Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/qB-kNJjWYJt261twlih_OhNjR3Y.roa
File: qB-kNJjWYJt261twlih_OhNjR3Y.roa (raw, json)
Hash identifier: 2Lv7/++FtXC3sX+3IX3sJC6/bRiQgp+I8mBT5Xo6zLI=
Subject key identifier: A8:1F:A4:34:98:D6:60:9B:76:EB:5B:70:96:28:7F:3A:13:63:47:76
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184CD51303A85096FBF9B904AA17247F691
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/qB-kNJjWYJt261twlih_OhNjR3Y.roa
Signing time: Thu 01 Dec 2022 10:52:40 +0000
ROA not before: Thu 01 Dec 2022 10:52:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25159
IP address blocks: 109.188.0.0/16 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
78.25.64.0/18 maxlen: 24
188.170.25.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
188.170.32.0/21 maxlen: 21
188.170.40.0/21 maxlen: 21
37.28.176.0/21 maxlen: 21
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
178.177.0.0/18 maxlen: 18
178.177.3.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
37.29.32.0/21 maxlen: 21
95.137.0.0/17 maxlen: 24
178.176.52.0/22 maxlen: 22
178.176.72.0/21 maxlen: 21
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
31.173.0.0/21 maxlen: 21
31.173.8.0/21 maxlen: 21
178.176.0.0/19 maxlen: 19
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
178.176.32.0/21 maxlen: 21
78.41.100.0/22 maxlen: 24
178.176.40.0/21 maxlen: 21
31.173.72.0/21 maxlen: 21
31.173.80.0/21 maxlen: 21
31.173.88.0/21 maxlen: 21
188.170.0.0/19 maxlen: 19
188.170.24.0/24 maxlen: 24
31.173.16.0/21 maxlen: 21
31.173.24.0/21 maxlen: 21
31.173.32.0/19 maxlen: 19
83.169.192.0/18 maxlen: 24
31.173.60.0/24 maxlen: 24
31.173.64.0/21 maxlen: 21
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 24
62.64.0.0/20 maxlen: 20
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
46.229.128.0/22 maxlen: 22
212.44.64.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cd:51:30:3a:85:09:6f:bf:9b:90:4a:a1:72:47:f6:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 1 10:52:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a81fa43498d6609b76eb5b7096287f3a13634776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3b:d4:a3:da:91:81:5b:f8:90:fb:83:63:77:
df:5b:f6:50:89:20:49:60:25:01:dc:3d:fd:5d:c2:
ee:37:0b:44:fd:65:6b:b0:2c:7a:b7:8e:aa:84:8c:
72:c7:96:1a:6a:68:2a:32:ed:04:f9:04:c0:12:70:
0a:63:69:97:02:68:8e:f8:a2:28:60:2e:66:40:bf:
85:b7:f1:5f:7c:1d:ae:81:64:9d:b7:88:cf:27:f5:
b1:1c:17:3c:8c:31:c0:dc:be:25:73:ea:bb:3b:e6:
11:6d:8a:52:a3:7a:6d:98:7f:df:8f:a4:17:19:cb:
b3:61:f8:97:37:cc:54:d0:5c:f1:1f:8b:47:d3:f6:
ea:bc:ff:3f:3e:f6:b5:25:b1:dc:7c:9e:d7:15:a9:
36:5e:97:f4:b9:56:94:5b:6f:82:1e:c2:be:af:6b:
b2:4c:23:20:19:ae:1a:f7:e8:b6:03:f6:be:df:c7:
61:ed:5d:bc:57:36:ad:af:9d:7e:06:d2:91:85:62:
97:0b:ff:ae:01:04:10:02:fd:ed:c3:7f:c1:f8:66:
a7:c6:e0:c0:3f:64:df:1e:37:a1:c0:a4:7c:9e:fa:
ce:45:60:9e:68:7a:e6:9f:8d:8c:d0:4b:b8:04:cb:
34:b1:68:6f:ae:54:18:5c:eb:bb:90:df:10:3a:81:
3a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1F:A4:34:98:D6:60:9B:76:EB:5B:70:96:28:7F:3A:13:63:47:76
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/qB-kNJjWYJt261twlih_OhNjR3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.0.0-31.173.95.255
37.28.176.0/21
37.29.32.0/21
46.229.128.0/22
62.64.0.0/20
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.0.0-178.176.47.255
178.176.52.0/22
178.176.72.0/21
178.177.0.0/18
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.0.0-188.170.47.255
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
66:41:3e:e9:2a:d5:a0:39:a7:a8:ea:4f:84:5e:c4:79:82:b1:
d3:63:59:b8:84:94:c6:34:04:dc:4b:07:80:b2:38:e1:da:d1:
4b:90:73:ab:51:b0:f1:de:27:b4:6e:2e:6a:6e:4f:be:63:3d:
72:19:54:3a:fb:25:b6:23:fd:75:ef:27:83:b4:9a:33:e7:b6:
05:91:68:f9:1c:fd:68:34:a2:78:ea:42:6c:66:eb:d5:3b:51:
4c:0d:07:ee:d4:58:7f:d0:f9:f7:1d:07:e0:aa:76:31:d7:df:
ce:2f:e1:e6:cb:1b:d1:05:1a:44:e1:0b:d8:7f:a0:96:99:ba:
be:01:5c:7e:98:e1:1d:9c:6d:c6:a2:91:26:8c:84:ea:c2:95:
58:98:cb:be:3f:2c:ed:44:40:90:36:e3:ef:3f:12:ef:5e:aa:
11:0e:49:e0:89:c5:7b:c5:40:d9:05:78:e3:4d:c5:3d:35:d9:
12:38:39:8a:ff:5f:e3:e3:21:7b:16:fb:b9:1b:43:b8:0f:fd:
b7:0e:bb:18:67:b5:ec:50:1e:3a:74:ae:ed:f7:86:30:3b:75:
ed:08:b3:b9:70:6c:4f:2a:6e:c7:b0:c7:74:ad:27:1b:d7:d4:
a0:34:f1:a2:15:94:db:a0:61:18:cf:32:f4:68:ec:77:05:67:
31:00:6f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:26 2024 by rpki-client on console-fra.rpki-client.org