Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/iE2d4_b4YSWwYTg8bK6N0TSUtVE.roa
File: iE2d4_b4YSWwYTg8bK6N0TSUtVE.roa (raw, json)
Hash identifier: xCdW+d3rqwKhLGWflmnpXt1u8xobk89U2zBs/jo6t2Q=
Subject key identifier: 88:4D:9D:E3:F6:F8:61:25:B0:61:38:3C:6C:AE:8D:D1:34:94:B5:51
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184D29A81A01B9947E7F6020E39A15B78F8
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/iE2d4_b4YSWwYTg8bK6N0TSUtVE.roa
Signing time: Fri 02 Dec 2022 11:30:51 +0000
ROA not before: Fri 02 Dec 2022 11:30:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50928
IP address blocks: 109.188.0.0/16 maxlen: 24
46.29.192.0/21 maxlen: 21
46.29.199.0/24 maxlen: 24
46.29.194.0/24 maxlen: 24
46.29.196.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
188.170.244.0/24 maxlen: 24
188.170.244.0/23 maxlen: 23
188.170.245.0/24 maxlen: 24
188.170.251.0/24 maxlen: 24
188.170.249.0/24 maxlen: 24
188.170.250.0/24 maxlen: 24
188.170.248.0/24 maxlen: 24
79.171.8.0/21 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
178.176.250.0/24 maxlen: 24
178.176.248.0/24 maxlen: 24
178.176.253.0/24 maxlen: 24
91.193.212.0/22 maxlen: 24
178.176.251.0/24 maxlen: 24
178.176.252.0/24 maxlen: 24
178.176.249.0/24 maxlen: 24
37.29.81.0/24 maxlen: 24
37.29.83.0/24 maxlen: 24
37.29.80.0/22 maxlen: 22
37.29.80.0/24 maxlen: 24
37.29.82.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
31.173.248.0/21 maxlen: 21
31.173.252.0/24 maxlen: 24
31.173.249.0/24 maxlen: 24
31.173.251.0/24 maxlen: 24
31.173.248.0/24 maxlen: 24
31.173.253.0/24 maxlen: 24
31.173.250.0/24 maxlen: 24
95.137.0.0/17 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
81.24.128.0/20 maxlen: 24
78.41.100.0/22 maxlen: 24
195.78.116.0/23 maxlen: 24
83.169.192.0/18 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
212.44.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d2:9a:81:a0:1b:99:47:e7:f6:02:0e:39:a1:5b:78:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 2 11:30:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=884d9de3f6f86125b061383c6cae8dd13494b551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a7:e2:1b:fd:b6:05:07:ab:b6:6b:cf:bd:0b:
e6:f1:fe:3a:cd:d8:2e:94:0e:da:ad:43:fa:e9:ff:
74:11:d6:8d:d7:41:3b:7e:24:cb:94:cb:23:c0:01:
4a:9a:a5:8e:5c:5d:3a:24:b9:54:ee:f6:2d:d9:35:
af:7e:34:e6:ef:a9:fe:11:c4:f3:3a:45:70:fb:b6:
b1:37:d2:68:b3:e8:2d:1d:e8:bf:43:d0:fa:44:e9:
d4:e6:06:c8:70:66:d8:d9:f5:60:8b:f6:2e:61:ee:
8c:0f:2d:e9:3d:2c:49:d4:aa:90:17:16:8c:9a:f4:
02:f9:e0:0f:1a:63:f4:21:89:be:e2:89:82:40:c8:
20:03:6b:49:13:4f:a0:bd:b3:42:65:04:43:35:2c:
c3:a8:6b:59:77:ca:86:36:32:dc:d3:08:6f:c1:7d:
97:3b:cc:92:ec:57:25:2b:34:ec:bb:05:e2:50:b2:
50:ff:de:be:77:10:86:c6:ce:ae:1c:ff:6f:02:ee:
49:3d:57:59:16:96:54:1e:b1:7f:61:1e:77:65:58:
b4:67:a5:65:68:ba:bc:6b:f4:7d:26:8f:99:87:67:
27:3d:a4:b5:c4:92:e2:7f:73:b3:3f:f7:2a:d2:7a:
6b:fc:07:41:58:a9:fb:5d:4c:54:52:d9:44:3c:5b:
6b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4D:9D:E3:F6:F8:61:25:B0:61:38:3C:6C:AE:8D:D1:34:94:B5:51
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/iE2d4_b4YSWwYTg8bK6N0TSUtVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.248.0/21
37.29.80.0/22
46.29.192.0/21
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.248.0-178.176.253.255
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.244.0/23
188.170.248.0/22
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
01:0c:44:8b:77:22:f2:5f:4e:ce:21:9a:24:10:60:ee:14:39:
74:09:55:10:1c:1f:1a:ff:56:94:a2:d8:89:94:8c:f9:1a:45:
3e:06:80:d7:c0:94:88:75:fd:9e:9c:48:93:a8:fa:8c:6f:d0:
3b:a8:20:ca:77:82:5a:aa:be:55:42:0f:8d:74:e2:5d:8d:fa:
14:73:3a:78:7b:67:05:72:25:c8:52:96:bf:3e:81:41:f3:57:
6f:34:2e:00:8f:2c:dd:48:e6:80:ba:4d:60:7d:f5:8f:d5:3e:
e5:28:a6:9f:4e:d1:20:cf:ba:38:54:03:fd:e1:1d:1d:4e:6c:
3a:03:11:7c:2d:26:ca:aa:cb:44:d5:8b:b5:3b:20:80:cb:8c:
6c:b4:a9:57:03:97:73:97:1c:5b:81:6b:d6:41:87:a6:be:1a:
95:42:9a:2c:7f:dc:6d:81:77:3c:30:88:88:ba:5d:6f:5a:62:
b7:93:cd:cc:c5:b9:6a:ca:0d:58:c2:a5:67:0c:10:7d:db:be:
bf:11:61:59:2a:28:4f:aa:b7:87:19:ac:a8:46:71:83:5c:47:
67:47:86:1a:fe:fe:f8:08:e3:c1:d4:51:70:cf:9e:ff:cf:e0:
44:60:68:71:09:aa:82:72:46:43:be:38:2d:d4:5e:bb:3d:94:
3d:64:a2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:22 2025 by rpki-client