Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Yq66Miz0oxsquIQty11Yok-1xEk.roa
File: Yq66Miz0oxsquIQty11Yok-1xEk.roa (raw, json)
Hash identifier: eBV7vM8e4u8tL62aTKb0C2KtkLBbaxFhQJzzJhvmBEs=
Subject key identifier: 62:AE:BA:32:2C:F4:A3:1B:2A:B8:84:2D:CB:5D:58:A2:4F:B5:C4:49
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0185053F748E54710F7C9FF64E27079AF3D4
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Yq66Miz0oxsquIQty11Yok-1xEk.roa
Signing time: Mon 12 Dec 2022 07:32:02 +0000
ROA not before: Mon 12 Dec 2022 07:32:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31195
IP address blocks: 195.16.96.0/19 maxlen: 24
193.201.228.0/22 maxlen: 24
85.26.240.0/22 maxlen: 22
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
178.178.64.0/24 maxlen: 24
178.178.71.0/24 maxlen: 24
178.178.67.0/24 maxlen: 24
178.178.70.0/24 maxlen: 24
178.178.66.0/24 maxlen: 24
178.178.65.0/24 maxlen: 24
178.178.68.0/24 maxlen: 24
178.178.73.0/24 maxlen: 24
178.178.72.0/24 maxlen: 24
78.25.124.0/22 maxlen: 22
78.25.127.0/24 maxlen: 24
212.69.96.0/19 maxlen: 24
31.173.225.0/24 maxlen: 24
31.173.226.0/24 maxlen: 24
31.173.132.0/23 maxlen: 23
31.173.134.0/23 maxlen: 23
31.173.135.0/24 maxlen: 24
178.176.233.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
178.176.235.0/24 maxlen: 24
178.176.234.0/24 maxlen: 24
31.173.143.0/24 maxlen: 24
37.28.190.0/24 maxlen: 24
37.28.188.0/22 maxlen: 22
37.28.191.0/24 maxlen: 24
37.29.91.0/24 maxlen: 24
37.29.88.0/22 maxlen: 22
37.29.89.0/24 maxlen: 24
37.29.95.0/24 maxlen: 24
37.29.94.0/24 maxlen: 24
37.29.92.0/22 maxlen: 22
188.170.232.0/24 maxlen: 24
188.170.233.0/24 maxlen: 24
188.170.230.0/24 maxlen: 24
188.170.231.0/24 maxlen: 24
188.170.228.0/23 maxlen: 23
188.170.236.0/24 maxlen: 24
188.170.237.0/24 maxlen: 24
188.170.234.0/24 maxlen: 24
188.170.239.0/24 maxlen: 24
188.170.235.0/24 maxlen: 24
31.173.230.0/24 maxlen: 24
31.173.231.0/24 maxlen: 24
31.173.228.0/23 maxlen: 23
31.173.232.0/23 maxlen: 23
31.173.228.0/24 maxlen: 24
31.173.229.0/24 maxlen: 24
31.173.238.0/24 maxlen: 24
31.173.235.0/24 maxlen: 24
31.173.239.0/24 maxlen: 24
31.173.236.0/23 maxlen: 23
195.5.128.0/19 maxlen: 24
37.29.43.0/24 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
83.149.52.0/22 maxlen: 22
83.169.230.0/24 maxlen: 24
83.169.228.0/23 maxlen: 23
83.169.227.0/24 maxlen: 24
83.169.226.0/24 maxlen: 24
83.169.224.0/23 maxlen: 23
188.162.0.0/16 maxlen: 24
85.26.244.0/22 maxlen: 22
85.26.247.0/24 maxlen: 24
