Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/iJv8ggqM3RnbN_dN7lXAhrTBSzw.roa
File: iJv8ggqM3RnbN_dN7lXAhrTBSzw.roa (raw, json)
Hash identifier: 5TkdiZONwvSjPbVOyXGmfVr9SxbdaI5eNgPiLjhUC/M=
Subject key identifier: 88:9B:FC:82:0A:8C:DD:19:DB:37:F7:4D:EE:55:C0:86:B4:C1:4B:3C
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018505A4299B8F9DB263BFFDD6587CE65571
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/iJv8ggqM3RnbN_dN7lXAhrTBSzw.roa
Signing time: Mon 12 Dec 2022 09:22:02 +0000
ROA not before: Mon 12 Dec 2022 09:22:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31208
IP address blocks: 195.16.96.0/19 maxlen: 24
178.178.84.0/22 maxlen: 22
178.178.82.0/24 maxlen: 24
178.178.80.0/23 maxlen: 23
193.201.228.0/22 maxlen: 24
178.178.131.0/24 maxlen: 24
178.178.130.0/24 maxlen: 24
178.178.129.0/24 maxlen: 24
178.178.132.0/24 maxlen: 24
178.178.128.0/24 maxlen: 24
178.176.230.0/23 maxlen: 23
37.28.186.0/24 maxlen: 24
188.170.50.0/24 maxlen: 24
37.28.184.0/24 maxlen: 24
188.170.48.0/24 maxlen: 24
37.28.185.0/24 maxlen: 24
188.170.49.0/24 maxlen: 24
188.170.54.0/24 maxlen: 24
188.170.55.0/24 maxlen: 24
37.28.187.0/24 maxlen: 24
188.170.56.0/24 maxlen: 24
188.170.52.0/24 maxlen: 24
188.170.57.0/24 maxlen: 24
188.170.53.0/24 maxlen: 24
188.170.62.0/24 maxlen: 24
188.170.63.0/24 maxlen: 24
188.170.59.0/24 maxlen: 24
188.170.60.0/24 maxlen: 24
188.170.61.0/24 maxlen: 24
37.29.75.0/24 maxlen: 24
37.29.74.0/24 maxlen: 24
37.29.73.0/24 maxlen: 24
37.29.72.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.72.0/24 maxlen: 24
128.204.73.0/24 maxlen: 24
178.176.58.0/24 maxlen: 24
178.176.56.0/24 maxlen: 24
178.176.57.0/24 maxlen: 24
178.176.62.0/24 maxlen: 24
178.176.63.0/24 maxlen: 24
178.176.59.0/24 maxlen: 24
178.176.60.0/24 maxlen: 24
178.176.61.0/24 maxlen: 24
83.149.41.0/24 maxlen: 24
83.149.44.0/23 maxlen: 23
83.149.40.0/24 maxlen: 24
83.149.42.0/23 maxlen: 23
195.78.116.0/23 maxlen: 24
83.149.46.0/23 maxlen: 23
83.169.212.0/24 maxlen: 24
83.169.208.0/24 maxlen: 24
83.169.213.0/24 maxlen: 24
83.169.209.0/24 maxlen: 24
83.169.210.0/24 maxlen: 24
83.169.211.0/24 maxlen: 24
83.169.214.0/24 maxlen: 24
83.169.215.0/24 maxlen: 24
188.162.0.0/16 maxlen: 24
178.178.135.0/24 maxlen: 24
178.178.134.0/24 maxlen: 24
178.178.137.0/24 maxlen: 24
178.178.133.0/24 maxlen: 24
178.178.136.0/24 maxlen: 24
178.178.143.0/24 maxlen: 24
178.178.142.0/24 maxlen: 24
46.229.136.0/22 maxlen: 22
46.229.141.0/24 maxlen: 24
46.229.140.0/24 maxlen: 24
46.229.143.0/24 maxlen: 24
46.229.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:a4:29:9b:8f:9d:b2:63:bf:fd:d6:58:7c:e6:55:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 09:22:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=889bfc820a8cdd19db37f74dee55c086b4c14b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3a:3a:ed:96:f3:32:8e:c6:9a:af:ba:4f:d9:
4f:12:ef:47:4f:f5:44:a8:69:3d:27:06:74:34:d4:
e5:4f:af:eb:5f:af:13:1d:0a:63:4b:de:56:f0:f2:
c6:62:c2:ce:cf:db:25:9b:e6:b2:e8:a2:5b:4f:6d:
ce:35:13:14:fe:9e:1d:88:6c:fa:0f:11:b5:4e:ad:
66:2b:a0:59:19:bf:5a:2b:62:37:8e:52:a9:f7:c7:
29:c1:1f:cc:e1:26:68:d6:0a:92:ee:6a:fb:ca:8a:
a9:9e:f6:1b:85:48:4e:d8:3f:e2:81:b8:9c:76:69:
8f:e2:35:97:5c:30:50:e4:10:90:b2:b5:34:d6:d1:
84:5d:a3:c4:20:8c:30:75:ab:50:9a:f0:ba:2d:0a:
36:c2:6d:c9:36:33:6c:14:63:8d:27:b9:78:11:27:
