Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/_buzW66K7Ec5guACnzrpLoeEKbY.roa
File: _buzW66K7Ec5guACnzrpLoeEKbY.roa (raw, json)
Hash identifier: jXLmCgtCxgi9IqR7/E8a8+stCdKlztyAHPz6qDfG6gc=
Subject key identifier: FD:BB:B3:5B:AE:8A:EC:47:39:82:E0:02:9F:3A:E9:2E:87:84:29:B6
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F1271BBB7D00182C553752AA7FB78160
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/_buzW66K7Ec5guACnzrpLoeEKbY.roa
Signing time: Thu 08 Dec 2022 09:53:02 +0000
ROA not before: Thu 08 Dec 2022 09:53:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29648
IP address blocks: 109.188.0.0/16 maxlen: 24
193.201.228.0/22 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
94.25.128.0/17 maxlen: 24
31.173.119.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
77.233.160.0/19 maxlen: 19
77.233.160.0/24 maxlen: 24
77.233.166.0/24 maxlen: 24
77.233.161.0/24 maxlen: 24
77.233.164.0/24 maxlen: 24
77.233.162.0/24 maxlen: 24
77.233.167.0/24 maxlen: 24
77.233.170.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
31.173.104.0/24 maxlen: 24
31.173.105.0/24 maxlen: 24
31.173.112.0/24 maxlen: 24
31.173.109.0/24 maxlen: 24
31.173.110.0/24 maxlen: 24
31.173.107.0/24 maxlen: 24
31.173.108.0/24 maxlen: 24
31.173.106.0/24 maxlen: 24
31.173.111.0/24 maxlen: 24
31.173.117.0/24 maxlen: 24
31.173.118.0/24 maxlen: 24
31.173.115.0/24 maxlen: 24
31.173.116.0/24 maxlen: 24
31.173.113.0/24 maxlen: 24
31.173.114.0/24 maxlen: 24
77.233.173.0/24 maxlen: 24
77.233.178.0/24 maxlen: 24
77.233.181.0/24 maxlen: 24
77.233.182.0/24 maxlen: 24
77.233.185.0/24 maxlen: 24
77.233.180.0/24 maxlen: 24
77.233.186.0/24 maxlen: 24
77.233.190.0/24 maxlen: 24
77.233.188.0/24 maxlen: 24
77.233.191.0/24 maxlen: 24
212.44.64.0/19 maxlen: 24
195.16.96.0/19 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
185.3.32.0/22 maxlen: 24
188.170.98.0/24 maxlen: 24
86.109.192.0/19 maxlen: 19
86.109.192.0/20 maxlen: 20
188.170.97.0/24 maxlen: 24
188.170.96.0/24 maxlen: 24
188.170.100.0/24 maxlen: 24
188.170.103.0/24 maxlen: 24
86.109.195.0/24 maxlen: 24
188.170.105.0/24 maxlen: 24
188.170.102.0/24 maxlen: 24
86.109.193.0/24 maxlen: 24
188.170.99.0/24 maxlen: 24
188.170.104.0/24 maxlen: 24
188.170.101.0/24 maxlen: 24
188.170.106.0/24 maxlen: 24
188.170.111.0/24 maxlen: 24
86.109.200.0/23 maxlen: 23
188.170.108.0/24 maxlen: 24
188.170.110.0/24 maxlen: 24
188.170.107.0/24 maxlen: 24
212.69.96.0/19 maxlen: 24
188.170.109.0/24 maxlen: 24
188.170.112.0/24 maxlen: 24
188.170.114.0/24 maxlen: 24
86.109.213.0/24 maxlen: 24
86.109.210.0/24 maxlen: 24
86.109.208.0/24 maxlen: 24
188.170.113.0/24 maxlen: 24
188.170.116.0/24 maxlen: 24
188.170.115.0/24 maxlen: 24
86.109.212.0/24 maxlen: 24
188.170.118.0/24 maxlen: 24
188.170.117.0/24 maxlen: 24
188.170.119.0/24 maxlen: 24
86.109.216.0/24 maxlen: 24
188.170.122.0/24 maxlen: 24
188.170.121.0/24 maxlen: 24
188.170.120.0/24 maxlen: 24
86.109.214.0/24 maxlen: 24
188.170.124.0/24 maxlen: 24
188.170.123.0/24 maxlen: 24
86.109.215.0/24 maxlen: 24
86.109.218.0/23 maxlen: 23
188.170.125.0/24 maxlen: 24
188.170.127.0/24 maxlen: 24
86.109.222.0/24 maxlen: 24
86.109.220.0/24 maxlen: 24
188.170.126.0/24 maxlen: 24
86.109.223.0/24 maxlen: 24
78.109.120.0/24 maxlen: 24
78.109.121.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
