Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/pvbvzueFBmxC7MyoDBCwcak-Of4.roa
File: pvbvzueFBmxC7MyoDBCwcak-Of4.roa (raw, json)
Hash identifier: rvNVjKQEypUIlbUEI/beq+hUktEDOnu9wCGmiENF448=
Subject key identifier: A6:F6:EF:CE:E7:85:06:6C:42:EC:CC:A8:0C:10:B0:71:A9:3E:39:FE
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0185061717BC0BD63C5BA345EEB26D0E3072
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/pvbvzueFBmxC7MyoDBCwcak-Of4.roa
Signing time: Mon 12 Dec 2022 11:27:34 +0000
ROA not before: Mon 12 Dec 2022 11:27:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29648
IP address blocks: 31.173.119.0/24 maxlen: 24
77.233.160.0/19 maxlen: 19
77.233.161.0/24 maxlen: 24
77.233.164.0/24 maxlen: 24
77.233.160.0/24 maxlen: 24
77.233.162.0/24 maxlen: 24
77.233.166.0/24 maxlen: 24
77.233.167.0/24 maxlen: 24
77.233.170.0/24 maxlen: 24
31.173.104.0/24 maxlen: 24
31.173.105.0/24 maxlen: 24
31.173.112.0/24 maxlen: 24
31.173.108.0/24 maxlen: 24
31.173.109.0/24 maxlen: 24
31.173.110.0/24 maxlen: 24
31.173.106.0/24 maxlen: 24
31.173.111.0/24 maxlen: 24
31.173.107.0/24 maxlen: 24
31.173.116.0/24 maxlen: 24
31.173.113.0/24 maxlen: 24
31.173.117.0/24 maxlen: 24
31.173.114.0/24 maxlen: 24
31.173.118.0/24 maxlen: 24
31.173.115.0/24 maxlen: 24
77.233.173.0/24 maxlen: 24
77.233.178.0/24 maxlen: 24
77.233.185.0/24 maxlen: 24
77.233.181.0/24 maxlen: 24
77.233.180.0/24 maxlen: 24
77.233.186.0/24 maxlen: 24
77.233.182.0/24 maxlen: 24
77.233.188.0/24 maxlen: 24
77.233.191.0/24 maxlen: 24
77.233.190.0/24 maxlen: 24
188.170.98.0/24 maxlen: 24
86.109.192.0/19 maxlen: 19
86.109.192.0/20 maxlen: 20
188.170.96.0/24 maxlen: 24
188.170.97.0/24 maxlen: 24
188.170.102.0/24 maxlen: 24
86.109.193.0/24 maxlen: 24
188.170.103.0/24 maxlen: 24
188.170.99.0/24 maxlen: 24
188.170.100.0/24 maxlen: 24
188.170.104.0/24 maxlen: 24
86.109.195.0/24 maxlen: 24
188.170.101.0/24 maxlen: 24
188.170.105.0/24 maxlen: 24
188.170.110.0/24 maxlen: 24
188.170.106.0/24 maxlen: 24
188.170.111.0/24 maxlen: 24
188.170.107.0/24 maxlen: 24
86.109.200.0/23 maxlen: 23
188.170.108.0/24 maxlen: 24
188.170.109.0/24 maxlen: 24
188.170.112.0/24 maxlen: 24
188.170.114.0/24 maxlen: 24
86.109.213.0/24 maxlen: 24
188.170.115.0/24 maxlen: 24
188.170.116.0/24 maxlen: 24
86.109.212.0/24 maxlen: 24
86.109.208.0/24 maxlen: 24
188.170.118.0/24 maxlen: 24
188.170.117.0/24 maxlen: 24
188.170.113.0/24 maxlen: 24
86.109.210.0/24 maxlen: 24
188.170.119.0/24 maxlen: 24
188.170.123.0/24 maxlen: 24
86.109.216.0/24 maxlen: 24
188.170.122.0/24 maxlen: 24
86.109.215.0/24 maxlen: 24
86.109.218.0/23 maxlen: 23
188.170.125.0/24 maxlen: 24
188.170.121.0/24 maxlen: 24
188.170.120.0/24 maxlen: 24
86.109.214.0/24 maxlen: 24
188.170.124.0/24 maxlen: 24
188.170.127.0/24 maxlen: 24
86.109.220.0/24 maxlen: 24
188.170.126.0/24 maxlen: 24
86.109.223.0/24 maxlen: 24
86.109.222.0/24 maxlen: 24
78.109.120.0/24 maxlen: 24
78.109.121.0/24 maxlen: 24
178.176.98.0/24 maxlen: 24
195.149.111.0/24 maxlen: 24
178.176.96.0/24 maxlen: 24
178.176.97.0/24 maxlen: 24
178.176.102.0/24 maxlen: 24
178.176.103.0/24 maxlen: 24
178.176.99.0/24 maxlen: 24
178.176.100.0/24 maxlen: 24
178.176.101.0/24 maxlen: 24
178.176.118.0/24 maxlen: 24
178.176.114.0/24 maxlen: 24
178.176.115.0/24 maxlen: 24
