Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/i9xXwSCV5rKjtgZciKcPQvs25O4.roa
File: i9xXwSCV5rKjtgZciKcPQvs25O4.roa (raw, json)
Hash identifier: K5Y4PEDjZQNzZKzJoW3yPzp5BF4mnmqoH5QePpob/vQ=
Subject key identifier: 8B:DC:57:C1:20:95:E6:B2:A3:B6:06:5C:88:A7:0F:42:FB:36:E4:EE
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184E23BF3180C7587CF2DAB63B5A6B71547
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/i9xXwSCV5rKjtgZciKcPQvs25O4.roa
Signing time: Mon 05 Dec 2022 12:21:30 +0000
ROA not before: Mon 05 Dec 2022 12:21:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31163
IP address blocks: 109.188.0.0/16 maxlen: 24
85.26.128.0/17 maxlen: 24
193.201.228.0/22 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
31.173.192.0/24 maxlen: 24
31.173.193.0/24 maxlen: 24
31.173.196.0/24 maxlen: 24
31.173.199.0/24 maxlen: 24
31.173.194.0/24 maxlen: 24
31.173.197.0/24 maxlen: 24
31.173.195.0/24 maxlen: 24
31.173.198.0/24 maxlen: 24
31.173.201.0/24 maxlen: 24
31.173.204.0/24 maxlen: 24
31.173.202.0/24 maxlen: 24
31.173.205.0/24 maxlen: 24
31.173.200.0/24 maxlen: 24
31.173.203.0/24 maxlen: 24
31.173.206.0/24 maxlen: 24
31.173.209.0/24 maxlen: 24
31.173.212.0/24 maxlen: 24
31.173.207.0/24 maxlen: 24
31.173.210.0/24 maxlen: 24
31.173.213.0/24 maxlen: 24
31.173.208.0/24 maxlen: 24
31.173.211.0/24 maxlen: 24
31.173.217.0/24 maxlen: 24
31.173.215.0/24 maxlen: 24
31.173.218.0/24 maxlen: 24
31.173.216.0/24 maxlen: 24
31.173.219.0/24 maxlen: 24
31.173.214.0/24 maxlen: 24
31.173.220.0/24 maxlen: 24
31.173.223.0/24 maxlen: 24
31.173.221.0/24 maxlen: 24
31.173.222.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
91.193.212.0/22 maxlen: 24
109.106.192.0/24 maxlen: 24
109.106.197.0/24 maxlen: 24
109.106.195.0/24 maxlen: 24
109.106.198.0/24 maxlen: 24
109.106.193.0/24 maxlen: 24
109.106.196.0/24 maxlen: 24
109.106.199.0/24 maxlen: 24
109.106.194.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
212.44.64.0/19 maxlen: 24
178.178.3.0/24 maxlen: 24
178.178.0.0/24 maxlen: 24
178.178.2.0/24 maxlen: 24
178.178.4.0/24 maxlen: 24
178.178.1.0/24 maxlen: 24
178.178.5.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
37.29.123.0/24 maxlen: 24
37.29.125.0/24 maxlen: 24
37.29.120.0/24 maxlen: 24
37.29.119.0/24 maxlen: 24
37.29.122.0/24 maxlen: 24
37.29.121.0/24 maxlen: 24
37.29.124.0/24 maxlen: 24
37.29.126.0/24 maxlen: 24
37.29.127.0/24 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
185.3.32.0/22 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
178.176.215.0/24 maxlen: 24
178.176.218.0/24 maxlen: 24
178.176.217.0/24 maxlen: 24
178.176.219.0/24 maxlen: 24
