Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/mCaAWOYgkOtp3wl9lW5bBOsIgfI.roa
File: mCaAWOYgkOtp3wl9lW5bBOsIgfI.roa (raw, json)
Hash identifier: ea1W1ycvtTvqAj7RoXF92PLqsdBTE8onBQjSMwO3cDE=
Subject key identifier: 98:26:80:58:E6:20:90:EB:69:DF:09:7D:95:6E:5B:04:EB:08:81:F2
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F243D29B5D772B1E262E96DA7E0EB511
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/mCaAWOYgkOtp3wl9lW5bBOsIgfI.roa
Signing time: Thu 08 Dec 2022 15:04:01 +0000
ROA not before: Thu 08 Dec 2022 15:04:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31195
IP address blocks: 195.16.96.0/19 maxlen: 24
193.201.228.0/22 maxlen: 24
85.26.240.0/22 maxlen: 22
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
178.178.64.0/24 maxlen: 24
178.178.71.0/24 maxlen: 24
178.178.67.0/24 maxlen: 24
178.178.70.0/24 maxlen: 24
178.178.66.0/24 maxlen: 24
178.178.65.0/24 maxlen: 24
178.178.68.0/24 maxlen: 24
178.178.73.0/24 maxlen: 24
178.178.72.0/24 maxlen: 24
78.25.124.0/22 maxlen: 22
78.25.127.0/24 maxlen: 24
212.69.96.0/19 maxlen: 24
31.173.225.0/24 maxlen: 24
31.173.226.0/24 maxlen: 24
31.173.132.0/23 maxlen: 23
31.173.134.0/23 maxlen: 23
31.173.135.0/24 maxlen: 24
178.176.233.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
178.176.235.0/24 maxlen: 24
178.176.234.0/24 maxlen: 24
31.173.143.0/24 maxlen: 24
37.28.190.0/24 maxlen: 24
37.28.188.0/22 maxlen: 22
37.28.191.0/24 maxlen: 24
37.29.91.0/24 maxlen: 24
37.29.88.0/22 maxlen: 22
37.29.89.0/24 maxlen: 24
37.29.95.0/24 maxlen: 24
37.29.94.0/24 maxlen: 24
37.29.92.0/22 maxlen: 22
188.170.232.0/24 maxlen: 24
188.170.233.0/24 maxlen: 24
188.170.230.0/24 maxlen: 24
188.170.231.0/24 maxlen: 24
188.170.228.0/23 maxlen: 23
188.170.236.0/24 maxlen: 24
188.170.237.0/24 maxlen: 24
188.170.234.0/24 maxlen: 24
188.170.239.0/24 maxlen: 24
188.170.235.0/24 maxlen: 24
31.173.230.0/24 maxlen: 24
31.173.231.0/24 maxlen: 24
31.173.228.0/23 maxlen: 23
31.173.232.0/23 maxlen: 23
31.173.228.0/24 maxlen: 24
31.173.229.0/24 maxlen: 24
31.173.238.0/24 maxlen: 24
31.173.235.0/24 maxlen: 24
31.173.239.0/24 maxlen: 24
31.173.236.0/23 maxlen: 23
195.5.128.0/19 maxlen: 24
37.29.43.0/24 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
83.149.52.0/22 maxlen: 22
83.169.230.0/24 maxlen: 24
83.169.228.0/23 maxlen: 23
83.169.227.0/24 maxlen: 24
83.169.226.0/24 maxlen: 24
83.169.224.0/23 maxlen: 23
188.162.0.0/16 maxlen: 24
85.26.244.0/22 maxlen: 22