7b:8f:41:72:4f:1a:60:10:be:48:b3:66:8c:68:eb:
3f:da:ab:8f:16:f3:7c:76:9b:1b:5e:e8:88:b0:9b:
09:1b:7e:f8:29:19:c2:d9:93:29:84:d2:e1:d3:ee:
6d:6b:16:6e:54:51:82:ed:0d:69:a7:57:24:3f:9c:
88:a3:7f:d6:a3:d8:7a:21:4f:19:2d:7b:c5:da:33:
3b:47:dd:73:ec:c2:f3:a7:57:9b:7c:17:37:b1:b7:
2c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:9B:FC:82:0A:8C:DD:19:DB:37:F7:4D:EE:55:C0:86:B4:C1:4B:3C
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/iJv8ggqM3RnbN_dN7lXAhrTBSzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.28.184.0/22
37.29.72.0/22
46.229.136.0/21
83.149.40.0/21
83.169.208.0/21
128.204.72.0/23
178.176.56.0/21
178.176.230.0/23
178.178.80.0-178.178.82.255
178.178.84.0/22
178.178.128.0-178.178.137.255
178.178.142.0/23
188.162.0.0/16
188.170.48.0-188.170.50.255
188.170.52.0-188.170.57.255
188.170.59.0-188.170.63.255
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
Signature Algorithm: sha256WithRSAEncryption
66:01:07:bd:20:98:69:57:87:0d:3b:6b:77:57:7e:81:bd:9e:
d3:57:02:79:77:7d:14:8d:12:c6:fa:92:d9:a2:e1:90:9f:0c:
c5:8c:1c:92:b6:b1:94:2b:85:7d:2b:e3:7b:1f:52:83:93:32:
99:4d:52:3f:76:67:c3:bd:81:e0:29:c4:8f:33:b7:76:d0:13:
a9:8e:03:61:02:cb:1d:8a:90:97:e1:4b:f0:ea:fa:c7:29:96:
49:a6:ee:b6:3c:cd:13:a3:90:1a:a9:a6:e7:df:e4:aa:31:4a:
f9:f9:f7:9d:bf:25:81:25:79:0e:4f:32:14:1f:d7:e4:97:ea:
74:61:fe:f0:30:ae:9d:66:78:15:ee:a5:73:52:22:76:35:e8:
61:17:36:f7:e5:2b:cd:aa:c6:83:81:77:3e:a0:85:a1:ae:7c:
37:49:0d:54:e7:04:5e:6b:0f:47:03:f6:a3:8b:68:39:5a:6d:
d8:5b:f2:80:57:38:18:1b:d9:b0:ce:b8:fc:38:59:a5:55:67:
da:09:08:fa:74:b6:ec:a9:fc:5d:93:d3:76:4d:b1:8b:b0:7c:
65:16:99:d6:b6:f9:80:24:da:90:ad:a8:d2:49:9c:e2:8d:6a:
ef:0f:80:8f:15:84:8f:c0:f3:fa:58:4d:e9:b4:cd:3d:63:96:
71:a2:c6:bc
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgISAYUFpCmbj52yY7/91lh85lVxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMjEyMDkyMjAyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODliZmM4MjBhOGNkZDE5ZGIzN2Y3NGRlZTU1YzA4NmI0YzE0YjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzo67ZbzMo7Gmq+6T9lPEu9HT/VE
qGk9JwZ0NNTlT6/rX68THQpjS95W8PLGYsLOz9slm+ay6KJbT23ONRMU/p4diGz6
DxG1Tq1mK6BZGb9aK2I3jlKp98cpwR/M4SZo1gqS7mr7yoqpnvYbhUhO2D/igbic
dmmP4jWXXDBQ5BCQsrU01tGEXaPEIIwwdatQmvC6LQo2wm3JNjNsFGONJ7l4ESd7
j0FyTxpgEL5Is2aMaOs/2quPFvN8dpsbXuiIsJsJG374KRnC2ZMphNLh0+5taxZu
VFGC7Q1pp1ckP5yIo3/Wo9h6IU8ZLXvF2jM7R91z7MLzp1ebfBc3sbcspwIDAQAB
o4ICpzCCAqMwHQYDVR0OBBYEFIib/IIKjN0Z2zf3Te5VwIa0wUs8MB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvaUp2OGdncU0zUm5iTl9kTjdsWEFoclRCU3p3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG8BggrBgEFBQcBBwEB/wSBrDCBqTCBpgQCAAEwgZ8DBAIl
HLgDBAIlHUgDBAMu5YgDBANTlSgDBANTqdADBAGAzEgDBAOysDgDBAGysOYwDAME
BLKyUAMEALKyUgMEArKyVDAMAwQHsrKAAwQBsrKIAwQBsrKOAwMAvKIwDAMEBLyq
MAMEALyqMjAMAwQCvKo0AwQBvKo4MAwDBAC8qjsDBAa8qgADBALByeQDBAXDBYAD
BAXDEGADBAHDTnQwDQYJKoZIhvcNAQELBQADggEBAGYBB70gmGlXhw07a3dXfoG9
ntNXAnl3fRSNEsb6ktmi4ZCfDMWMHJK2sZQrhX0r43sfUoOTMplNUj92Z8O9geAp
xI8zt3bQE6mOA2ECyx2KkJfhS/Dq+scplkmm7rY8zROjkBqppuff5KoxSvn5952/
JYEleQ5PMhQf1+SX6nRh/vAwrp1meBXupXNSInY16GEXNvflK82qxoOBdz6ghaGu
fDdJDVTnBF5rD0cD9qOLaDlabdhb8oBXOBgb2bDOuPw4WaVVZ9oJCPp0tuyp/F2T
03ZNsYuwfGUWmda2+YAk2pCtqNJJnOKNau8PgI8VhI/A8/pYTem0zT1jlnGixrw=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:47 2025 by rpki-client