Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/djCppBx6VRmdfJ9bjxO4Q2-fQSA.roa
File: djCppBx6VRmdfJ9bjxO4Q2-fQSA.roa (raw, json)
Hash identifier: gboF4V/SxWuRd3uCRtzrRscw3tML+Iofx2MFtaFMvSE=
Subject key identifier: 76:30:A9:A4:1C:7A:55:19:9D:7C:9F:5B:8F:13:B8:43:6F:9F:41:20
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184763353933562BA85507ACDA0DB974191
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/djCppBx6VRmdfJ9bjxO4Q2-fQSA.roa
Signing time: Mon 14 Nov 2022 12:53:05 +0000
ROA not before: Mon 14 Nov 2022 12:53:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31195
IP address blocks: 109.188.0.0/16 maxlen: 24
46.29.192.0/21 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
178.178.64.0/24 maxlen: 24
178.178.71.0/24 maxlen: 24
178.178.66.0/24 maxlen: 24
178.178.65.0/24 maxlen: 24
178.178.68.0/24 maxlen: 24
178.178.67.0/24 maxlen: 24
178.178.70.0/24 maxlen: 24
178.178.73.0/24 maxlen: 24
185.3.32.0/22 maxlen: 24
178.178.72.0/24 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
31.173.225.0/24 maxlen: 24
31.173.226.0/24 maxlen: 24
78.25.64.0/18 maxlen: 24
185.210.140.0/22 maxlen: 24
31.173.132.0/23 maxlen: 23
212.119.160.0/19 maxlen: 24
31.173.134.0/23 maxlen: 23
31.173.135.0/24 maxlen: 24
178.176.233.0/24 maxlen: 24
178.176.235.0/24 maxlen: 24
178.176.234.0/24 maxlen: 24
31.173.143.0/24 maxlen: 24
80.247.176.0/20 maxlen: 24
37.28.188.0/22 maxlen: 22
37.28.191.0/24 maxlen: 24
37.28.190.0/24 maxlen: 24
91.193.212.0/22 maxlen: 24
37.29.89.0/24 maxlen: 24
37.29.91.0/24 maxlen: 24
37.29.88.0/22 maxlen: 22
37.29.95.0/24 maxlen: 24
37.29.92.0/22 maxlen: 22
37.29.94.0/24 maxlen: 24
188.170.233.0/24 maxlen: 24
188.170.231.0/24 maxlen: 24
188.170.228.0/23 maxlen: 23
188.170.232.0/24 maxlen: 24
188.170.230.0/24 maxlen: 24
188.170.236.0/24 maxlen: 24
188.170.234.0/24 maxlen: 24
188.170.239.0/24 maxlen: 24
188.170.237.0/24 maxlen: 24
188.170.235.0/24 maxlen: 24
31.173.231.0/24 maxlen: 24
31.173.228.0/23 maxlen: 23
31.173.228.0/24 maxlen: 24
31.173.230.0/24 maxlen: 24
31.173.232.0/23 maxlen: 23
31.173.229.0/24 maxlen: 24
31.173.239.0/24 maxlen: 24
31.173.236.0/23 maxlen: 23
31.173.238.0/24 maxlen: 24
31.173.235.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
37.29.43.0/24 maxlen: 24
95.137.0.0/17 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 24
83.149.52.0/22 maxlen: 22
83.169.192.0/18 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
46.232.200.0/21 maxlen: 24
62.64.0.0/19 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
46.229.128.0/20 maxlen: 24
