Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/gl40FICdhaKLact1YzalXyqwQOU.roa
File: gl40FICdhaKLact1YzalXyqwQOU.roa (raw, json)
Hash identifier: w9UKGtZlfJZYOcRjj2SsKsny9ylamRWXYgaBGqr1fuU=
Subject key identifier: 82:5E:34:14:80:9D:85:A2:8B:69:CB:75:63:36:A5:5F:2A:B0:40:E5
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184C3EFCC0C001DA392D6CCEB5F323AF331
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/gl40FICdhaKLact1YzalXyqwQOU.roa
Signing time: Tue 29 Nov 2022 15:09:43 +0000
ROA not before: Tue 29 Nov 2022 15:09:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31208
IP address blocks: 109.188.0.0/16 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
178.178.84.0/22 maxlen: 22
178.178.82.0/24 maxlen: 24
193.201.228.0/22 maxlen: 24
178.178.80.0/23 maxlen: 23
178.178.130.0/24 maxlen: 24
178.178.129.0/24 maxlen: 24
178.178.132.0/24 maxlen: 24
178.178.131.0/24 maxlen: 24
178.23.144.0/21 maxlen: 24
178.178.128.0/24 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
78.25.64.0/18 maxlen: 24
185.210.140.0/22 maxlen: 24
178.176.230.0/23 maxlen: 23
212.119.160.0/19 maxlen: 24
37.28.186.0/24 maxlen: 24
188.170.50.0/24 maxlen: 24
37.28.184.0/24 maxlen: 24
37.28.185.0/24 maxlen: 24
188.170.49.0/24 maxlen: 24
188.170.48.0/24 maxlen: 24
188.170.55.0/24 maxlen: 24
80.247.176.0/20 maxlen: 24
188.170.52.0/24 maxlen: 24
188.170.57.0/24 maxlen: 24
188.170.54.0/24 maxlen: 24
37.28.187.0/24 maxlen: 24
188.170.56.0/24 maxlen: 24
188.170.53.0/24 maxlen: 24
91.193.212.0/22 maxlen: 24
188.170.63.0/24 maxlen: 24
188.170.60.0/24 maxlen: 24
188.170.62.0/24 maxlen: 24
188.170.59.0/24 maxlen: 24
188.170.61.0/24 maxlen: 24
37.29.74.0/24 maxlen: 24
37.29.73.0/24 maxlen: 24
37.29.75.0/24 maxlen: 24
37.29.72.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
178.176.56.0/24 maxlen: 24
178.176.58.0/24 maxlen: 24
178.176.57.0/24 maxlen: 24
178.176.62.0/24 maxlen: 24
178.176.59.0/24 maxlen: 24
178.176.61.0/24 maxlen: 24
178.176.63.0/24 maxlen: 24
178.176.60.0/24 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
81.24.128.0/20 maxlen: 24
83.149.41.0/24 maxlen: 24
83.149.44.0/23 maxlen: 23
83.149.42.0/23 maxlen: 23
83.149.40.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 24
83.149.46.0/23 maxlen: 23
83.169.192.0/18 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
178.178.135.0/24 maxlen: 24
178.178.137.0/24 maxlen: 24
178.178.134.0/24 maxlen: 24
178.178.133.0/24 maxlen: 24
178.178.136.0/24 maxlen: 24
178.178.143.0/24 maxlen: 24
178.178.142.0/24 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
46.229.136.0/22 maxlen: 22
46.229.140.0/24 maxlen: 24
46.229.143.0/24 maxlen: 24
46.229.141.0/24 maxlen: 24