212.44.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:3f:74:8e:54:71:0f:7c:9f:f6:4e:27:07:9a:f3:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 07:32:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62aeba322cf4a31b2ab8842dcb5d58a24fb5c449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4f:e6:5d:86:e1:b0:7f:15:1d:ef:6f:99:ad:
81:42:aa:af:25:00:1d:2e:30:72:fc:83:cc:5d:de:
96:fe:5e:5e:f6:76:f3:2b:25:d9:67:ea:4d:1b:73:
1f:e1:0b:c0:2e:42:24:c1:18:7b:22:e8:ca:75:54:
92:18:25:c0:cd:21:50:e4:f4:fb:20:50:fa:a2:62:
91:0c:0a:2a:39:81:25:5c:c9:32:0b:81:06:ad:b6:
77:f8:13:b7:a8:45:19:69:87:23:93:34:80:91:ef:
2c:37:d7:ff:d6:5f:81:39:65:26:b6:c8:d2:96:bf:
04:9c:0a:e7:5c:db:b6:5f:4e:d2:49:93:14:ae:6d:
f3:e9:eb:ac:b4:51:e0:28:7a:6e:27:f0:c6:ee:ee:
ab:2a:95:3f:be:81:dd:37:c1:4c:25:ea:37:39:04:
8a:8e:c4:f0:43:98:42:05:c5:47:51:d7:2e:54:25:
4f:fd:fc:33:cb:96:8c:08:ca:74:45:88:4c:2a:4d:
93:d7:25:ce:b0:4d:9c:2a:1e:1e:1c:5c:b3:8a:6d:
d4:8c:1c:98:94:ec:ba:a3:79:87:ec:fa:9f:51:52:
04:69:c9:8a:d2:ae:42:5e:b1:42:0e:d0:80:b8:b5:
b6:21:c2:b3:99:0a:1e:57:79:3e:17:25:48:ae:70:
a9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:AE:BA:32:2C:F4:A3:1B:2A:B8:84:2D:CB:5D:58:A2:4F:B5:C4:49
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Yq66Miz0oxsquIQty11Yok-1xEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.132.0/22
31.173.143.0/24
31.173.225.0-31.173.226.255
31.173.228.0-31.173.233.255
31.173.235.0-31.173.239.255
37.28.188.0/22
37.29.43.0/24
37.29.88.0/21
78.25.124.0/22
83.149.52.0/22
83.169.224.0-83.169.230.255
85.26.240.0/21
178.176.233.0-178.176.235.255
178.178.64.0-178.178.68.255
178.178.70.0-178.178.73.255
188.162.0.0/16
188.170.228.0-188.170.237.255
188.170.239.0/24
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
Signature Algorithm: sha256WithRSAEncryption
86:33:23:f0:fd:d8:42:ba:4d:83:85:2d:47:aa:34:6e:e5:d4:
54:6a:a7:92:56:0f:3b:96:16:5b:df:c2:aa:6e:b0:f6:b8:1a:
b4:b2:42:e4:ed:d5:e9:a6:72:45:14:aa:ee:dd:f0:2a:d7:e3:
53:78:19:f7:2c:6d:18:95:b2:7d:bd:24:03:fc:6f:9c:0c:ec:
66:cc:34:f0:48:1b:df:24:b2:5c:a5:f0:be:36:49:33:6c:01:
3f:d0:53:dc:34:5f:41:63:46:0e:17:18:aa:61:0f:d1:8f:72:
7c:1b:73:59:1b:23:f6:8c:1e:fa:d6:bc:eb:17:21:13:27:ce:
2b:fb:a7:03:77:6b:f6:09:4e:5e:43:3c:d4:80:c0:10:1e:77:
d5:98:7a:fc:76:89:5c:d1:46:81:fa:51:99:27:2f:10:3f:4b:
82:aa:da:88:05:5f:75:30:99:2e:ba:d1:94:2e:b5:3b:5f:85:
37:21:de:6f:ab:39:52:4e:ba:26:7d:9c:60:60:ff:2a:5a:42:
51:8a:e8:fe:52:a4:08:45:c7:3d:36:80:7d:87:c3:36:31:aa:
75:7b:4f:7e:7f:f8:5b:06:ad:91:bb:8e:02:95:08:c8:7a:2f:
95:7e:d4:c0:4b:8d:0b:ac:cd:db:bf:e3:0c:c3:49:57:23:cf:
f9:25:6e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:35 2024 by rpki-client on console-ams.rpki-client.org