Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/coQGTgaS_g-QcYSTVtKLJxPgZYQ.roa
File: coQGTgaS_g-QcYSTVtKLJxPgZYQ.roa (raw, json)
Hash identifier: /I55xSskXnPPt8irbCCszj8NqCSv1dNr70Qd9+LrFXM=
Subject key identifier: 72:84:06:4E:06:92:FE:0F:90:71:84:93:56:D2:8B:27:13:E0:65:84
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184E2AF4E36AE91DD07565BD00862D92249
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/coQGTgaS_g-QcYSTVtKLJxPgZYQ.roa
Signing time: Mon 05 Dec 2022 14:27:30 +0000
ROA not before: Mon 05 Dec 2022 14:27:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31088
IP address blocks: 109.188.0.0/16 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
91.193.212.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e2:af:4e:36:ae:91:dd:07:56:5b:d0:08:62:d9:22:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 5 14:27:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7284064e0692fe0f9071849356d28b2713e06584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:99:84:89:79:52:8d:fe:58:80:a7:29:74:06:
03:b2:d4:b4:e0:1b:e1:95:b3:de:2c:2c:4a:62:46:
87:46:96:a3:a8:95:56:89:02:a0:92:26:86:9b:ea:
ef:9f:d6:44:e8:cf:5a:5c:9e:f9:d7:46:81:e7:3e:
06:53:62:eb:a4:17:b0:dc:81:00:b5:cd:ec:76:49:
18:e0:31:19:03:3d:b3:15:80:fc:0a:06:cd:61:65:
d3:27:51:5d:a4:b3:d1:50:ef:27:73:94:a2:a8:2b:
de:aa:16:06:49:cf:be:ce:3f:6b:69:df:58:b7:f9:
05:f0:a4:be:27:b9:53:41:d3:a1:ad:30:82:1d:56:
52:52:ac:28:e4:91:0f:a4:e6:b3:13:e3:48:66:26:
22:a3:29:e4:bc:a3:ea:75:e0:93:45:5d:80:b3:26:
84:0e:60:b7:6b:e6:b9:9f:65:3f:9a:89:44:3a:25:
31:d5:21:36:26:4c:b5:9c:4e:ec:c1:73:66:b2:73:
bd:ff:e2:91:16:87:b6:f2:b9:31:3c:ec:09:b1:4a:
b4:2f:34:64:e4:23:db:7d:db:ab:95:d6:85:67:85:
c0:ff:fc:86:c9:cb:f2:8b:e7:ec:1f:4b:d3:39:12:
9f:59:24:0f:b1:87:02:a3:97:a2:71:5f:9c:5c:a2:
7c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:84:06:4E:06:92:FE:0F:90:71:84:93:56:D2:8B:27:13:E0:65:84
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/coQGTgaS_g-QcYSTVtKLJxPgZYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
9f:a4:8a:da:f4:4e:cf:38:64:05:ae:44:cb:b6:5b:9b:d0:97:
7e:9b:52:4f:50:7d:a2:dd:83:a8:02:26:9c:db:f1:03:7e:a8:
84:85:07:86:b8:82:03:ef:63:94:2a:b3:59:c0:ef:06:1b:88:
dd:7b:6a:f1:a4:78:15:bd:bc:06:3e:b8:f0:61:be:9c:bf:64:
c7:a6:4b:9e:ba:58:fd:30:26:09:6c:8e:a9:03:d4:8c:b8:71:
3e:dc:d0:cc:6b:5d:e2:03:5d:6c:ba:4a:a1:34:3c:15:f9:c0:
b3:51:59:78:e2:88:f5:71:39:3e:2a:d3:46:80:40:7f:1e:13:
f8:05:e2:6b:bf:24:65:0f:05:c3:f3:a7:f1:f7:5c:12:58:90:
38:42:d3:6e:ae:a2:20:5e:4a:fc:07:a0:9b:d4:e1:10:5b:85:
53:f0:16:d3:d2:80:8b:15:7c:38:78:6c:6c:7f:f0:cc:e6:2a:
ce:8e:b5:93:42:49:ef:0d:00:24:74:0d:93:e6:ca:30:3b:68:
7f:4b:0b:51:98:b9:cb:ca:c6:bd:16:a0:07:d4:1d:4b:1e:0a:
cb:97:7d:6a:9a:9e:30:dd:e8:88:a7:53:e2:aa:ea:60:56:18:
d6:9b:f3:a7:b3:f8:e5:44:46:f9:64:ff:23:e5:7b:8f:3c:97:
e9:a8:32:40
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgISAYTir042rpHdB1Zb0Ahi2SJJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMjA1MTQyNzMwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Mjg0MDY0ZTA2OTJmZTBmOTA3MTg0OTM1NmQyOGIyNzEzZTA2NTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpmEiXlSjf5YgKcpdAYDstS04Bvh
lbPeLCxKYkaHRpajqJVWiQKgkiaGm+rvn9ZE6M9aXJ7510aB5z4GU2LrpBew3IEA
tc3sdkkY4DEZAz2zFYD8CgbNYWXTJ1FdpLPRUO8nc5SiqCveqhYGSc++zj9rad9Y
t/kF8KS+J7lTQdOhrTCCHVZSUqwo5JEPpOazE+NIZiYioynkvKPqdeCTRV2AsyaE
DmC3a+a5n2U/molEOiUx1SE2Jky1nE7swXNmsnO9/+KRFoe28rkxPOwJsUq0LzRk
5CPbfdurldaFZ4XA//yGycvyi+fsH0vTORKfWSQPsYcCo5eicV+cXKJ8ywIDAQAB
o4ICrjCCAqowHQYDVR0OBBYEFHKEBk4Gkv4PkHGEk1bSiycT4GWEMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvY29RR1RnYVNfZy1RY1lTVFZ0S0xKeFBnWllRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHDBggrBgEFBQcBBwEB/wSBszCBsDCBrQQCAAEwgaYDBAVW
bcADBAJbwdQDBAddmYADBAdeGYADBAdfiQADBARtSnADBAZtfEADAwBtvAMEBoDM
QAMEA7IXkAMEArkDIAMEArnSjAMEA7xeqAMDALyiAwQCwcnkAwQFwwWAAwQFwxBg
AwQBw050AwQAw5VvAwQFw+ZAAwQF1A6gAwQF1CxAAwQF1EVgAwQF1HegAwQF1Zqg
AwQF1aggAwQG1fNAAwQE2XNQMA0GCSqGSIb3DQEBCwUAA4IBAQCfpIra9E7POGQF
rkTLtlub0Jd+m1JPUH2i3YOoAiac2/EDfqiEhQeGuIID72OUKrNZwO8GG4jde2rx
pHgVvbwGPrjwYb6cv2THpkueulj9MCYJbI6pA9SMuHE+3NDMa13iA11sukqhNDwV
+cCzUVl44oj1cTk+KtNGgEB/HhP4BeJrvyRlDwXD86fx91wSWJA4QtNurqIgXkr8
B6Cb1OEQW4VT8BbT0oCLFXw4eGxsf/DM5irOjrWTQknvDQAkdA2T5sowO2h/SwtR
mLnLysa9FqAH1B1LHgrLl31qmp4w3eiIp1PiqupgVhjWm/Ons/jlREb5ZP8j5XuP
PJfpqDJA
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:26 2024 by rpki-client on console-fra.rpki-client.org