Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/efxq84dWmu_MzyKuYSkwPTR5giA.roa
File: efxq84dWmu_MzyKuYSkwPTR5giA.roa (raw, json)
Hash identifier: jA2KoF37ZKCTsQ0g4uYvTzbvVPh21yzT37sOTVrzwEw=
Subject key identifier: 79:FC:6A:F3:87:56:9A:EF:CC:CF:22:AE:61:29:30:3D:34:79:82:20
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018409D49B973A6D4F676DC8E8A117FD75AA
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/efxq84dWmu_MzyKuYSkwPTR5giA.roa
Signing time: Mon 24 Oct 2022 11:50:39 +0000
ROA not before: Mon 24 Oct 2022 11:50:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31133
IP address blocks: 109.188.0.0/16 maxlen: 24
46.29.192.0/21 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
193.201.228.0/22 maxlen: 24
178.178.111.0/24 maxlen: 24
178.178.110.0/24 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
31.173.174.0/24 maxlen: 24
31.173.178.0/24 maxlen: 24
31.173.177.0/24 maxlen: 24
31.173.175.0/24 maxlen: 24
31.173.181.0/24 maxlen: 24
31.173.182.0/24 maxlen: 24
31.173.186.0/24 maxlen: 24
31.173.185.0/24 maxlen: 24
93.153.128.0/17 maxlen: 24
31.173.180.0/24 maxlen: 24
31.173.184.0/24 maxlen: 24
31.173.183.0/24 maxlen: 24
94.25.128.0/17 maxlen: 24
31.173.190.0/24 maxlen: 24
86.109.192.0/19 maxlen: 24
31.173.189.0/24 maxlen: 24
31.173.188.0/24 maxlen: 24
31.173.187.0/24 maxlen: 24
31.173.191.0/24 maxlen: 24
212.69.96.0/19 maxlen: 24
37.29.0.0/17 maxlen: 24
37.28.160.0/19 maxlen: 24
78.25.64.0/18 maxlen: 24
31.173.130.0/23 maxlen: 23
31.173.129.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
31.173.128.0/24 maxlen: 24
31.173.138.0/24 maxlen: 24
31.173.137.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
31.173.136.0/24 maxlen: 24
31.173.139.0/24 maxlen: 24
31.173.142.0/24 maxlen: 24
31.173.141.0/24 maxlen: 24
31.173.140.0/24 maxlen: 24
31.173.150.0/24 maxlen: 24
80.247.176.0/20 maxlen: 24
31.173.149.0/24 maxlen: 24
31.173.152.0/24 maxlen: 24
31.173.148.0/24 maxlen: 24
31.173.147.0/24 maxlen: 24
31.173.151.0/24 maxlen: 24
31.173.154.0/24 maxlen: 24
31.173.158.0/24 maxlen: 24
31.173.153.0/24 maxlen: 24
91.193.212.0/22 maxlen: 24
31.173.157.0/24 maxlen: 24
31.173.156.0/24 maxlen: 24
31.173.159.0/24 maxlen: 24
31.173.155.0/24 maxlen: 24
31.173.166.0/24 maxlen: 24
31.173.165.0/24 maxlen: 24
31.173.164.0/24 maxlen: 24
31.173.160.0/22 maxlen: 22
31.173.170.0/24 maxlen: 24
31.173.169.0/24 maxlen: 24
31.173.168.0/24 maxlen: 24
31.173.167.0/24 maxlen: 24
31.173.171.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 24
83.169.192.0/18 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 24
188.162.0.0/16 maxlen: 24