85.26.247.0/24 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f2:43:d2:9b:5d:77:2b:1e:26:2e:96:da:7e:0e:b5:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 15:04:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98268058e62090eb69df097d956e5b04eb0881f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:53:6b:4c:e2:4e:c8:c1:30:bc:3f:c5:c7:47:
1f:1d:9a:b4:12:35:75:b0:ea:62:2d:47:70:4e:61:
ba:3e:b6:ad:d7:5f:3d:72:3a:8c:a9:a3:b0:d3:c9:
d4:fb:f5:6a:17:37:96:b9:5e:16:1b:cc:dd:3b:b9:
eb:61:8b:83:46:2b:50:de:99:a7:32:61:01:d7:90:
18:c0:bb:c6:84:5d:bc:98:fd:78:24:c4:01:04:38:
df:c3:64:fc:ad:76:5e:4d:c9:55:21:66:08:81:7a:
1f:01:67:82:1a:77:78:14:b6:d5:05:78:05:23:60:
c1:88:0c:75:94:46:4a:af:ff:cb:04:d9:49:c7:16:
16:f8:e8:f6:9a:db:ad:bd:04:4d:4a:f3:11:87:6d:
4e:6d:1a:39:30:c2:bf:15:6f:fa:0d:c1:4e:9c:1d:
e9:d2:10:70:9e:56:30:c9:da:f2:cb:37:8a:74:f6:
66:1e:3b:d0:d1:61:5e:e8:fe:26:8c:a5:57:9d:db:
c7:76:69:46:a0:39:6d:9e:1b:70:6c:fe:d5:32:c7:
f6:f2:94:41:d4:97:4a:33:77:1f:78:e2:6f:c9:61:
72:16:21:73:b0:74:70:c0:bb:34:c5:8e:d7:a2:91:
c5:64:b1:5b:6c:0b:97:4e:25:87:a8:1b:30:86:54:
35:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:26:80:58:E6:20:90:EB:69:DF:09:7D:95:6E:5B:04:EB:08:81:F2
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/mCaAWOYgkOtp3wl9lW5bBOsIgfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.132.0/22
31.173.143.0/24
31.173.225.0-31.173.226.255
31.173.228.0-31.173.233.255
31.173.235.0-31.173.239.255
37.28.188.0/22
37.29.43.0/24
37.29.88.0/21
78.25.124.0/22
83.149.52.0/22
83.169.224.0-83.169.230.255
85.26.240.0/21
178.176.233.0-178.176.235.255
178.178.64.0-178.178.68.255
178.178.70.0-178.178.73.255
188.162.0.0/16
188.170.228.0-188.170.237.255
188.170.239.0/24
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
96:1a:f0:c7:6c:f2:9a:98:2a:32:aa:79:df:84:19:b4:02:42:
0f:ad:33:54:f5:20:c9:b5:78:0e:72:d9:67:0a:e6:04:45:59:
58:7a:b3:04:03:49:96:54:6c:32:6c:62:57:ed:12:0b:59:14:
3a:49:1a:e5:7a:42:c3:a4:f0:5f:7b:39:cd:0f:7a:f7:f6:61:
5c:08:54:08:6a:b5:85:cc:a5:b6:94:27:2b:c0:a8:f8:45:e4:
0d:2e:87:7e:b8:27:f3:50:28:ae:e2:2d:0b:ef:a8:12:13:76:
1d:43:20:a7:f2:b5:8f:35:3e:1e:53:c6:ec:6b:f1:ca:64:df:
eb:68:e6:8f:e1:5c:f8:e6:79:f6:b3:80:14:f7:86:82:4f:61:
15:6b:88:6b:a2:50:1c:29:d9:7e:b5:9c:9f:d6:3e:1e:dc:96:
fc:c0:59:f2:f0:ba:b3:50:38:d5:f0:59:62:14:94:72:24:55:
6c:8f:bb:2a:0c:30:32:38:29:68:db:e7:3c:b6:82:de:3c:e3:
00:29:23:4f:82:8c:f9:15:29:1e:64:b0:75:7f:5b:a5:ba:fb:
b5:8a:06:8d:6f:c2:be:d7:1c:37:3f:91:82:e6:24:e8:85:48:
73:40:f8:d5:87:72:f8:4e:9e:9b:ea:25:e2:18:89:af:44:0d:
e4:57:67:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:36 2024 by rpki-client on console-ams.rpki-client.org