178.176.96.0/24 maxlen: 24
178.176.98.0/24 maxlen: 24
178.176.97.0/24 maxlen: 24
178.176.102.0/24 maxlen: 24
178.176.99.0/24 maxlen: 24
178.176.101.0/24 maxlen: 24
178.176.103.0/24 maxlen: 24
178.176.100.0/24 maxlen: 24
178.176.118.0/24 maxlen: 24
178.176.115.0/24 maxlen: 24
178.176.117.0/24 maxlen: 24
178.176.114.0/24 maxlen: 24
178.176.116.0/24 maxlen: 24
178.176.123.0/24 maxlen: 24
178.176.120.0/24 maxlen: 24
178.176.125.0/24 maxlen: 24
178.176.122.0/24 maxlen: 24
178.176.119.0/24 maxlen: 24
178.176.124.0/24 maxlen: 24
178.176.121.0/24 maxlen: 24
178.176.126.0/24 maxlen: 24
178.176.127.0/24 maxlen: 24
83.169.217.0/24 maxlen: 24
83.169.218.0/24 maxlen: 24
83.169.219.0/24 maxlen: 24
83.169.220.0/24 maxlen: 24
83.169.223.0/24 maxlen: 24
83.169.221.0/24 maxlen: 24
83.169.222.0/24 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:27:1b:bb:7d:00:18:2c:55:37:52:aa:7f:b7:81:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 09:53:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fdbbb35bae8aec473982e0029f3ae92e878429b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4f:ce:11:89:25:21:ae:8f:2b:20:3c:8b:9e:
bd:5b:5f:48:14:ea:40:b4:74:d0:0e:fd:00:ea:e8:
68:2c:1e:71:ab:3b:38:24:7d:df:f4:21:89:8f:f7:
8a:c9:94:08:84:96:10:e4:9d:f8:53:ce:24:15:46:
93:48:bc:3a:8c:6d:3c:de:6b:24:f5:8c:78:a8:48:
ca:e5:d5:fb:05:79:f2:97:34:31:bc:4b:a5:44:47:
32:69:8a:49:7c:cc:40:eb:40:9b:f3:94:f5:42:7c:
9c:3f:be:2f:f3:e2:85:ab:d0:48:47:81:09:72:c9:
d9:e1:8e:da:c2:2d:fe:0c:7e:be:9b:16:02:63:cb:
76:27:3d:04:61:c3:4d:c4:1b:52:30:06:19:c5:51:
e1:74:06:f5:7b:0d:b6:37:f4:50:1c:d1:af:9b:f8:
f7:7b:46:1f:64:af:e4:82:29:3c:46:06:6b:b5:f4:
ce:53:f6:bf:b8:90:17:91:d4:7d:dc:7b:59:bf:5f:
7d:06:64:47:88:11:98:4a:57:60:89:b2:cf:e4:2d:
88:0c:1a:c6:4e:df:42:eb:8e:5d:25:d0:0c:b0:9c:
e1:87:0e:b2:6e:0b:9c:a2:58:04:eb:d2:e1:a2:de:
f8:7e:7c:47:79:18:69:d4:67:d7:22:4e:28:e7:bc:
46:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BB:B3:5B:AE:8A:EC:47:39:82:E0:02:9F:3A:E9:2E:87:84:29:B6
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/_buzW66K7Ec5guACnzrpLoeEKbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.104.0-31.173.119.255
77.233.160.0/19
78.109.120.0/23
83.169.217.0-83.169.223.255
86.109.192.0/19
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.96.0/21
178.176.114.0-178.176.127.255
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.96.0/19
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
85:e5:2a:c3:a2:43:bf:7f:15:1d:b0:26:ca:19:fe:7b:7f:f9:
52:99:16:f8:95:f4:d9:b2:d1:dc:78:2c:91:be:c2:75:0e:21:
33:7e:24:60:fe:e2:a3:8c:18:0a:53:6a:f9:39:1b:ab:83:6d:
49:25:a3:6e:5a:68:21:60:32:47:ed:32:d4:7f:d9:df:18:c1:
87:08:0b:a2:6b:0d:19:eb:41:d8:be:30:2b:28:ed:c3:34:a3:
3b:01:44:51:f9:8f:bf:d2:13:24:51:4b:81:a2:ea:99:fd:0f:
a5:b8:d4:84:d1:28:2e:2e:62:6f:53:3d:33:f2:53:ee:ed:ba:
8c:16:07:db:93:7c:f1:b6:be:7f:f9:f2:17:7d:f7:e1:63:c5:
31:cc:02:93:e7:11:1f:b4:cb:06:32:eb:31:34:88:cb:89:7e:
47:33:4b:02:b8:a0:46:cf:dd:cb:2e:a6:eb:9c:46:fc:43:9d:
c7:cc:25:d2:db:a7:61:ac:5a:c3:22:6f:12:6a:02:06:e8:51:
bb:59:80:a3:c5:d4:fa:bd:e6:93:12:03:35:cf:06:e6:a0:31:
2a:bd:71:91:ee:1b:06:b2:0a:40:50:20:4c:f8:e4:c0:14:a5:
f3:78:c9:f7:33:84:6a:8e:33:30:9b:2c:34:5a:dc:2c:67:10:
e7:04:37:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:11 2025 by rpki-client