Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/qTogiJLjta6q9oOOwJeBiB4HNkE.roa
File: qTogiJLjta6q9oOOwJeBiB4HNkE.roa (raw, json)
Hash identifier: YflveFkWNiRjUfMGg6vxJjC5v677CQRJfNpa7+Ul1s8=
Subject key identifier: A9:3A:20:88:92:E3:B5:AE:AA:F6:83:8E:C0:97:81:88:1E:07:36:41
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F1C2C1450ED780C8B4D65702F2FD3448
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/qTogiJLjta6q9oOOwJeBiB4HNkE.roa
Signing time: Thu 08 Dec 2022 12:43:03 +0000
ROA not before: Thu 08 Dec 2022 12:43:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31213
IP address blocks: 195.16.96.0/19 maxlen: 24
85.26.128.0/20 maxlen: 20
193.201.228.0/22 maxlen: 24
85.26.208.0/22 maxlen: 22
85.26.212.0/22 maxlen: 22
109.188.128.0/17 maxlen: 17
85.26.216.0/22 maxlen: 22
85.26.220.0/22 maxlen: 22
178.23.144.0/21 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
188.170.80.0/21 maxlen: 21
78.25.120.0/22 maxlen: 22
188.170.92.0/22 maxlen: 22
212.69.96.0/19 maxlen: 24
37.28.160.0/21 maxlen: 21
185.210.140.0/22 maxlen: 24
37.28.168.0/21 maxlen: 21
212.119.160.0/19 maxlen: 24
78.25.96.0/21 maxlen: 21
78.25.104.0/22 maxlen: 22
188.170.68.0/24 maxlen: 24
188.170.65.0/24 maxlen: 24
188.170.66.0/24 maxlen: 24
188.170.67.0/24 maxlen: 24
78.25.108.0/22 maxlen: 22
188.170.72.0/21 maxlen: 21
94.25.228.0/23 maxlen: 23
94.25.232.0/21 maxlen: 21
37.29.71.0/24 maxlen: 24
37.29.68.0/23 maxlen: 23
37.29.70.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
94.25.208.0/22 maxlen: 22
37.29.48.0/21 maxlen: 21
37.29.56.0/21 maxlen: 21
94.25.216.0/21 maxlen: 21
94.25.224.0/21 maxlen: 21
37.29.64.0/22 maxlen: 22
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
85.26.248.0/22 maxlen: 22
85.26.252.0/22 maxlen: 22
213.243.64.0/18 maxlen: 24
83.149.0.0/21 maxlen: 21
217.115.80.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:c2:c1:45:0e:d7:80:c8:b4:d6:57:02:f2:fd:34:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 12:43:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a93a208892e3b5aeaaf6838ec09781881e073641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c4:3d:c1:99:bd:a7:c8:e1:1a:2e:d4:cb:7c:
5c:4c:76:aa:d6:f7:2e:b8:f8:37:a5:91:26:c8:a0:
59:1f:5c:b0:20:1d:df:51:bf:fa:fd:18:d8:eb:b0:
b8:95:f4:df:7c:0b:f5:16:c6:e8:74:b5:2e:e9:80:
38:a6:5e:43:70:35:04:13:c6:dd:8b:92:f1:40:f8:
9e:be:bd:d5:d0:cf:7e:48:63:95:c6:75:66:5f:5d:
c2:3a:3d:63:cf:7a:42:55:73:d9:ec:23:18:2c:f1:
8c:5c:e8:ed:0f:9f:44:f0:6d:33:50:5a:03:3d:5f:
11:2b:82:6e:f0:28:5e:4e:22:e9:71:27:c0:77:8d:
c6:e7:e5:f8:bb:38:66:00:22:8d:96:1a:5b:c9:95:
ea:55:ca:2c:73:7c:eb:d3:37:c9:ac:31:2b:23:45:
3d:a7:b0:e0:ce:af:37:90:b6:6a:5e:af:91:ed:78:
b0:fa:ea:97:44:9e:73:58:67:e0:3c:7d:38:00:1b:
c0:a2:cd:b1:88:8e:a9:41:63:c6:b6:ca:8b:e6:52:
c6:32:e1:9d:e1:c6:cd:66:a0:4f:ce:9e:c8:67:ac:
73:cc:78:75:0a:41:72:aa:d1:55:73:26:ea:02:e0:
cc:85:68:c6:6b:49:63:e4:be:7d:be:d6:24:dd:f1:
91:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3A:20:88:92:E3:B5:AE:AA:F6:83:8E:C0:97:81:88:1E:07:36:41
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/qTogiJLjta6q9oOOwJeBiB4HNkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.28.160.0/20
37.29.48.0-37.29.71.255
78.25.96.0/20
78.25.120.0/22
83.149.0.0/21
85.26.128.0/20
85.26.208.0/20
85.26.248.0/21
94.25.208.0/22
94.25.216.0-94.25.239.255
109.188.128.0/17
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.65.0-188.170.68.255
188.170.72.0-188.170.87.255
188.170.92.0/22
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
8a:84:b9:7f:4d:e6:00:ec:b5:f2:64:c9:e7:9d:50:d6:8c:e7:
12:83:08:e0:3e:cc:23:ed:12:32:28:95:b4:84:70:95:e5:cd:
ed:70:9d:c7:ba:ac:a1:b1:0b:1c:bc:a1:46:3e:80:96:72:12:
5a:d5:00:4b:df:99:d0:4f:05:85:98:ec:ba:6a:f9:eb:15:60:
34:51:0b:de:f2:d4:d1:11:c8:75:00:ac:00:04:5f:ec:ff:34:
03:22:11:74:78:ad:ac:09:07:82:3f:2c:b4:83:b5:44:84:21:
95:ad:08:3c:de:a2:cf:95:2e:c0:82:7d:71:ac:0a:e4:aa:31:
a7:b0:e7:a9:ec:ea:d0:6a:5b:02:04:b7:67:3a:c4:e7:0f:1b:
1c:e9:fa:d3:a6:0d:6f:65:81:f9:7a:a1:11:1a:18:58:14:99:
44:ba:df:ed:40:14:9b:57:c7:bb:85:d0:b0:3c:af:06:1a:63:
23:a3:9a:11:49:00:c6:34:37:ab:6b:fe:1e:37:e9:ec:7f:d6:
d0:b3:18:ed:6e:81:50:58:c8:e1:89:9c:4a:65:0d:d7:fe:35:
69:ca:a8:40:36:a0:db:95:94:7b:ae:f4:2d:a6:70:70:c3:b6:
52:f3:38:ae:6d:13:db:8a:8b:c5:9e:cc:9c:34:f9:11:1c:74:
17:fa:78:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:36 2024 by rpki-client on console-ams.rpki-client.org