Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/g9zI_Mdwd2eceZSHx8KDpD0fjn4.roa
File: g9zI_Mdwd2eceZSHx8KDpD0fjn4.roa (raw, json)
Hash identifier: 7DXdELvV4pVYOF2imT99ygLBLaXLqg3GrXIlnvrqR9Y=
Subject key identifier: 83:DC:C8:FC:C7:70:77:67:9C:79:94:87:C7:C2:83:A4:3D:1F:8E:7E
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184C3EFD08E3BB5D31F055A673D0DF366E7
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/g9zI_Mdwd2eceZSHx8KDpD0fjn4.roa
Signing time: Tue 29 Nov 2022 15:09:44 +0000
ROA not before: Tue 29 Nov 2022 15:09:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50928
IP address blocks: 109.188.0.0/16 maxlen: 24
46.29.192.0/21 maxlen: 21
46.29.199.0/24 maxlen: 24
46.29.194.0/24 maxlen: 24
46.29.196.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
188.170.244.0/24 maxlen: 24
188.170.244.0/23 maxlen: 23
188.170.245.0/24 maxlen: 24
188.170.251.0/24 maxlen: 24
188.170.249.0/24 maxlen: 24
188.170.250.0/24 maxlen: 24
188.170.248.0/24 maxlen: 24
79.171.8.0/21 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
78.25.64.0/18 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
178.176.250.0/24 maxlen: 24
178.176.248.0/24 maxlen: 24
178.176.253.0/24 maxlen: 24
91.193.212.0/22 maxlen: 24
178.176.251.0/24 maxlen: 24
178.176.252.0/24 maxlen: 24
178.176.249.0/24 maxlen: 24
37.29.81.0/24 maxlen: 24
37.29.83.0/24 maxlen: 24
37.29.80.0/22 maxlen: 22
37.29.80.0/24 maxlen: 24
37.29.82.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
31.173.248.0/21 maxlen: 21
31.173.252.0/24 maxlen: 24
31.173.249.0/24 maxlen: 24
31.173.251.0/24 maxlen: 24
31.173.248.0/24 maxlen: 24
31.173.253.0/24 maxlen: 24
31.173.250.0/24 maxlen: 24
95.137.0.0/17 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
77.233.160.0/19 maxlen: 24
81.24.128.0/20 maxlen: 24
78.41.100.0/22 maxlen: 24
195.78.116.0/23 maxlen: 24
83.169.192.0/18 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
212.44.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c3:ef:d0:8e:3b:b5:d3:1f:05:5a:67:3d:0d:f3:66:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Nov 29 15:09:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83dcc8fcc77077679c799487c7c283a43d1f8e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:38:0b:6d:89:20:2c:95:36:54:61:b2:3c:4b:
54:dd:1d:38:c7:b7:55:34:41:a9:de:a5:80:1c:f4:
5f:b4:8e:a8:a9:f6:14:77:84:f2:ac:61:e7:7d:f2:
5e:1a:9d:05:06:ff:34:8b:1b:34:4f:9a:22:15:74:
67:08:40:07:6c:13:1a:91:0b:ee:13:87:a6:ca:7e:
e0:b6:f6:d8:5f:47:db:a8:22:8a:f9:c6:52:ea:c7:
b5:ae:fa:ca:84:45:7d:22:cf:2b:fa:fc:69:49:c3:
87:a7:81:e6:ab:0c:35:04:db:41:32:4b:99:89:78:
4c:55:7b:d1:18:ed:b8:cb:81:d5:9b:64:c1:25:78:
76:f5:3a:ae:4f:bd:f0:cc:8d:be:1d:cc:de:35:45:
ff:03:4a:86:a5:74:24:99:01:e3:1d:8a:7a:48:43:
f7:9f:ba:d6:3d:a8:90:9b:54:1a:ab:ad:ad:2b:2a:
89:73:bc:c7:b5:60:ba:b3:a8:0c:2c:23:3d:de:2f:
ef:e5:5f:5c:35:cd:02:f0:5f:dc:87:f7:96:1c:1d:
53:ee:83:58:81:aa:57:12:02:43:fb:de:46:2c:41:
c9:94:89:21:82:6b:c6:14:e0:85:a9:e3:c1:77:4d:
f6:cf:c9:9c:ce:fa:5d:da:68:71:dc:6a:d4:ee:a6:
73:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DC:C8:FC:C7:70:77:67:9C:79:94:87:C7:C2:83:A4:3D:1F:8E:7E
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/g9zI_Mdwd2eceZSHx8KDpD0fjn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.248.0/21
37.29.80.0/22
46.29.192.0/21
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.248.0-178.176.253.255
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.244.0/23
188.170.248.0/22
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
71:43:ab:b1:26:a1:0b:30:d5:ce:38:d4:71:23:f7:ae:ef:54:
46:16:a6:66:a7:f2:e7:ab:11:eb:84:aa:31:b9:3b:05:6d:0b:
f8:f6:f6:f0:32:4e:a8:50:39:7d:43:9a:57:9d:d3:c9:6b:6d:
41:7c:b5:6f:6b:b6:8f:90:ee:51:d8:57:cf:ea:21:d9:1d:33:
6b:64:d7:09:a4:7c:a7:2f:ba:22:d6:7f:7f:a9:6f:6d:4b:fc:
0a:90:36:99:11:14:f6:1f:c2:d1:e1:09:71:74:c3:5c:be:14:
f7:c1:75:45:72:04:a1:ea:2f:3f:78:44:ef:e9:dc:bc:d6:dc:
29:83:84:a6:c6:6c:28:17:a4:b8:41:be:bd:dd:9c:10:53:c4:
68:36:c1:e4:d9:8e:98:4d:42:c6:76:e1:02:41:52:32:aa:ed:
b0:76:26:5b:7a:89:c6:ef:cb:30:5c:d8:e3:cd:8c:3d:08:61:
6b:c5:0f:52:ce:ca:7e:b3:30:75:53:3d:a2:b7:0a:01:03:da:
6c:85:4f:ec:34:7d:b1:9e:c5:68:a3:e3:1f:dd:23:c3:35:73:
bc:d9:c4:40:06:b4:2f:bc:85:ac:11:e0:b2:7d:86:60:04:44:
8b:8f:4a:8f:d8:a1:be:76:1a:05:aa:04:d1:ee:37:9f:93:15:
60:59:9c:83
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgISAYTD79COO7XTHwVaZz0N82bnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMTI5MTUwOTQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4M2RjYzhmY2M3NzA3NzY3OWM3OTk0ODdjN2MyODNhNDNkMWY4ZTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jgLbYkgLJU2VGGyPEtU3R04x7dV
NEGp3qWAHPRftI6oqfYUd4TyrGHnffJeGp0FBv80ixs0T5oiFXRnCEAHbBMakQvu
E4emyn7gtvbYX0fbqCKK+cZS6se1rvrKhEV9Is8r+vxpScOHp4Hmqww1BNtBMkuZ
iXhMVXvRGO24y4HVm2TBJXh29TquT73wzI2+HczeNUX/A0qGpXQkmQHjHYp6SEP3
n7rWPaiQm1Qaq62tKyqJc7zHtWC6s6gMLCM93i/v5V9cNc0C8F/ch/eWHB1T7oNY
gapXEgJD+95GLEHJlIkhgmvGFOCFqePBd032z8mczvpd2mhx3GrU7qZzsQIDAQAB
o4IDGzCCAxcwHQYDVR0OBBYEFIPcyPzHcHdnnHmUh8fCg6Q9H45+MB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvZzl6SV9NZHdkMmVjZVpTSHg4S0RwRDBmam40LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBLwYIKwYBBQUHAQcBAf8EggEeMIIBGjCCARYEAgABMIIB
DgMEAx+t+AMEAiUdUAMEAy4dwAMEBU3poAMEBk4ZQAMEAk4pZAMEA0+rCAMEBFD3
sAMEBFEYgAMEBlOpwAMEBVPewAMEB1PlgAMEB1UagAMEBVZtwAMEAlvB1AMEB12Z
gAMEB14ZgAMEB1+JAAMEBG1KcAMEBm18QAMDAG28AwQGgMxAAwQDsheQMAwDBAOy
sPgDBAGysPwDBAK5AyADBAK50owDBAO8XqgDAwC8ogMEAbyq9AMEAryq+AMEAsHJ
5AMEBcMFgAMEBcMQYAMEAcNOdAMEAMOVbwMEBcPmQAMEBdQOoAMEBdQsQAMEBdRF
YAMEBdR3oAMEBdWaoAMEBdWoIAMEBtXzQAMEBNlzUDANBgkqhkiG9w0BAQsFAAOC
AQEAcUOrsSahCzDVzjjUcSP3ru9URhamZqfy56sR64SqMbk7BW0L+Pb28DJOqFA5
fUOaV53TyWttQXy1b2u2j5DuUdhXz+oh2R0za2TXCaR8py+6ItZ/f6lvbUv8CpA2
mREU9h/C0eEJcXTDXL4U98F1RXIEoeovP3hE7+ncvNbcKYOEpsZsKBekuEG+vd2c
EFPEaDbB5NmOmE1CxnbhAkFSMqrtsHYmW3qJxu/LMFzY482MPQhha8UPUs7KfrMw
dVM9orcKAQPabIVP7DR9sZ7FaKPjH90jwzVzvNnEQAa0L7yFrBHgsn2GYAREi49K
j9ihvnYaBaoE0e43n5MVYFmcgw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:35 2024 by rpki-client on console-ams.rpki-client.org