Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ZHZCD3S8bsRj2mid1MdkOGYeK5g.roa
File: ZHZCD3S8bsRj2mid1MdkOGYeK5g.roa (raw, json)
Hash identifier: 9l75GVWNFxEu72aagwXnPfmabkBH4gQiFAvo2qyRVj0=
Subject key identifier: 64:76:42:0F:74:BC:6E:C4:63:DA:68:9D:D4:C7:64:38:66:1E:2B:98
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01840F5871E64A23B0FD79BCE6A28F976056
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ZHZCD3S8bsRj2mid1MdkOGYeK5g.roa
Signing time: Tue 25 Oct 2022 13:32:45 +0000
ROA not before: Tue 25 Oct 2022 13:32:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31133
IP address blocks: 109.188.0.0/16 maxlen: 24
85.26.128.0/17 maxlen: 24
193.201.228.0/22 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
31.173.174.0/24 maxlen: 24
31.173.178.0/24 maxlen: 24
31.173.177.0/24 maxlen: 24
31.173.175.0/24 maxlen: 24
31.173.181.0/24 maxlen: 24
31.173.182.0/24 maxlen: 24
31.173.186.0/24 maxlen: 24
31.173.185.0/24 maxlen: 24
93.153.128.0/17 maxlen: 24
31.173.180.0/24 maxlen: 24
31.173.184.0/24 maxlen: 24
31.173.183.0/24 maxlen: 24
94.25.128.0/17 maxlen: 24
31.173.190.0/24 maxlen: 24
31.173.189.0/24 maxlen: 24
31.173.188.0/24 maxlen: 24
31.173.187.0/24 maxlen: 24
31.173.191.0/24 maxlen: 24
31.173.224.0/24 maxlen: 24
78.25.64.0/18 maxlen: 24
31.173.130.0/23 maxlen: 23
31.173.129.0/24 maxlen: 24
31.173.128.0/24 maxlen: 24
31.173.138.0/24 maxlen: 24
31.173.137.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
31.173.136.0/24 maxlen: 24
31.173.139.0/24 maxlen: 24
31.173.142.0/24 maxlen: 24
31.173.141.0/24 maxlen: 24
31.173.140.0/24 maxlen: 24
31.173.150.0/24 maxlen: 24
80.247.176.0/20 maxlen: 24
31.173.149.0/24 maxlen: 24
31.173.152.0/24 maxlen: 24
31.173.148.0/24 maxlen: 24
31.173.147.0/24 maxlen: 24
31.173.151.0/24 maxlen: 24
31.173.154.0/24 maxlen: 24
31.173.158.0/24 maxlen: 24
31.173.153.0/24 maxlen: 24
91.193.212.0/22 maxlen: 24
31.173.157.0/24 maxlen: 24
31.173.156.0/24 maxlen: 24
31.173.159.0/24 maxlen: 24
31.173.155.0/24 maxlen: 24
31.173.166.0/24 maxlen: 24
31.173.165.0/24 maxlen: 24
31.173.164.0/24 maxlen: 24
31.173.160.0/22 maxlen: 22
31.173.170.0/24 maxlen: 24
31.173.169.0/24 maxlen: 24
31.173.168.0/24 maxlen: 24
31.173.167.0/24 maxlen: 24
31.173.171.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
31.173.234.0/24 maxlen: 24
77.233.160.0/19 maxlen: 24
31.173.0.0/16 maxlen: 16
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
46.232.200.0/21 maxlen: 24
62.64.0.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
46.29.192.0/21 maxlen: 24
195.16.96.0/19 maxlen: 24
79.171.8.0/21 maxlen: 24
178.178.111.0/24 maxlen: 24
178.178.110.0/24 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
185.3.32.0/22 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
