Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/aiiZZz4Bq8XEFh27xG6bjuDx44A.roa
File: aiiZZz4Bq8XEFh27xG6bjuDx44A.roa (raw, json)
Hash identifier: KyOurqoCtjmh8MtFsTZB0TSUGlUgW7hsSnvgrAO7wJs=
Subject key identifier: 6A:28:99:67:3E:01:AB:C5:C4:16:1D:BB:C4:6E:9B:8E:E0:F1:E3:80
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F243D494336F8CCFDFB30DFB05F6C3A1
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/aiiZZz4Bq8XEFh27xG6bjuDx44A.roa
Signing time: Thu 08 Dec 2022 15:04:02 +0000
ROA not before: Thu 08 Dec 2022 15:04:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31213
IP address blocks: 195.16.96.0/19 maxlen: 24
85.26.128.0/20 maxlen: 20
193.201.228.0/22 maxlen: 24
85.26.208.0/22 maxlen: 22
85.26.212.0/22 maxlen: 22
109.188.128.0/17 maxlen: 17
85.26.216.0/22 maxlen: 22
85.26.220.0/22 maxlen: 22
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
188.170.80.0/21 maxlen: 21
78.25.120.0/22 maxlen: 22
188.170.92.0/22 maxlen: 22
212.69.96.0/19 maxlen: 24
37.28.160.0/21 maxlen: 21
37.28.168.0/21 maxlen: 21
212.119.160.0/19 maxlen: 24
78.25.96.0/21 maxlen: 21
78.25.104.0/22 maxlen: 22
188.170.68.0/24 maxlen: 24
188.170.65.0/24 maxlen: 24
188.170.66.0/24 maxlen: 24
188.170.67.0/24 maxlen: 24
78.25.108.0/22 maxlen: 22
188.170.72.0/21 maxlen: 21
94.25.228.0/23 maxlen: 23
94.25.232.0/21 maxlen: 21
37.29.71.0/24 maxlen: 24
37.29.68.0/23 maxlen: 23
37.29.70.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.74.0/24 maxlen: 24
128.204.75.0/24 maxlen: 24
94.25.208.0/22 maxlen: 22
37.29.48.0/21 maxlen: 21
37.29.56.0/21 maxlen: 21
94.25.216.0/21 maxlen: 21
94.25.224.0/21 maxlen: 21
37.29.64.0/22 maxlen: 22
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
188.162.0.0/16 maxlen: 24
85.26.248.0/22 maxlen: 22
85.26.252.0/22 maxlen: 22
213.243.64.0/18 maxlen: 24
83.149.0.0/21 maxlen: 21
217.115.80.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f2:43:d4:94:33:6f:8c:cf:df:b3:0d:fb:05:f6:c3:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 15:04:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a2899673e01abc5c4161dbbc46e9b8ee0f1e380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9c:1d:07:9e:12:d0:f5:a1:b1:90:81:a6:73:
51:70:e8:44:b4:11:39:fb:52:1a:4c:c4:e2:6b:70:
ce:92:60:00:9a:a8:37:c4:bc:e1:fb:4a:4c:dc:57:
cf:34:f4:1e:58:e8:74:8c:44:9a:2d:9e:38:bf:88:
2a:94:7d:2b:a5:b3:1a:93:ee:64:d8:34:8a:ce:e9:
49:84:c2:d1:63:58:32:65:e6:c2:93:ba:11:8c:4a:
40:16:c7:e9:c8:8a:08:26:51:6d:73:be:18:3f:e7:
73:50:1d:34:f4:3f:d1:37:84:f0:e2:ce:d0:bc:38:
b9:3f:08:51:47:35:01:59:f2:37:6e:f4:22:b7:fd:
40:b3:e8:d0:21:1e:cc:cb:75:3a:c6:55:eb:e5:68:
51:f7:ca:ea:b9:c9:9a:a1:ef:d3:d9:fd:49:00:7d:
a0:8a:05:cc:4e:87:33:d6:d9:26:73:03:a8:e7:d7:
9c:90:f1:a3:bc:13:99:1d:0d:a0:a5:09:69:8d:09:
18:5f:bc:6a:a7:ca:cc:f4:65:a6:94:7f:20:34:33:
9b:02:21:4b:24:e4:1e:0a:cb:42:5b:e7:06:e8:86:
76:dd:04:87:32:dc:b0:3d:4c:32:3a:60:09:51:31:
ce:db:c9:7f:0a:cd:e8:18:78:b1:9c:9a:a5:88:d5:
2a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:28:99:67:3E:01:AB:C5:C4:16:1D:BB:C4:6E:9B:8E:E0:F1:E3:80
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/aiiZZz4Bq8XEFh27xG6bjuDx44A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.28.160.0/20
37.29.48.0-37.29.71.255
78.25.96.0/20
78.25.120.0/22
83.149.0.0/21
85.26.128.0/20
85.26.208.0/20
85.26.248.0/21
94.25.208.0/22
94.25.216.0-94.25.239.255
109.188.128.0/17
128.204.74.0/23
188.162.0.0/16
188.170.65.0-188.170.68.255
188.170.72.0-188.170.87.255
188.170.92.0/22
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
8f:71:9e:34:2a:97:e5:1e:4b:c3:e1:c8:9b:7f:4f:2b:37:4b:
f8:3d:4c:42:80:ae:50:34:6b:49:b2:cc:91:da:1d:5c:c7:c3:
11:98:3e:e3:9c:5d:9b:95:db:2f:0e:71:7b:76:6b:94:80:32:
79:a2:4e:3b:28:ce:05:53:f7:fa:71:e8:8e:ce:96:57:a0:70:
6c:6f:29:04:49:c6:8f:a2:b7:72:e5:79:24:40:c5:40:46:af:
13:75:49:19:19:7b:ef:d7:c1:e4:e1:18:ed:15:7b:c8:d2:11:
dd:cd:74:48:19:a5:7b:fc:6e:21:36:67:d7:bc:47:e4:14:7c:
fd:19:68:3a:bd:e1:3d:f4:ad:7a:68:f1:56:51:94:3f:52:f3:
04:cd:61:5e:e1:ee:af:32:98:b3:ce:e7:5d:a2:34:fc:b5:73:
19:2b:5d:19:e8:11:ab:9d:aa:a1:23:91:9b:ff:a6:94:39:6a:
64:51:43:8c:74:02:3b:15:3e:bc:e1:dd:2f:b2:32:28:65:a2:
c4:c8:60:92:1b:6a:c8:dd:be:2b:8a:61:07:05:1e:a7:45:f5:
99:b5:b5:30:96:53:51:a2:c3:3c:23:be:6f:17:f2:d1:f4:95:
e1:63:80:10:34:09:9b:dd:e0:22:47:00:43:29:c5:24:91:d8:
18:f8:72:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:25 2024 by rpki-client on console-fra.rpki-client.org