178.176.214.0/24 maxlen: 24
178.176.216.0/24 maxlen: 24
178.176.223.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
178.176.220.0/24 maxlen: 24
178.176.222.0/24 maxlen: 24
178.176.221.0/24 maxlen: 24
188.170.187.0/24 maxlen: 24
188.170.190.0/24 maxlen: 24
188.170.189.0/24 maxlen: 24
188.170.192.0/24 maxlen: 24
188.170.191.0/24 maxlen: 24
188.170.188.0/24 maxlen: 24
188.170.195.0/24 maxlen: 24
188.170.198.0/24 maxlen: 24
188.170.197.0/24 maxlen: 24
188.170.199.0/24 maxlen: 24
188.170.194.0/24 maxlen: 24
188.170.193.0/24 maxlen: 24
188.170.196.0/24 maxlen: 24
188.170.200.0/22 maxlen: 22
188.170.204.0/22 maxlen: 22
188.170.211.0/24 maxlen: 24
188.170.213.0/24 maxlen: 24
188.170.208.0/24 maxlen: 24
188.170.210.0/24 maxlen: 24
188.170.209.0/24 maxlen: 24
188.170.212.0/24 maxlen: 24
188.170.214.0/24 maxlen: 24
188.170.219.0/24 maxlen: 24
188.170.216.0/24 maxlen: 24
188.170.215.0/24 maxlen: 24
188.170.218.0/24 maxlen: 24
188.170.217.0/24 maxlen: 24
188.170.224.0/24 maxlen: 24
188.170.221.0/24 maxlen: 24
188.170.222.0/24 maxlen: 24
188.170.220.0/24 maxlen: 24
188.170.225.0/24 maxlen: 24
188.170.226.0/24 maxlen: 24
188.170.223.0/24 maxlen: 24
188.170.227.0/24 maxlen: 24
37.29.112.0/24 maxlen: 24
37.29.115.0/24 maxlen: 24
37.29.118.0/24 maxlen: 24
37.29.117.0/24 maxlen: 24
37.29.114.0/24 maxlen: 24
37.29.113.0/24 maxlen: 24
37.29.116.0/24 maxlen: 24
128.204.64.0/18 maxlen: 24
188.170.171.0/24 maxlen: 24
188.170.170.0/24 maxlen: 24
188.170.169.0/24 maxlen: 24
188.170.168.0/21 maxlen: 21
188.170.172.0/24 maxlen: 24
188.170.179.0/24 maxlen: 24
188.170.174.0/24 maxlen: 24
95.137.0.0/17 maxlen: 24
188.170.173.0/24 maxlen: 24
188.170.176.0/24 maxlen: 24
188.170.175.0/24 maxlen: 24
188.170.178.0/24 maxlen: 24
188.170.177.0/24 maxlen: 24
188.170.182.0/24 maxlen: 24
188.170.181.0/24 maxlen: 24
188.170.184.0/24 maxlen: 24
188.170.183.0/24 maxlen: 24
188.170.186.0/24 maxlen: 24
188.170.185.0/24 maxlen: 24
188.170.180.0/24 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
83.149.24.0/24 maxlen: 24
83.149.29.0/24 maxlen: 24
83.149.30.0/24 maxlen: 24
83.149.28.0/24 maxlen: 24
83.149.25.0/24 maxlen: 24
83.149.31.0/24 maxlen: 24
178.176.192.0/24 maxlen: 24
178.176.194.0/24 maxlen: 24
178.176.193.0/24 maxlen: 24
178.176.196.0/24 maxlen: 24
178.176.195.0/24 maxlen: 24
178.176.198.0/24 maxlen: 24
178.176.197.0/24 maxlen: 24
178.176.202.0/24 maxlen: 24
178.176.203.0/24 maxlen: 24
178.176.210.0/24 maxlen: 24
178.176.209.0/24 maxlen: 24
178.176.212.0/24 maxlen: 24
178.176.211.0/24 maxlen: 24
178.176.213.0/24 maxlen: 24
178.176.208.0/24 maxlen: 24
83.169.192.0/18 maxlen: 24