178.176.116.0/24 maxlen: 24
178.176.117.0/24 maxlen: 24
178.176.122.0/24 maxlen: 24
178.176.123.0/24 maxlen: 24
178.176.119.0/24 maxlen: 24
178.176.124.0/24 maxlen: 24
178.176.120.0/24 maxlen: 24
178.176.125.0/24 maxlen: 24
178.176.121.0/24 maxlen: 24
178.176.126.0/24 maxlen: 24
178.176.127.0/24 maxlen: 24
83.169.217.0/24 maxlen: 24
83.169.218.0/24 maxlen: 24
83.169.219.0/24 maxlen: 24
83.169.220.0/24 maxlen: 24
83.169.221.0/24 maxlen: 24
83.169.222.0/24 maxlen: 24
83.169.223.0/24 maxlen: 24
188.94.168.0/24 maxlen: 24
188.94.172.0/24 maxlen: 24
188.94.169.0/24 maxlen: 24
188.94.170.0/24 maxlen: 24
188.94.171.0/24 maxlen: 24
188.94.173.0/24 maxlen: 24
188.94.174.0/24 maxlen: 24
188.94.175.0/24 maxlen: 24
217.115.80.0/20 maxlen: 20
217.115.81.0/24 maxlen: 24
217.115.80.0/24 maxlen: 24
217.115.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:06:17:17:bc:0b:d6:3c:5b:a3:45:ee:b2:6d:0e:30:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 11:27:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6f6efcee785066c42eccca80c10b071a93e39fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fd:f9:b5:12:be:96:23:a4:4c:a1:fa:14:85:
ec:80:20:11:93:7c:80:a9:5a:c2:bf:48:e1:8e:e0:
d0:38:ed:2a:98:6b:26:d0:4f:98:ad:b0:f3:91:d9:
cf:b8:62:98:3f:07:c7:47:39:af:8a:6e:9c:a1:84:
26:57:c9:e7:e9:45:15:05:8c:51:7c:c6:7c:f4:a6:
fa:1e:f0:24:b6:f3:9f:92:20:b1:26:84:6c:3f:0f:
fd:0c:46:ab:76:73:a1:c0:33:98:8f:41:21:a7:7e:
95:06:e4:bc:c8:7a:fb:e2:b7:1c:db:ce:12:ba:ed:
94:a1:10:06:21:b9:1d:35:73:7b:0a:46:c6:ce:02:
ce:e3:94:2c:e5:de:51:b9:16:bd:28:56:a5:56:f8:
ad:9f:96:9c:35:16:b5:6a:e0:e2:56:3a:82:b4:2d:
6a:7e:75:59:64:89:a1:a9:14:82:34:bf:81:dd:9c:
97:df:9d:66:53:a9:b2:26:9d:4b:07:3c:16:ca:21:
c5:33:f8:93:db:ec:3f:d4:01:48:e4:31:28:71:ad:
35:d6:62:ca:92:ee:11:d0:44:20:87:c5:39:d2:94:
e1:82:12:ee:cd:bb:d8:c9:a1:5c:99:44:2b:2a:2e:
03:a0:4f:43:e3:6e:4f:4c:ca:1f:20:a0:3a:cc:f5:
b3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F6:EF:CE:E7:85:06:6C:42:EC:CC:A8:0C:10:B0:71:A9:3E:39:FE
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/pvbvzueFBmxC7MyoDBCwcak-Of4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.104.0-31.173.119.255
77.233.160.0/19
78.109.120.0/23
83.169.217.0-83.169.223.255
86.109.192.0/19
178.176.96.0/21
178.176.114.0-178.176.127.255
188.94.168.0/21
188.170.96.0/19
195.149.111.0/24
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
9f:4b:5d:8c:04:cb:1e:62:5e:e0:42:65:0b:90:d6:98:97:80:
18:5a:52:1f:85:6e:6e:53:4f:19:d8:c0:e3:20:e9:33:23:75:
7b:6d:2c:5d:51:38:dd:d5:83:e1:9b:ff:0a:09:06:96:fd:1f:
84:b2:82:74:0c:40:24:71:1b:92:fb:35:5e:ad:91:22:18:0d:
e4:d0:13:a2:fb:af:01:7f:1f:86:58:9c:c8:0a:f1:ab:b0:c8:
93:17:91:15:73:40:4a:05:5e:e4:ba:f6:12:ba:70:66:b6:f5:
34:ca:eb:b8:c1:3b:9d:4d:94:09:79:39:dc:b1:5e:8c:32:3c:
01:ef:18:6f:67:91:20:92:48:69:34:49:a1:78:5a:66:51:89:
0a:b2:68:71:2a:2b:72:0c:a5:59:36:8f:8e:31:db:ff:1a:36:
b7:61:9e:b7:11:99:a8:f1:a4:d0:92:79:b6:79:bd:11:1f:e8:
d8:69:5c:d8:c8:61:6c:7f:c0:a3:6a:ab:b2:1f:a8:bb:5b:a6:
12:72:48:f9:c4:7e:a4:60:de:73:42:1a:c0:87:d7:2a:43:85:
40:3a:e3:bc:48:a7:bf:40:09:da:54:50:9f:a3:bf:7f:4f:4c:
26:ff:50:d5:a9:cb:c1:29:d4:e6:15:80:e5:87:ca:1b:01:61:
cf:65:d2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:48:15 2025 by rpki-client