46.229.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c3:ef:cc:0c:00:1d:a3:92:d6:cc:eb:5f:32:3a:f3:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Nov 29 15:09:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=825e3414809d85a28b69cb756336a55f2ab040e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9c:57:24:6b:a8:99:fb:a5:63:d9:d3:86:96:
4f:e2:c8:b8:f3:12:c7:6e:17:39:c0:59:fd:c3:24:
a9:65:00:96:e1:b2:5e:7e:32:fb:e6:8d:0d:03:c1:
0e:26:21:a0:4f:33:66:62:09:e1:66:8c:dc:1b:4a:
1b:58:0d:90:2a:66:4c:55:37:78:d0:74:a8:56:41:
ad:7b:96:b1:39:af:41:a1:ba:cd:ba:7a:8d:fa:63:
48:76:bc:cc:eb:05:cc:2a:8e:fe:91:80:2c:f6:84:
ed:e7:1e:c0:19:78:d8:0e:23:ec:7e:fa:16:25:cc:
da:f9:f3:40:f9:d2:10:44:7f:5c:35:fd:17:43:b9:
13:77:eb:e6:6c:45:f2:46:0f:e8:2b:ed:82:0f:80:
dd:b9:0c:82:ee:38:66:82:ec:cd:93:f7:e2:88:b5:
d3:2a:ec:cb:65:ae:be:6d:f4:80:ec:8a:8a:34:28:
33:58:9b:66:ea:21:0d:48:7e:d8:c9:e2:d2:b8:e0:
01:19:fb:1a:47:c9:f2:98:8a:a1:c8:db:5d:1b:4e:
3f:ce:07:e9:a5:54:12:01:a3:35:8a:ad:79:ce:9b:
34:97:5e:ab:df:93:43:51:23:d7:4e:96:33:35:e1:
d1:d7:45:83:e2:8d:2d:aa:7b:d3:c9:f0:d1:e8:9c:
09:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5E:34:14:80:9D:85:A2:8B:69:CB:75:63:36:A5:5F:2A:B0:40:E5
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/gl40FICdhaKLact1YzalXyqwQOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.28.184.0/22
37.29.72.0/22
46.229.136.0/21
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.149.40.0/21
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.56.0/21
178.176.230.0/23
178.178.80.0-178.178.82.255
178.178.84.0/22
178.178.128.0-178.178.137.255
178.178.142.0/23
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.48.0-188.170.50.255
188.170.52.0-188.170.57.255
188.170.59.0-188.170.63.255
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
91:85:15:41:0c:4e:e7:d4:94:ba:fe:10:5c:17:b0:c0:d5:6c:
28:ab:44:de:82:fe:64:aa:0b:d3:ec:59:cc:98:9f:15:42:ac:
af:e7:a1:0c:33:23:b8:c4:d0:9c:19:18:08:af:87:c5:8a:27:
de:1c:ee:d4:8a:8c:13:a4:ba:b3:f3:02:a9:f1:33:6e:a3:75:
f4:b7:33:dc:55:14:e2:62:c9:f5:a6:32:c2:03:0f:e8:29:c8:
e1:a1:4e:6b:36:e8:06:a3:1e:11:2f:1a:b8:66:20:e1:48:6a:
09:82:41:1d:9f:0a:ae:7a:64:97:73:4e:f7:20:68:59:81:4f:
17:ef:a9:4b:56:3d:f6:f4:6a:8b:9d:a9:6b:fd:87:48:49:f1:
f4:0c:72:ad:3a:fc:4b:9e:d4:3b:d5:b5:53:53:b7:1d:31:15:
d4:2f:58:c6:5d:10:2d:59:bc:df:2b:2d:12:95:6f:3d:1a:f5:
7f:36:4f:0c:57:71:9a:f6:79:f8:11:86:ef:d2:c3:70:2a:52:
6b:5d:ff:5a:ef:a3:b0:b2:37:95:a2:60:31:24:82:19:e1:4e:
8f:90:27:47:58:51:22:28:1b:6f:24:f9:bb:24:33:1c:72:8c:
ac:fc:e3:e1:cd:a5:39:06:1b:58:a2:12:bf:98:23:34:fd:e2:
ef:b4:9e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:35 2024 by rpki-client on console-ams.rpki-client.org