83.229.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:76:33:53:93:35:62:ba:85:50:7a:cd:a0:db:97:41:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Nov 14 12:53:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7630a9a41c7a55199d7c9f5b8f13b8436f9f4120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d9:c1:94:19:41:6d:ca:ee:62:b9:ba:9e:42:
64:11:4b:95:e3:90:20:af:8e:5d:44:2e:02:1f:54:
8e:fd:66:ef:ff:10:f9:bd:ca:b2:05:dd:f2:b8:4c:
7d:a0:3c:d3:0f:20:49:73:4a:78:b8:2a:b6:e8:fb:
44:36:7f:49:0c:08:d9:f8:d9:93:03:19:56:9b:67:
9e:e7:92:dd:db:06:c3:73:c2:76:20:ca:fb:9c:2f:
5e:16:72:dc:3e:8f:c4:50:ca:bb:e6:32:bd:59:dd:
92:76:84:3b:25:c8:07:e0:e0:66:d9:b7:d1:2d:74:
e7:f0:7f:2e:07:f1:2e:48:83:28:8f:f7:5d:cf:06:
14:ed:75:53:3b:37:1b:ab:db:e5:02:2c:a9:3e:27:
b8:ac:59:1e:b8:b6:bd:bd:cf:a7:8a:65:54:5f:3c:
f1:39:c0:1d:f2:bf:6a:ce:72:0f:81:8e:bd:6a:bb:
a8:39:14:02:b1:b7:d0:c8:4a:d1:02:ef:50:da:4c:
35:be:19:70:8c:f2:6a:41:67:cb:f5:80:84:e7:b8:
84:e7:89:91:d2:67:9e:fc:7a:19:8c:c7:78:20:66:
72:80:0c:5c:5b:0c:10:d6:62:85:e1:06:ef:c5:55:
25:fb:8e:80:ee:6d:f8:d2:7e:a6:45:0e:44:2b:0f:
29:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:30:A9:A4:1C:7A:55:19:9D:7C:9F:5B:8F:13:B8:43:6F:9F:41:20
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/djCppBx6VRmdfJ9bjxO4Q2-fQSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.132.0/22
31.173.143.0/24
31.173.225.0-31.173.226.255
31.173.228.0-31.173.233.255
31.173.235.0-31.173.239.255
37.28.188.0/22
37.29.43.0/24
37.29.88.0/21
46.29.192.0/21
46.229.128.0/20
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.149.52.0/22
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.233.0-178.176.235.255
178.178.64.0-178.178.68.255
178.178.70.0-178.178.73.255
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.228.0-188.170.237.255
188.170.239.0/24
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
76:32:50:25:bd:87:6b:85:88:9b:9b:8d:22:54:c6:87:9a:63:
f8:6c:46:fd:03:e7:da:28:4d:3c:1e:fc:fe:1a:6a:fb:2d:31:
6b:77:e4:26:e9:8c:d3:4d:01:e9:fe:37:8e:49:4e:30:70:6c:
9f:a9:59:0e:1d:0b:92:6c:9f:81:cf:6a:eb:a5:b8:9e:de:8b:
e4:6d:49:76:a9:7b:30:62:18:92:7a:e9:c3:2a:5c:a2:05:ec:
93:bb:10:a7:b6:be:82:8e:bb:24:97:23:c6:53:b2:2a:03:e5:
9d:d8:a0:05:fd:f5:1b:79:14:94:cb:ab:0e:ed:3f:bf:de:11:
4b:f9:c5:8e:da:50:a9:82:34:2c:15:8f:5c:c9:34:53:d1:17:
f1:92:26:5e:80:44:32:38:2e:f8:8e:55:d0:11:02:95:36:0c:
d9:cd:05:f6:10:ed:88:bb:d9:43:1b:45:ef:cf:c3:e1:1e:b8:
9a:53:f1:86:11:96:07:90:b4:9d:a5:0e:0b:97:56:da:32:0b:
b0:e8:c2:ae:67:a4:b4:01:29:5f:be:e3:4c:10:0a:cb:35:b1:
2b:6f:94:12:d6:c6:cd:91:42:16:06:7c:6b:e7:24:ae:f4:e9:
54:26:33:65:64:12:a5:30:52:d9:03:1a:22:05:38:f6:2b:27:
8f:90:25:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:44:27 2025 by rpki-client