Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/chY8VBmSHiv1iga9ECnf6Y3KX-Q.roa
File: chY8VBmSHiv1iga9ECnf6Y3KX-Q.roa (raw, json)
Hash identifier: O6kl8fenLQhmTNg/sVXEQ5Nmlb0+4y4U7FxjFvoNtTw=
Subject key identifier: 72:16:3C:54:19:92:1E:2B:F5:8A:06:BD:10:29:DF:E9:8D:CA:5F:E4
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184E23BF4B6D01FBDD2F3AB7CE1E74B0438
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/chY8VBmSHiv1iga9ECnf6Y3KX-Q.roa
Signing time: Mon 05 Dec 2022 12:21:30 +0000
ROA not before: Mon 05 Dec 2022 12:21:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31205
IP address blocks: 109.188.0.0/16 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
188.170.247.0/24 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
178.176.240.0/22 maxlen: 22
78.25.92.0/23 maxlen: 23
78.25.94.0/23 maxlen: 23
178.176.244.0/22 maxlen: 22
91.193.212.0/22 maxlen: 24
37.29.86.0/23 maxlen: 23
188.170.240.0/22 maxlen: 22
31.173.240.0/23 maxlen: 23
195.5.128.0/19 maxlen: 24
31.173.242.0/23 maxlen: 23
128.204.64.0/18 maxlen: 24
31.173.244.0/22 maxlen: 22
95.137.0.0/17 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
83.149.50.0/24 maxlen: 24
83.149.48.0/24 maxlen: 24
83.149.51.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
83.149.49.0/24 maxlen: 24
178.176.48.0/24 maxlen: 24
83.169.192.0/18 maxlen: 24
109.74.112.0/20 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
46.232.202.0/23 maxlen: 23
46.232.200.0/23 maxlen: 23
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
212.44.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e2:3b:f4:b6:d0:1f:bd:d2:f3:ab:7c:e1:e7:4b:04:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 5 12:21:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=72163c5419921e2bf58a06bd1029dfe98dca5fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ed:67:e4:9f:c6:56:2a:1e:7f:1b:a0:e5:86:
98:ca:41:54:0c:54:5e:34:6c:ad:51:2e:c8:3b:90:
0e:44:ba:6c:35:7c:2c:0e:a1:c4:59:2c:d4:01:e3:
d9:0c:63:7c:b7:01:94:a2:58:c1:9e:ed:cf:62:3e:
48:b7:ac:64:f0:f6:9d:d4:86:86:ca:19:fd:8e:1e:
80:2c:bd:1c:10:85:99:fe:bb:2f:fd:73:8b:ea:ad:
ad:91:17:dc:c4:63:43:e7:c4:40:24:9a:b1:8d:80:
34:50:cf:2b:d4:cd:8a:9d:78:fc:b0:fe:bc:3c:b9:
71:ba:c1:0b:fe:7a:da:70:07:6a:5c:e0:3d:bc:0c:
bb:93:f8:ab:54:38:49:c9:75:3d:62:12:1d:58:a3:
bb:71:4d:99:c2:d1:17:36:aa:4b:a9:f1:38:d3:c3:
1e:ac:67:45:a5:22:74:17:56:a7:56:dc:f8:de:4a:
6b:fd:76:fb:74:b9:7a:62:7b:12:5d:aa:c1:34:fa:
5a:73:c3:af:4a:f7:9b:aa:34:45:31:1e:47:e8:2a:
f7:81:37:dd:c8:60:68:c6:04:ea:7f:b3:c5:b4:03:
c3:1d:dd:cd:d1:47:35:0f:f8:ac:32:7e:29:e1:60:
f2:36:ee:e0:27:95:da:6c:ce:93:c4:d1:50:ed:3e:
cc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:16:3C:54:19:92:1E:2B:F5:8A:06:BD:10:29:DF:E9:8D:CA:5F:E4
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/chY8VBmSHiv1iga9ECnf6Y3KX-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.240.0/21
37.29.86.0/23
46.232.200.0/22
78.25.92.0/22
83.149.48.0/22
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.48.0/24
178.176.240.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.240.0/22
188.170.247.0/24
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
a5:7c:00:3e:00:5a:6f:f1:3e:c0:ab:c8:21:d1:01:5c:fe:02:
65:e0:ee:fe:7a:5d:c2:dc:d2:1d:25:be:66:29:78:fd:b1:70:
bb:a7:73:1c:7d:45:48:00:c3:cb:0c:57:b8:4f:3d:84:23:fb:
01:48:e1:8b:61:51:20:74:c4:1d:dd:a0:88:6d:b3:39:3f:71:
29:4d:6c:20:a0:70:50:16:52:b9:7e:50:f5:9f:c3:5d:9d:45:
25:95:1e:8e:70:59:8e:0a:2b:7a:aa:cf:b7:7f:7e:4a:12:00:
22:65:00:3a:f6:a1:05:2a:9e:28:e9:9c:aa:31:22:18:d4:74:
72:34:31:b5:82:9b:6a:05:f5:93:8c:be:75:a6:34:bb:c4:a6:
b0:2a:81:e9:ae:c2:db:27:fc:a0:fa:02:c2:41:98:cc:f5:55:
af:a9:9d:72:a9:99:3f:ff:f2:77:96:c8:bc:55:36:12:88:80:
71:d2:ed:48:c4:a9:6d:0f:7e:c3:7b:a6:7d:d0:e8:f3:22:d1:
d5:1d:3e:15:51:25:f2:45:0f:f7:ca:ff:f8:20:24:98:d5:89:
a8:d2:fe:10:65:30:96:26:65:e3:2f:11:51:11:cf:86:e1:d1:
e4:c2:01:7f:4b:92:43:4f:0e:b2:a1:cd:8d:63:e8:ff:15:9c:
3e:0e:50:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:25 2024 by rpki-client on console-fra.rpki-client.org