109.74.112.0/20 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e2:3b:f3:18:0c:75:87:cf:2d:ab:63:b5:a6:b7:15:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 5 12:21:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8bdc57c12095e6b2a3b6065c88a70f42fb36e4ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a2:e2:6c:47:d7:5c:e4:f4:85:ca:ba:e2:ba:
2d:ff:e9:2f:52:c4:e3:91:c0:d9:6b:09:38:c0:21:
2c:13:95:19:45:c5:0e:78:e2:0d:9e:72:e1:c6:13:
28:cf:58:20:1a:dd:91:54:9e:a6:2e:3a:47:4a:1a:
ad:2a:c1:5c:c6:ea:b6:5b:b0:6b:fe:0f:19:f7:21:
9f:3f:94:b8:cc:74:b7:a3:dc:86:84:a2:0c:b1:6e:
c8:30:5c:d0:ea:06:ad:29:03:3a:ad:c3:e1:28:61:
41:56:9e:30:ae:e1:2d:2a:fd:3f:42:70:3b:ba:59:
9d:7d:26:5c:ef:8b:ca:75:a7:8e:23:2f:53:16:ed:
ab:fb:7d:dc:c3:f1:86:d1:13:87:ea:0c:d2:d7:f0:
b9:10:17:93:25:43:30:30:aa:45:7f:fa:68:52:59:
e1:27:45:8b:c7:b0:53:3a:d7:2e:ed:b8:35:e7:16:
00:45:21:f2:77:b7:be:d7:6b:92:01:7f:5b:37:e6:
15:b9:66:8e:70:ba:a2:1f:3e:f4:0b:ed:f5:05:1a:
c2:e1:c3:c1:b8:75:1a:4f:83:69:e4:40:c7:e7:1e:
6c:31:14:a4:c7:7f:5f:65:f6:db:18:00:36:23:89:
c1:63:81:7d:b5:50:30:f2:bf:08:0b:f2:64:ba:03:
be:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:DC:57:C1:20:95:E6:B2:A3:B6:06:5C:88:A7:0F:42:FB:36:E4:EE
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/i9xXwSCV5rKjtgZciKcPQvs25O4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.192.0/19
37.29.112.0/20
83.149.24.0/23
83.149.28.0/22
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.106.192.0/21
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.192.0-178.176.198.255
178.176.202.0/23
178.176.208.0/20
178.178.0.0-178.178.5.255
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.168.0-188.170.227.255
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
74:d1:fb:37:6e:8d:4d:b6:d8:00:ad:38:3c:79:82:5a:72:21:
6d:a1:c1:7c:45:a1:09:b8:dc:00:59:48:1a:36:11:54:4c:88:
82:cd:a9:bf:6f:67:6d:5d:fe:2e:a2:be:c3:c6:84:1d:1b:5a:
80:ff:b0:7a:0b:83:d9:0d:74:aa:6d:83:81:b0:1b:2c:42:18:
46:b4:19:c9:05:77:5e:85:0a:2e:2d:19:4b:c9:87:57:ba:ff:
4e:a1:0b:9c:43:c4:7a:74:c3:07:ec:52:78:2f:51:65:0c:7f:
d2:71:98:65:d3:79:1d:0e:74:aa:37:db:ea:b2:4b:f9:d2:1c:
40:47:2f:db:5a:da:68:0f:6d:f6:54:77:80:13:e1:f7:c1:ba:
50:c0:45:33:6e:e5:a5:5e:17:ec:e1:68:8c:47:72:21:e9:a9:
5a:0b:b8:f8:07:30:3e:ae:19:fd:47:2d:49:9c:5e:7c:e5:16:
24:7d:d4:a5:6b:59:86:01:06:47:0b:41:ee:f3:75:53:0a:0f:
b8:4a:82:8b:ee:32:90:33:b6:f8:ee:4c:54:2c:ec:7e:9e:f4:
78:c0:98:28:e2:d6:37:65:c2:4b:b5:e4:f1:00:19:0b:58:49:
3c:d2:58:d8:a8:25:24:09:db:0f:42:87:ac:5a:52:80:10:99:
ef:31:b6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:35 2024 by rpki-client on console-ams.rpki-client.org