Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/bguKxQGrdMy9f3vAgdOyWAvgBDI.roa
File: bguKxQGrdMy9f3vAgdOyWAvgBDI.roa (raw, json)
Hash identifier: uMgKNHq4VSSptX9IpJ08Iw57a0QYERF0/kiT3JAC4KY=
Subject key identifier: 6E:0B:8A:C5:01:AB:74:CC:BD:7F:7B:C0:81:D3:B2:58:0B:E0:04:32
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01847659030B339FF83403A1D119036FE0BD
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/bguKxQGrdMy9f3vAgdOyWAvgBDI.roa
Signing time: Mon 14 Nov 2022 13:34:15 +0000
ROA not before: Mon 14 Nov 2022 13:34:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31205
IP address blocks: 109.188.0.0/16 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
188.170.247.0/24 maxlen: 24
79.171.8.0/21 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
78.25.64.0/18 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
178.176.240.0/22 maxlen: 22
178.176.244.0/22 maxlen: 22
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
37.29.86.0/23 maxlen: 23
188.170.240.0/22 maxlen: 22
31.173.240.0/23 maxlen: 23
195.5.128.0/19 maxlen: 24
31.173.242.0/23 maxlen: 23
128.204.64.0/18 maxlen: 24
31.173.244.0/22 maxlen: 22
95.137.0.0/17 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
81.24.128.0/20 maxlen: 24
83.149.50.0/24 maxlen: 24
78.41.100.0/22 maxlen: 24
83.149.48.0/24 maxlen: 24
83.149.51.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
83.149.49.0/24 maxlen: 24
178.176.48.0/24 maxlen: 24
83.169.192.0/18 maxlen: 24
109.74.112.0/20 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
46.232.200.0/21 maxlen: 24
62.64.0.0/19 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
212.44.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:76:59:03:0b:33:9f:f8:34:03:a1:d1:19:03:6f:e0:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Nov 14 13:34:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e0b8ac501ab74ccbd7f7bc081d3b2580be00432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:04:06:eb:da:6e:70:24:aa:61:c9:89:a2:4e:
eb:2e:61:f0:2b:2d:50:48:01:50:6a:80:60:9d:aa:
7e:ab:76:07:b1:67:35:bf:7e:1e:f3:89:5f:00:e8:
1f:c3:57:18:f1:6f:cc:94:2e:ff:2f:eb:fa:9b:40:
f9:8a:d7:30:b6:43:b7:87:34:e3:05:10:08:6e:38:
8e:47:9e:71:f5:4c:fb:90:3b:38:17:31:0f:a1:8d:
61:1a:fc:34:cc:11:6c:83:a9:4b:4d:7b:54:7d:48:
0b:1b:6c:27:59:1c:43:33:cf:f6:97:91:67:4e:20:
d3:08:f4:9f:bd:66:37:37:19:ec:12:e0:12:ec:5e:
bf:8b:28:c9:f3:9d:64:d7:e0:45:9a:a6:04:b8:29:
56:d0:0a:70:5f:c9:69:39:7e:ae:07:68:98:0a:50:
ef:a3:af:fb:90:79:5a:76:bc:ca:70:13:c5:7a:7a:
db:24:2e:e9:70:f4:29:4e:50:bc:5b:0c:58:84:b4:
05:a8:e2:86:12:6e:9c:3e:e2:e7:43:57:ac:c1:08:
06:ed:07:76:7d:ca:d5:6d:d8:f0:f5:2f:28:02:07:
ed:ce:ff:22:a2:74:54:15:b1:17:0d:2f:52:75:82:
86:54:30:54:f5:a8:35:12:8b:1d:1e:05:30:c8:57:
c3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0B:8A:C5:01:AB:74:CC:BD:7F:7B:C0:81:D3:B2:58:0B:E0:04:32
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/bguKxQGrdMy9f3vAgdOyWAvgBDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.240.0/21
37.29.86.0/23
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.149.48.0/22
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.48.0/24
178.176.240.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.240.0/22
188.170.247.0/24
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
a7:70:1f:2f:58:75:07:07:54:8c:6d:fb:89:31:a7:72:3a:90:
cd:29:85:ad:3c:bb:7a:64:58:09:bc:1a:73:6d:5b:55:bf:02:
d0:3e:40:ab:69:a0:93:8d:be:63:fd:cf:f4:69:2f:3c:01:00:
6e:21:d3:7f:7d:9c:0f:29:05:40:a4:90:d4:0d:be:18:89:b5:
db:d9:1c:89:f5:d5:16:2e:1d:b8:74:9e:b7:1e:8b:2a:e6:e8:
71:0b:ef:68:19:a4:58:2f:e0:02:43:f5:db:c3:cf:e9:4d:99:
2e:3f:37:52:39:d2:be:63:4a:d3:ef:15:23:e9:02:cf:a8:74:
99:27:8f:f3:dc:e8:e7:4d:d9:6b:8f:39:8c:3d:5b:50:a0:84:
ef:83:45:c6:14:a6:3a:02:c5:59:06:df:4b:9c:6b:0f:65:a1:
8d:75:00:01:a2:7e:ab:e7:34:ad:a8:78:55:8d:2c:c8:32:73:
c1:e4:6d:e1:6a:0e:29:0a:1c:0b:2d:30:d2:7e:d0:de:e4:3e:
9f:e2:32:65:e0:14:aa:fb:c7:19:8e:7b:bd:ed:be:7e:fa:b4:
59:ce:1e:ae:9b:91:a5:03:c3:bd:85:b5:c6:83:8c:1c:66:67:
c4:e0:66:f1:3c:20:5e:5c:31:15:56:bc:38:32:fd:1a:e3:69:
ba:86:6d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:15 2025 by rpki-client