Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/oHbXNsxJauLInkl5dUxFNFQUmt0.roa
File: oHbXNsxJauLInkl5dUxFNFQUmt0.roa (raw, json)
Hash identifier: 6NzLBnVJvhFAtAmjK53x45a/2A6JL1UXUYiKi69kSeU=
Subject key identifier: A0:76:D7:36:CC:49:6A:E2:C8:9E:49:79:75:4C:45:34:54:14:9A:DD
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F219E38B5E97E41AD4F7027716178324
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/oHbXNsxJauLInkl5dUxFNFQUmt0.roa
Signing time: Thu 08 Dec 2022 14:18:13 +0000
ROA not before: Thu 08 Dec 2022 14:18:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31195
IP address blocks: 195.16.96.0/19 maxlen: 24
193.201.228.0/22 maxlen: 24
85.26.240.0/22 maxlen: 22
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
178.178.64.0/24 maxlen: 24
178.178.71.0/24 maxlen: 24
178.178.67.0/24 maxlen: 24
178.178.70.0/24 maxlen: 24
178.178.66.0/24 maxlen: 24
178.178.65.0/24 maxlen: 24
178.178.68.0/24 maxlen: 24
178.178.73.0/24 maxlen: 24
178.178.72.0/24 maxlen: 24
78.25.124.0/22 maxlen: 22
78.25.127.0/24 maxlen: 24
212.69.96.0/19 maxlen: 24
31.173.225.0/24 maxlen: 24
31.173.226.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
31.173.132.0/23 maxlen: 23
31.173.134.0/23 maxlen: 23
31.173.135.0/24 maxlen: 24
178.176.233.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
178.176.235.0/24 maxlen: 24
178.176.234.0/24 maxlen: 24
31.173.143.0/24 maxlen: 24
37.28.190.0/24 maxlen: 24
37.28.188.0/22 maxlen: 22
37.28.191.0/24 maxlen: 24
37.29.91.0/24 maxlen: 24
37.29.88.0/22 maxlen: 22
37.29.89.0/24 maxlen: 24
37.29.95.0/24 maxlen: 24
37.29.94.0/24 maxlen: 24
37.29.92.0/22 maxlen: 22
188.170.232.0/24 maxlen: 24
188.170.233.0/24 maxlen: 24
188.170.230.0/24 maxlen: 24
188.170.231.0/24 maxlen: 24
188.170.228.0/23 maxlen: 23
188.170.236.0/24 maxlen: 24
188.170.237.0/24 maxlen: 24
188.170.234.0/24 maxlen: 24
188.170.239.0/24 maxlen: 24
188.170.235.0/24 maxlen: 24
31.173.230.0/24 maxlen: 24
31.173.231.0/24 maxlen: 24
31.173.228.0/23 maxlen: 23
31.173.232.0/23 maxlen: 23
31.173.228.0/24 maxlen: 24
31.173.229.0/24 maxlen: 24
31.173.238.0/24 maxlen: 24
31.173.235.0/24 maxlen: 24
31.173.239.0/24 maxlen: 24
31.173.236.0/23 maxlen: 23
195.5.128.0/19 maxlen: 24
37.29.43.0/24 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
83.149.52.0/22 maxlen: 22
83.169.230.0/24 maxlen: 24
83.169.228.0/23 maxlen: 23
83.169.227.0/24 maxlen: 24
83.169.226.0/24 maxlen: 24
83.169.224.0/23 maxlen: 23
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
85.26.244.0/22 maxlen: 22
