Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/mi9zBagmLf_Rb7V-H4f0iuTEIIw.roa
File: mi9zBagmLf_Rb7V-H4f0iuTEIIw.roa (raw, json)
Hash identifier: C5ZtQwydjpebyYZmvqV36OrD5v1oZ4Ro6fzdR/VagzI=
Subject key identifier: 9A:2F:73:05:A8:26:2D:FF:D1:6F:B5:7E:1F:87:F4:8A:E4:C4:20:8C
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184C7D3E68734032C352CF1FB242E52C20D
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/mi9zBagmLf_Rb7V-H4f0iuTEIIw.roa
Signing time: Wed 30 Nov 2022 09:17:43 +0000
ROA not before: Wed 30 Nov 2022 09:17:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31224
IP address blocks: 109.188.0.0/16 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
193.201.228.0/22 maxlen: 24
178.178.88.0/22 maxlen: 22
178.178.92.0/22 maxlen: 22
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
78.25.64.0/18 maxlen: 24
31.173.122.0/24 maxlen: 24
31.173.125.0/24 maxlen: 24
31.173.120.0/24 maxlen: 24
31.173.123.0/24 maxlen: 24
31.173.121.0/24 maxlen: 24
31.173.124.0/24 maxlen: 24
31.173.127.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
31.173.126.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
37.29.44.0/22 maxlen: 22
95.137.0.0/17 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
178.176.104.0/21 maxlen: 21
83.149.32.0/22 maxlen: 22
83.149.36.0/22 maxlen: 22
83.149.34.0/24 maxlen: 24
83.149.37.0/24 maxlen: 24
81.24.128.0/20 maxlen: 24
83.149.39.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 24
31.173.96.0/24 maxlen: 24
31.173.97.0/24 maxlen: 24
31.173.103.0/24 maxlen: 24
31.173.101.0/24 maxlen: 24
31.173.102.0/24 maxlen: 24
31.173.99.0/24 maxlen: 24
31.173.100.0/24 maxlen: 24
31.173.100.0/23 maxlen: 23
178.176.112.0/24 maxlen: 24
178.176.113.0/24 maxlen: 24
83.169.192.0/18 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
46.229.132.0/22 maxlen: 22
83.229.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c7:d3:e6:87:34:03:2c:35:2c:f1:fb:24:2e:52:c2:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Nov 30 09:17:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a2f7305a8262dffd16fb57e1f87f48ae4c4208c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1c:af:fc:df:63:67:82:67:08:63:47:07:87:
81:f8:b9:93:b6:0b:54:fb:77:79:cf:70:fa:3b:f1:
af:c8:35:88:6c:72:4b:d3:c3:22:bf:b2:88:3d:01:
0c:cf:d1:6b:05:30:98:e5:24:47:ff:9d:96:0c:f7:
40:47:45:eb:fa:86:89:ad:2c:a7:bc:a1:be:ba:91:
e6:30:85:89:a3:70:b2:06:92:1b:ba:ce:77:2d:19:
da:e0:fe:4a:d6:9e:ea:4c:06:8c:2c:ee:b9:4a:5a:
bf:7e:69:6a:c1:7a:71:dc:66:27:a1:2a:3f:11:94:
64:c2:d9:98:66:0c:9e:6c:72:55:59:d0:b6:a3:3c:
02:39:e0:e2:38:ee:37:44:41:b0:35:f5:92:7a:00:
fa:f6:06:2a:9b:89:fb:d6:d7:2f:f2:27:e2:d3:53:
fb:24:e0:bd:a9:84:76:b3:fa:98:db:70:ad:ba:9d:
f3:30:04:8c:67:fb:44:e7:07:b1:62:a3:78:d1:c5:
23:1e:d7:3f:d2:c5:a3:62:5d:fc:53:d8:ab:72:76:
7e:55:0b:61:e4:27:0b:c2:6d:9d:d2:f6:f8:ac:ca:
fe:c6:91:1c:8b:70:6c:b0:84:69:0c:18:39:a6:23:
e0:0a:15:55:de:05:6a:e1:f4:3f:f2:04:74:4d:16:
7e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2F:73:05:A8:26:2D:FF:D1:6F:B5:7E:1F:87:F4:8A:E4:C4:20:8C
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/mi9zBagmLf_Rb7V-H4f0iuTEIIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.96.0/23
31.173.99.0-31.173.103.255
31.173.120.0/21
37.29.44.0/22
46.229.132.0/22
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.149.32.0/21
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.104.0-178.176.113.255
178.178.88.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
3c:59:85:49:7a:37:94:d7:21:54:05:7b:60:0b:2c:dd:bf:dc:
de:89:47:8c:c1:25:6f:ba:8e:ce:df:fd:dd:3f:d6:82:f3:25:
09:66:ae:d8:ef:ad:93:d9:53:00:4e:e5:50:e4:9c:3a:e6:e1:
df:d0:32:e7:4d:48:ba:e6:7f:c4:64:b9:5e:20:d4:ac:67:e2:
a9:a8:b9:81:d8:2d:ca:61:9b:1f:85:57:cd:2b:cb:21:a6:5e:
c3:ed:b1:29:1b:72:98:28:28:c9:03:c9:b1:4c:f7:2c:a9:24:
fd:a2:9b:61:00:d3:c0:e7:18:39:64:29:b5:a7:85:0b:30:9e:
dd:ff:b9:a2:29:25:3c:b2:d0:1c:8d:e9:fb:1e:83:4e:cc:f4:
e2:a7:a6:3e:91:61:4f:bd:bf:cf:aa:85:b5:ba:5d:88:b4:38:
60:e1:7e:50:22:a8:f5:20:e1:e2:7a:f8:27:bb:5f:be:d1:72:
54:3c:d4:62:0d:5a:e0:f0:a7:e0:5b:02:c8:0a:af:3a:c6:ab:
91:e1:ff:20:f8:41:eb:5c:6f:b5:dc:28:3e:8f:4e:8a:3a:c2:
2c:cd:14:27:03:db:2e:ff:5b:77:39:1a:ec:90:84:d7:bf:6c:
7d:98:3c:15:a3:fa:6b:5a:6d:6e:39:eb:b8:f7:dd:e7:72:84:
58:e1:1c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:26 2024 by rpki-client on console-fra.rpki-client.org