37.29.0.0/17 maxlen: 24
37.28.160.0/19 maxlen: 24
185.210.140.0/22 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
78.41.100.0/22 maxlen: 24
83.169.192.0/18 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 24
188.162.0.0/16 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
46.229.128.0/20 maxlen: 24
83.229.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0f:58:71:e6:4a:23:b0:fd:79:bc:e6:a2:8f:97:60:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 25 13:32:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6476420f74bc6ec463da689dd4c76438661e2b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:52:68:9e:49:c7:6c:b7:f9:34:9f:03:bd:13:
e3:62:f9:0f:73:3a:05:f7:26:d8:42:ba:ff:16:6d:
2e:1f:cc:3a:a5:7e:17:b4:ea:53:4c:82:46:94:5a:
b4:e8:4b:95:26:d0:1f:7e:d1:c4:50:74:30:d1:37:
93:e5:78:f1:71:9f:be:f0:83:29:f9:85:8b:3f:41:
0a:e5:90:b3:f2:e2:5c:64:41:8d:36:b0:f8:85:dc:
d7:04:c9:fb:6d:de:77:ed:83:dd:fd:61:dc:0e:f3:
80:f7:1c:a4:59:77:7a:b4:9f:f3:b1:c7:d5:ee:06:
a2:04:7c:7b:77:2c:d4:93:8a:02:f1:b7:f1:fa:76:
de:de:00:a4:bd:e8:de:dc:98:4f:6f:70:56:ec:da:
68:26:d7:37:18:2d:f9:26:39:45:68:c8:b4:c5:15:
ed:fe:05:9a:82:f3:59:25:40:49:7a:89:38:54:31:
23:b2:71:45:6d:f3:6a:9d:56:9a:b0:34:9c:4f:d9:
42:ad:f8:68:b7:8c:a9:8f:a0:8c:72:95:78:02:97:
d8:76:26:ab:cd:3c:d3:7f:40:21:af:77:cd:41:f6:
67:cb:0c:63:a7:93:21:db:95:8a:d5:da:23:bc:7d:
a8:82:a6:5e:d2:03:31:ee:df:f0:20:6e:5b:cf:1c:
02:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:76:42:0F:74:BC:6E:C4:63:DA:68:9D:D4:C7:64:38:66:1E:2B:98
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ZHZCD3S8bsRj2mid1MdkOGYeK5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.0.0/16
37.28.160.0/19
37.29.0.0/17
46.29.192.0/21
46.229.128.0/20
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.178.110.0/23
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
60:dd:a7:ff:11:a6:a2:58:4b:41:37:24:ef:44:f7:9b:cf:3e:
79:5f:b6:51:b7:de:70:9d:88:8d:c6:29:5b:3a:0b:11:dc:ea:
99:6e:e7:1c:c6:bd:28:c7:97:b2:85:72:08:fd:7d:e4:ee:c8:
64:2c:ea:1c:bd:da:93:01:4d:80:4d:b2:4e:34:b8:5b:b5:12:
99:f9:aa:e8:39:9c:c9:a1:d7:7c:06:8d:e0:c1:22:19:bd:89:
18:8d:50:0c:5e:9d:1d:14:bc:a7:d5:f5:68:5f:6b:3d:60:80:
a0:c5:dc:6b:cd:80:f2:34:5e:8b:9c:9c:24:22:0e:7d:d3:89:
e4:65:59:7e:66:d7:55:ce:d7:22:03:d1:5b:c7:b6:47:fb:49:
e9:4f:bc:16:1d:2e:f4:b0:48:e3:71:ad:9a:72:df:83:bc:52:
bd:82:d0:5b:20:f3:c2:32:7d:72:b9:0a:b3:9d:61:4f:af:98:
3e:bc:72:4a:e0:86:d0:9a:91:83:87:a0:ea:5d:b3:28:9d:c6:
0a:36:da:00:6a:b0:0f:aa:6d:d8:54:be:9b:91:4f:0a:ef:90:
6e:b9:ed:1b:6f:fb:b6:9e:e5:e9:bf:ff:a7:1f:15:6e:f0:06:
de:7a:5f:b6:c3:16:63:ab:73:62:52:22:9a:23:89:07:c0:eb:
4e:7f:84:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:23:42 2025 by rpki-client