85.26.247.0/24 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f2:19:e3:8b:5e:97:e4:1a:d4:f7:02:77:16:17:83:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 14:18:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a076d736cc496ae2c89e4979754c453454149add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6b:16:f6:c7:00:25:34:05:c1:c7:88:d7:d7:
97:9b:a1:0d:46:35:2b:0d:a9:82:47:6c:49:6e:c0:
6a:84:9e:75:2d:4d:b7:b2:df:49:e6:0e:1c:5c:5d:
3f:7e:e8:ad:7a:29:52:4c:45:ec:c8:73:88:1f:b6:
53:77:ff:b8:60:6a:f2:b6:81:8c:35:e4:46:ed:22:
7f:4c:b0:62:a2:59:d9:3e:42:8d:4b:9f:2d:17:6e:
2d:cf:82:42:06:14:47:93:05:aa:70:93:51:7d:8a:
53:c6:14:43:f0:d2:2b:10:61:4e:bb:e3:5c:65:e3:
30:7a:dd:32:f3:a2:e7:1c:20:23:85:69:31:21:c1:
5e:80:72:23:f0:e8:8f:65:f9:e0:e3:38:6a:c0:b3:
f4:de:fa:f2:8c:2f:83:6d:b7:46:a8:f9:07:37:5c:
d0:a8:f7:bd:35:04:b4:31:2c:51:f2:6e:2b:2d:42:
d1:3f:e6:76:7c:7a:a7:5d:a7:5a:a3:d9:e1:d1:0b:
84:c7:eb:d7:02:9a:ca:10:1d:fd:12:74:0c:ad:33:
5b:15:77:7d:e7:40:68:6b:94:79:92:18:c0:75:9a:
5b:cd:ed:91:1f:6a:60:a0:47:96:3f:d1:d0:f9:69:
e9:21:cf:77:96:da:94:a2:83:19:f1:d8:19:1e:c6:
2c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:76:D7:36:CC:49:6A:E2:C8:9E:49:79:75:4C:45:34:54:14:9A:DD
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/oHbXNsxJauLInkl5dUxFNFQUmt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.132.0/22
31.173.143.0/24
31.173.225.0-31.173.226.255
31.173.228.0-31.173.233.255
31.173.235.0-31.173.239.255
37.28.188.0/22
37.29.43.0/24
37.29.88.0/21
78.25.124.0/22
83.149.52.0/22
83.169.224.0-83.169.230.255
85.26.240.0/21
178.176.233.0-178.176.235.255
178.178.64.0-178.178.68.255
178.178.70.0-178.178.73.255
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.228.0-188.170.237.255
188.170.239.0/24
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
28:18:58:80:b5:52:7b:e5:e0:d6:cc:91:f3:3f:6e:1d:c6:43:
c7:f6:d5:62:14:bf:b8:07:44:c9:0b:45:2a:fc:bf:b7:61:44:
7a:a3:20:19:63:96:e9:7b:a2:07:7c:5d:4b:f4:78:ad:7a:e0:
28:1e:59:dc:d9:c2:7c:be:31:e9:64:1e:0e:2e:c1:09:18:25:
58:1d:40:7a:7a:43:60:31:1b:d4:1c:c5:c4:56:5d:c2:be:93:
3f:52:74:47:f7:a5:60:ba:cd:ac:ce:c1:50:29:97:40:09:b8:
35:92:40:13:32:37:b7:33:d2:c7:e8:89:32:dd:82:01:d0:3d:
29:80:95:78:f4:5a:81:8d:24:5c:eb:98:b6:70:ef:ff:25:c9:
da:d7:36:67:1b:16:fa:12:4d:68:d3:49:78:52:35:14:d2:9b:
92:b7:5e:3a:83:fa:53:6b:bd:9e:26:d6:c4:03:4e:12:0a:da:
c6:26:44:8e:99:f1:ad:7e:5c:77:40:8e:fc:eb:5f:49:0e:92:
d1:d7:79:0b:cd:29:05:e4:13:15:8e:37:82:f9:3b:bd:22:b0:
dc:b0:f1:74:fa:4e:1b:ae:83:07:ee:5c:32:39:67:8f:0c:5a:
ea:76:87:77:71:29:7e:8f:b9:a8:f9:10:55:0d:09:32:4b:13:
ba:b1:1f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:35 2025 by rpki-client