Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/dxJAtxl_xyNaHv1fuoeIpd3rYKY.roa
File: dxJAtxl_xyNaHv1fuoeIpd3rYKY.roa (raw, json)
Hash identifier: nTWS515XJxwkc5w+874CTDBVVSo0rWbBacJnWaIdEIc=
Subject key identifier: 77:12:40:B7:19:7F:C7:23:5A:1E:FD:5F:BA:87:88:A5:DD:EB:60:A6
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0185E411DC0965EB4F85CFE0319657124537
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/dxJAtxl_xyNaHv1fuoeIpd3rYKY.roa
Signing time: Tue 24 Jan 2023 13:57:33 +0000
ROA not before: Tue 24 Jan 2023 13:57:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29648
IP address blocks: 31.173.119.0/24 maxlen: 24
77.233.160.0/19 maxlen: 19
77.233.161.0/24 maxlen: 24
77.233.164.0/24 maxlen: 24
77.233.160.0/24 maxlen: 24
77.233.162.0/24 maxlen: 24
77.233.166.0/24 maxlen: 24
77.233.167.0/24 maxlen: 24
77.233.170.0/24 maxlen: 24
31.173.104.0/24 maxlen: 24
31.173.105.0/24 maxlen: 24
31.173.112.0/24 maxlen: 24
31.173.108.0/24 maxlen: 24
31.173.109.0/24 maxlen: 24
31.173.110.0/24 maxlen: 24
31.173.106.0/24 maxlen: 24
31.173.111.0/24 maxlen: 24
31.173.107.0/24 maxlen: 24
31.173.116.0/24 maxlen: 24
31.173.113.0/24 maxlen: 24
31.173.117.0/24 maxlen: 24
31.173.114.0/24 maxlen: 24
31.173.118.0/24 maxlen: 24
31.173.115.0/24 maxlen: 24
77.233.173.0/24 maxlen: 24
77.233.178.0/24 maxlen: 24
77.233.185.0/24 maxlen: 24
77.233.181.0/24 maxlen: 24
77.233.180.0/24 maxlen: 24
77.233.186.0/24 maxlen: 24
77.233.182.0/24 maxlen: 24
77.233.188.0/24 maxlen: 24
77.233.191.0/24 maxlen: 24
77.233.190.0/24 maxlen: 24
188.170.98.0/24 maxlen: 24
86.109.192.0/19 maxlen: 19
86.109.192.0/20 maxlen: 20
188.170.96.0/24 maxlen: 24
188.170.97.0/24 maxlen: 24
188.170.102.0/24 maxlen: 24
86.109.193.0/24 maxlen: 24
188.170.103.0/24 maxlen: 24
188.170.99.0/24 maxlen: 24
188.170.100.0/24 maxlen: 24
188.170.104.0/24 maxlen: 24
86.109.195.0/24 maxlen: 24
188.170.101.0/24 maxlen: 24
188.170.105.0/24 maxlen: 24
188.170.110.0/24 maxlen: 24
188.170.106.0/24 maxlen: 24
188.170.111.0/24 maxlen: 24
188.170.107.0/24 maxlen: 24
86.109.200.0/23 maxlen: 23
188.170.108.0/24 maxlen: 24
188.170.109.0/24 maxlen: 24
188.170.112.0/24 maxlen: 24
188.170.114.0/24 maxlen: 24
86.109.213.0/24 maxlen: 24
188.170.115.0/24 maxlen: 24
188.170.116.0/24 maxlen: 24
86.109.212.0/24 maxlen: 24
86.109.208.0/24 maxlen: 24
188.170.118.0/24 maxlen: 24
188.170.117.0/24 maxlen: 24
188.170.113.0/24 maxlen: 24
86.109.210.0/24 maxlen: 24
188.170.119.0/24 maxlen: 24
188.170.123.0/24 maxlen: 24
86.109.216.0/24 maxlen: 24
188.170.122.0/24 maxlen: 24
86.109.215.0/24 maxlen: 24
86.109.218.0/23 maxlen: 23
188.170.125.0/24 maxlen: 24
188.170.121.0/24 maxlen: 24
188.170.120.0/24 maxlen: 24
86.109.214.0/24 maxlen: 24
188.170.124.0/24 maxlen: 24
188.170.127.0/24 maxlen: 24
86.109.220.0/24 maxlen: 24
188.170.126.0/24 maxlen: 24
86.109.223.0/24 maxlen: 24
86.109.222.0/24 maxlen: 24
78.109.120.0/24 maxlen: 24
78.109.121.0/24 maxlen: 24
178.176.98.0/24 maxlen: 24
195.149.111.0/24 maxlen: 24
178.176.96.0/24 maxlen: 24
178.176.97.0/24 maxlen: 24
178.176.102.0/24 maxlen: 24
178.176.103.0/24 maxlen: 24
178.176.99.0/24 maxlen: 24
178.176.100.0/24 maxlen: 24
178.176.101.0/24 maxlen: 24
178.176.118.0/24 maxlen: 24
178.176.114.0/24 maxlen: 24
178.176.115.0/24 maxlen: 24
178.176.116.0/24 maxlen: 24
