Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/_jsRk6tF4Dtm6RxbbiJ-T92aK6U.roa
File: _jsRk6tF4Dtm6RxbbiJ-T92aK6U.roa (raw, json)
Hash identifier: DmWxGoC4xk+h8EKi0qcltLPhWO+Yz9QElB/N7rUzq8I=
Subject key identifier: FE:3B:11:93:AB:45:E0:3B:66:E9:1C:5B:6E:22:7E:4F:DD:9A:2B:A5
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184094BDC8274EAFCF6A8D49069B1C341B5
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/_jsRk6tF4Dtm6RxbbiJ-T92aK6U.roa
Signing time: Mon 24 Oct 2022 09:21:17 +0000
ROA not before: Mon 24 Oct 2022 09:21:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25159
IP address blocks: 109.188.0.0/16 maxlen: 24
46.29.192.0/21 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
37.29.0.0/17 maxlen: 24
78.25.64.0/18 maxlen: 24
37.28.160.0/19 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
31.173.0.0/21 maxlen: 21
77.233.160.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
31.173.8.0/21 maxlen: 21
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 24
31.173.72.0/21 maxlen: 21
31.173.80.0/21 maxlen: 21
31.173.88.0/21 maxlen: 21
31.173.16.0/21 maxlen: 21
31.173.24.0/21 maxlen: 21
31.173.32.0/19 maxlen: 19
83.169.192.0/18 maxlen: 24
31.173.60.0/24 maxlen: 24
31.173.64.0/21 maxlen: 21
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
188.94.168.0/21 maxlen: 24
46.232.200.0/21 maxlen: 24
62.64.0.0/19 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
212.44.64.0/19 maxlen: 24
46.229.128.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:09:4b:dc:82:74:ea:fc:f6:a8:d4:90:69:b1:c3:41:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 24 09:21:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe3b1193ab45e03b66e91c5b6e227e4fdd9a2ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:89:48:dc:fb:e9:bc:16:68:a0:8b:f3:9d:05:
e7:05:76:cb:4b:b5:f1:27:75:a8:11:14:0b:80:20:
87:e1:6e:8d:fb:41:ec:c2:b0:d0:89:82:28:b2:60:
9f:b9:be:64:aa:7f:c7:26:a5:ff:75:12:87:92:9e:
1b:9a:98:88:b8:25:19:a6:85:77:d4:29:4e:a1:37:
19:67:a6:10:0d:05:0b:aa:fe:45:ef:67:d9:c1:c3:
b0:6f:49:ce:d1:ae:1b:c3:db:6f:77:14:67:b4:9f:
11:78:9f:38:62:92:55:85:0c:01:e9:a0:22:fb:f6:
40:1e:77:44:04:68:27:16:e4:fb:16:e3:3e:03:85:
06:55:aa:4a:31:6f:f9:de:4e:8b:10:bb:f0:09:c3:
9d:2a:d4:64:e1:f4:95:15:ba:74:84:86:d0:af:0c:
31:d0:6b:8f:e1:58:13:f9:af:c7:af:7f:e8:a2:d4:
58:9b:95:89:5b:8a:fe:15:a9:8a:8c:3a:72:39:01:
52:71:00:9a:44:36:b3:7f:29:77:49:92:42:1e:13:
ab:90:af:e9:4d:36:ef:33:0f:3e:3b:1c:37:56:1b:
35:72:44:63:ca:b3:f3:44:60:f7:50:3d:69:19:fe:
e4:ba:b2:8c:31:ad:4f:12:8b:ee:74:63:99:ea:7a:
39:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3B:11:93:AB:45:E0:3B:66:E9:1C:5B:6E:22:7E:4F:DD:9A:2B:A5
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/_jsRk6tF4Dtm6RxbbiJ-T92aK6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.0.0-31.173.95.255
37.28.160.0/19
37.29.0.0/17
46.29.192.0/21
46.229.128.0/20
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
10:8b:75:81:51:98:77:db:a5:74:ed:8a:6b:0c:37:33:48:b9:
08:52:4f:20:32:a2:c1:85:f7:7b:da:27:2f:55:5c:e7:26:99:
b4:5f:41:bb:52:e3:50:b9:bd:79:b2:e6:f8:43:cf:be:c5:8b:
28:46:72:98:fd:fb:31:7e:6d:db:61:4b:bc:a8:8f:cf:ea:ad:
e7:a9:4d:00:15:aa:d9:b5:be:58:26:1e:9d:4b:db:47:5c:06:
c1:0e:6b:33:0d:fb:9b:32:1f:cf:fa:a6:26:b5:07:62:dd:ea:
72:2b:02:81:db:04:f4:d9:dd:79:63:ce:e5:53:94:88:84:a5:
d6:25:37:f5:45:d6:16:6d:a6:cb:f4:23:42:6a:f2:4e:40:44:
65:d6:b4:cb:5e:77:34:b6:7d:fc:91:91:a1:4c:70:9f:b7:a1:
2b:19:92:2e:e5:c4:7a:85:73:7d:9a:08:a8:8d:fe:33:ab:94:
84:6e:f2:f2:02:e6:40:98:f4:78:e6:ab:13:04:06:ce:67:bf:
79:47:ac:af:6f:18:75:f7:37:c4:f7:a5:98:c6:f1:b1:27:40:
78:09:f3:d7:a3:67:9e:92:ea:1f:3e:84:f8:19:36:4a:87:b3:
47:b2:f2:38:49:08:8f:37:ab:7e:8b:88:bf:3e:c1:92:5b:65:
0d:9b:8b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:35 2024 by rpki-client on console-ams.rpki-client.org