46.232.200.0/21 maxlen: 24
62.64.0.0/19 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
46.229.128.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:09:d4:9b:97:3a:6d:4f:67:6d:c8:e8:a1:17:fd:75:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 24 11:50:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79fc6af387569aefcccf22ae6129303d34798220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:02:61:f4:7b:d3:a8:b2:96:7d:10:b3:eb:9a:
7a:48:9f:e0:ff:3e:14:fc:d4:4f:29:b7:bd:99:c7:
fb:53:3c:43:e0:33:2d:d5:75:f8:52:c9:10:90:e6:
93:6c:ef:91:ad:0a:37:d5:88:a2:c3:8d:1c:c1:70:
05:10:33:82:e0:ad:0b:49:20:af:77:f8:84:e1:b8:
52:19:31:d7:e2:b1:c8:c3:9f:8e:db:0d:48:4d:4e:
dd:a5:09:36:50:35:66:64:14:78:76:4d:dd:62:14:
a0:f8:66:3e:93:1c:17:bc:28:d9:13:db:ea:c3:b0:
28:1f:75:dd:22:58:39:a7:11:19:5e:c9:8a:89:91:
63:55:2f:97:aa:64:07:a3:67:a8:88:d5:b7:f9:f1:
9b:64:33:e3:23:03:4b:06:70:07:21:f6:b5:a6:ef:
b8:3e:64:97:73:a6:32:5e:f5:14:7d:35:66:e0:51:
ed:ec:60:97:d0:e5:77:d9:11:3e:e9:13:32:a7:2a:
08:41:f3:76:58:4d:e4:86:b1:b2:e3:11:30:27:7e:
45:91:97:f8:19:db:55:a9:06:48:d3:6b:04:5e:5f:
d9:e6:93:8b:d7:0b:c7:bf:da:a4:4e:02:52:34:c7:
bd:c1:17:51:8b:74:8f:e7:64:45:3b:bd:5d:5c:4b:
c0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:FC:6A:F3:87:56:9A:EF:CC:CF:22:AE:61:29:30:3D:34:79:82:20
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/efxq84dWmu_MzyKuYSkwPTR5giA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.128.0/22
31.173.136.0-31.173.142.255
31.173.147.0-31.173.171.255
31.173.174.0/23
31.173.177.0-31.173.178.255
31.173.180.0-31.173.191.255
37.28.160.0/19
37.29.0.0/17
46.29.192.0/21
46.229.128.0/20
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.178.110.0/23
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
6d:2f:bf:ca:de:dd:40:5c:37:d5:c7:d7:5c:6a:4a:99:52:22:
e5:f5:8a:ff:19:ef:a4:f4:e0:3e:10:de:84:8d:e2:f4:13:75:
41:22:b1:a7:cd:4d:0d:a3:c8:44:58:a9:4d:ff:b8:6d:61:00:
77:13:06:7d:af:85:bb:10:ab:43:54:b3:0c:52:a0:78:c2:e7:
00:35:a1:99:44:bc:9e:2e:7a:4f:a9:5e:a2:09:e1:e2:2b:56:
8d:ce:2d:7a:5b:b1:23:95:dc:6f:57:ff:91:09:d3:22:d8:8c:
37:a0:4c:a2:c3:5d:ba:48:ca:a1:91:e0:49:7e:eb:d1:e8:9a:
34:c3:2f:e0:be:a8:6a:0e:e8:2d:9a:a3:74:98:00:bd:23:f6:
98:67:95:a2:29:f1:c3:6d:7b:49:9c:f3:94:c8:62:5f:51:c1:
91:3e:ce:6e:9c:94:45:75:7b:75:c2:d3:23:5c:9b:67:d2:0e:
32:a6:4c:46:4a:e2:9b:62:d0:93:eb:44:11:f4:b0:6a:38:55:
12:56:f4:3f:b7:17:a7:97:ed:ec:be:f9:63:57:a1:4b:92:9d:
6d:84:a3:ff:74:85:6f:b1:c2:43:56:a8:d0:f7:fb:33:49:52:
7a:a1:50:ed:af:6b:b9:36:58:c4:82:3b:b1:12:d3:50:aa:94:
37:2e:00:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:48:39 2025 by rpki-client