Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/f2gVROzepo2CMJ8QTZIeQ0hd0UM.roa
File: f2gVROzepo2CMJ8QTZIeQ0hd0UM.roa (raw, json)
Hash identifier: q9fiaoQH71w/EzeVtVCphr1WId+Spf1qn+gcIWBhXqM=
Subject key identifier: 7F:68:15:44:EC:DE:A6:8D:82:30:9F:10:4D:92:1E:43:48:5D:D1:43
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01840EC047F8BDF5C9A9AF42EB4D8FEB49B5
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/f2gVROzepo2CMJ8QTZIeQ0hd0UM.roa
Signing time: Tue 25 Oct 2022 10:46:32 +0000
ROA not before: Tue 25 Oct 2022 10:46:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31195
IP address blocks: 109.188.0.0/16 maxlen: 24
46.29.192.0/21 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
37.29.0.0/17 maxlen: 24
31.173.225.0/24 maxlen: 24
31.173.226.0/24 maxlen: 24
37.28.160.0/19 maxlen: 24
78.25.64.0/18 maxlen: 24
185.210.140.0/22 maxlen: 24
31.173.132.0/23 maxlen: 23
31.173.134.0/23 maxlen: 23
31.173.135.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
31.173.143.0/24 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
31.173.230.0/24 maxlen: 24
31.173.231.0/24 maxlen: 24
31.173.228.0/23 maxlen: 23
31.173.232.0/23 maxlen: 23
31.173.228.0/24 maxlen: 24
31.173.229.0/24 maxlen: 24
31.173.238.0/24 maxlen: 24
31.173.235.0/24 maxlen: 24
31.173.239.0/24 maxlen: 24
31.173.236.0/23 maxlen: 23
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 24
83.169.192.0/18 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
46.232.200.0/21 maxlen: 24
62.64.0.0/19 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
46.229.128.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0e:c0:47:f8:bd:f5:c9:a9:af:42:eb:4d:8f:eb:49:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 25 10:46:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f681544ecdea68d82309f104d921e43485dd143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1f:af:fe:9a:1f:2a:27:24:41:35:db:12:8c:
4b:e3:b8:84:fb:83:62:2a:6d:03:0d:3a:3b:bf:1a:
96:ba:12:b3:f3:6e:80:c6:e0:c3:c1:a5:89:ff:25:
65:90:6e:34:7d:44:9e:02:c2:37:ec:d8:b7:3c:8b:
44:e6:96:b0:14:8a:a1:1e:51:90:ac:08:03:37:0b:
8f:aa:65:d4:53:91:4a:7e:4b:71:d4:a6:d2:0c:4f:
4c:15:f1:67:94:f9:12:13:3b:02:b3:33:7b:6e:ba:
28:84:46:e0:d1:83:48:08:96:15:9f:3e:9b:8a:50:
dd:44:3b:c3:ad:c7:03:d1:66:ce:a6:8b:1b:09:ba:
9b:7a:55:f2:82:2c:6a:4a:b0:81:ca:cd:ff:84:4e:
9d:4e:fe:e5:3c:d9:d8:40:bb:53:70:8a:6c:16:cc:
ab:7c:5d:66:9d:cc:dd:32:cd:66:8b:b2:b2:22:57:
a9:22:36:9b:64:0f:07:06:a3:bd:a4:6d:55:d2:26:
51:df:c1:78:3a:49:02:af:1b:64:7e:60:7f:89:69:
f9:0c:83:3f:99:f0:c6:a4:57:0a:ee:ab:15:af:eb:
c5:a8:49:1b:20:28:dc:cf:6f:12:ac:4b:ad:6a:14:
67:1f:5d:bd:fc:6c:4d:c8:97:52:4e:61:c3:50:86:
97:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:68:15:44:EC:DE:A6:8D:82:30:9F:10:4D:92:1E:43:48:5D:D1:43
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/f2gVROzepo2CMJ8QTZIeQ0hd0UM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.132.0/22
31.173.143.0/24
31.173.225.0-31.173.226.255
31.173.228.0-31.173.233.255
31.173.235.0-31.173.239.255
37.28.160.0/19
37.29.0.0/17
46.29.192.0/21
46.229.128.0/20
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
02:13:bd:be:65:5f:55:12:ca:23:3c:4c:45:f5:db:63:6d:4d:
33:c4:61:9f:ab:e6:50:32:50:8a:8b:94:27:2d:9b:c5:13:af:
7e:9e:8e:49:a9:d5:31:f6:25:26:3a:1b:86:f7:03:3b:b6:46:
e2:71:74:c8:26:82:b9:83:db:ea:23:51:a3:88:a5:6a:57:59:
bf:55:dd:3f:2a:8b:30:bc:31:84:8f:ad:f0:06:29:8d:0a:44:
f3:c2:a8:f5:d9:87:f7:c5:9f:02:2b:f1:d3:c0:d8:dd:0d:84:
3a:b8:41:0f:b1:c2:fe:d1:5a:e5:cb:7f:53:1f:02:5d:db:06:
f9:e5:ec:18:38:d7:07:b9:f7:4a:0e:89:2a:6b:fd:4e:be:36:
59:28:73:9c:d8:b4:8c:7f:77:ee:2e:5f:f2:58:58:b5:e7:bd:
3a:61:3f:04:77:46:9e:a5:cf:0b:1b:26:73:3a:14:79:7d:bc:
2d:1c:2e:58:66:8a:45:84:7a:72:e7:5f:d9:66:56:10:6f:d6:
59:e2:b6:0f:44:78:a3:3c:d8:3a:55:9b:88:d9:6e:c3:2e:0e:
3d:a0:85:30:f6:4f:08:79:c9:de:f0:66:f4:5b:b9:32:a5:bd:
01:52:7b:d0:51:91:b7:d1:50:d2:fe:c7:3a:0c:08:04:f8:ca:
73:0a:9d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:35 2024 by rpki-client on console-ams.rpki-client.org