zF3g1PnuogKQK7TX+9FJrcqIzGJvNkAPKpsc5
FtalrY+j49zTC8QXiDJSzMZ/5e+K5O9sdWhPZkLL43c+MfEoHH2u0VOWau9rG6bQ
WMucBTm32pyzDSk8+X5DHpuPyyzkxhfPpGrzIy9mJftiKmR76gFPhIuKnE3Q9x6J
frlQ32+GwTVHQJalcEsDdqTvu5d1qlzBBZ8VOJWs/PeCyOVN/aPr61tL8a16BI3J
hk5kY1MJCjDhxnPFqt/2GvQUnoaNCeO17AH44y+9wZA1R0vu+BcEHs9zeQIDAQAB
o4IC3TCCAtkwHQYDVR0OBBYEFGF7pkqoF4y1G0XDE21ORVlU3iGlMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvWVh1bVNxZ1hqTFViUmNNVGJVNUZXVlRlSWFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHyBggrBgEFBQcBBwEB/wSB4jCB3zCB3AQCAAEwgdUDBAIf
rYQDBAAfrY8wDAMEAB+t4QMEAB+t4jAMAwQCH63kAwQBH63oMAwDBAAfresDBAQf
reADBAIlHLwDBAAlHSsDBAMlHVgDBAJOGXwDBAJTlTQwDAMEBVOp4AMEAFOp5gME
A1Ua8DAMAwQAsrDpAwQCsrDoMAwDBAayskADBACyskQwDAMEAbKyRgMEAbKySAMD
ALyiMAwDBAK8quQDBAG8quwDBAC8qu8DBALByeQDBAXDBYADBAXDEGADBAHDTnQD
BADDlW8DBAXD5kADBAXUDqAwDQYJKoZIhvcNAQELBQADggEBAHfbFPzYvQBaJNOY
uHbP+nmJi4E+4IcP60tab2ywjfmSy29n1WXUW2QTccLw+9/wy25AyZCNdi76+iQV
Wb9ON4a5cf1ysRs0RsT8yL/4BoGIa0nGIp5ojEUKcRFMn9lmRyjo7OoDNZHgDsKg
Euk8dHbW2ZzB8beBez5trNNP0jqiWuIoYmU2Wbn3WhuLu7DddgsLGFUsmwCg6nAJ
maVVZjXsk0UvaOpbmCfpWoB40GPPV35j43r2rT+t8iIOW4FDESH5s/8k+bLwNAu7
U0MxwPDoga6mQizD+KAp28haQgx/pXR75m98/KkRoHK4HhNILdvgZY2tiI1xVHb0
IoKYTGg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:25 2024 by rpki-client on console-fra.rpki-client.org