178.176.117.0/24 maxlen: 24
178.176.122.0/24 maxlen: 24
178.176.123.0/24 maxlen: 24
178.176.119.0/24 maxlen: 24
178.176.124.0/24 maxlen: 24
178.176.120.0/24 maxlen: 24
178.176.125.0/24 maxlen: 24
178.176.121.0/24 maxlen: 24
178.176.126.0/24 maxlen: 24
178.176.127.0/24 maxlen: 24
83.169.217.0/24 maxlen: 24
83.169.218.0/24 maxlen: 24
83.169.219.0/24 maxlen: 24
83.169.220.0/24 maxlen: 24
83.169.221.0/24 maxlen: 24
83.169.222.0/24 maxlen: 24
83.169.223.0/24 maxlen: 24
188.94.168.0/24 maxlen: 24
188.94.172.0/24 maxlen: 24
188.94.169.0/24 maxlen: 24
188.94.170.0/24 maxlen: 24
188.94.171.0/24 maxlen: 24
188.94.173.0/24 maxlen: 24
188.94.174.0/24 maxlen: 24
188.94.175.0/24 maxlen: 24
217.115.80.0/20 maxlen: 20
217.115.81.0/24 maxlen: 24
217.115.80.0/24 maxlen: 24
217.115.91.0/24 maxlen: 24
2a03:d005::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:11:dc:09:65:eb:4f:85:cf:e0:31:96:57:12:45:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 24 13:57:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=771240b7197fc7235a1efd5fba8788a5ddeb60a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c2:16:d1:13:b3:72:94:4f:98:32:b4:96:70:
12:e0:56:37:d6:9c:f6:4d:83:17:63:de:b1:59:9d:
64:8b:4d:67:98:71:bc:55:c0:24:d2:9f:ac:1b:d1:
4a:cb:48:68:06:ec:98:77:3c:54:5c:a5:75:5c:0f:
bd:ae:6e:57:9b:d8:c1:d2:53:c1:51:a7:43:2d:e8:
2b:41:a6:47:6e:9d:06:c2:50:7e:d4:49:bf:50:a8:
66:c0:20:ff:4b:f7:7b:59:8e:9e:d4:b2:40:4b:73:
e8:21:8c:24:f5:86:95:5a:26:54:3a:8e:29:f3:b9:
e1:14:34:6d:9b:4c:5a:dd:66:44:af:71:68:fc:94:
b1:fb:b2:89:75:e1:15:9f:5b:cb:cc:09:12:b6:65:
61:4b:79:3a:b2:80:2d:85:7b:14:9a:37:8b:0c:4a:
38:d1:d4:ca:07:a5:ce:2d:a1:5c:4e:7b:9e:15:bd:
e5:49:b1:55:78:a8:77:0a:cb:25:af:db:cb:e4:5a:
fd:58:dd:39:0f:e9:6c:d8:65:82:b3:25:23:ce:d1:
40:a0:6d:48:a4:52:f1:f8:95:16:e5:2f:79:76:34:
57:20:c3:63:54:8f:d9:41:6c:a6:2a:05:e6:29:9b:
79:e5:59:e0:52:1f:02:63:dc:b1:ae:2a:2a:73:bd:
a6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:12:40:B7:19:7F:C7:23:5A:1E:FD:5F:BA:87:88:A5:DD:EB:60:A6
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/dxJAtxl_xyNaHv1fuoeIpd3rYKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.104.0-31.173.119.255
77.233.160.0/19
78.109.120.0/23
83.169.217.0-83.169.223.255
86.109.192.0/19
178.176.96.0/21
178.176.114.0-178.176.127.255
188.94.168.0/21
188.170.96.0/19
195.149.111.0/24
217.115.80.0/20
IPv6:
2a03:d005::/40
Signature Algorithm: sha256WithRSAEncryption
1b:e3:77:a5:92:5d:d5:5f:78:99:7b:a0:a9:71:d8:bf:4b:96:
8e:ad:ea:6f:6d:60:a2:12:46:9a:42:85:cd:78:b8:aa:c8:8a:
bf:93:7a:50:6a:eb:61:8a:5e:8f:69:13:af:bb:64:e3:83:a3:
87:51:99:ac:ed:b2:d8:83:d9:83:e7:cc:8b:51:8c:12:e2:38:
66:05:1b:34:f6:ee:50:95:32:04:08:16:81:76:6b:5f:ae:16:
2b:d2:0d:71:d9:9a:ba:9e:55:0f:e5:17:2e:21:95:63:4c:a2:
bb:c5:5a:04:ce:bb:c8:bb:16:8b:37:69:4a:a6:19:a9:2f:0e:
5d:76:2c:58:d7:d0:47:bd:29:cf:d0:25:0a:34:8d:84:bb:97:
c5:0e:6d:1f:c3:16:17:95:1f:5c:f6:50:3e:e4:64:61:e0:40:
a2:5a:76:29:af:38:1f:f5:85:0b:33:b8:44:48:62:0c:9d:ae:
ec:4d:d3:35:27:96:e2:dc:0d:eb:be:0a:58:86:8b:32:3c:64:
76:66:06:60:80:9b:b2:70:bb:1e:bb:9c:1d:21:00:04:d0:11:
f4:dd:56:d2:39:62:52:74:82:f6:96:c5:67:00:5b:ab:e4:ed:
04:7d:cd:1c:6a:11:4b:3d:7d:02:90:65:cf:35:ef:55:37:67:
76:4f:a5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:06 2025 by rpki-client