Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/qWnBRxAuB1UECXLdhdrQzCRYpy4.roa
File: qWnBRxAuB1UECXLdhdrQzCRYpy4.roa (raw, json)
Hash identifier: EHmvEq6E7PdIGGJ2U8LFPg+R6J9xDJHfR3fs4rtGPNQ=
Subject key identifier: A9:69:C1:47:10:2E:07:55:04:09:72:DD:85:DA:D0:CC:24:58:A7:2E
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01840EC5C2E38D29B527EBED2BD6AFBE3184
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/qWnBRxAuB1UECXLdhdrQzCRYpy4.roa
Signing time: Tue 25 Oct 2022 10:52:32 +0000
ROA not before: Tue 25 Oct 2022 10:52:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31224
IP address blocks: 109.188.0.0/16 maxlen: 24
46.29.192.0/21 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
37.29.0.0/17 maxlen: 24
78.25.64.0/18 maxlen: 24
31.173.123.0/24 maxlen: 24
31.173.122.0/24 maxlen: 24
37.28.160.0/19 maxlen: 24
31.173.121.0/24 maxlen: 24
31.173.125.0/24 maxlen: 24
31.173.120.0/24 maxlen: 24
31.173.124.0/24 maxlen: 24
31.173.127.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
31.173.126.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
77.233.160.0/19 maxlen: 24
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 24
31.173.96.0/24 maxlen: 24
31.173.97.0/24 maxlen: 24
31.173.102.0/24 maxlen: 24
31.173.99.0/24 maxlen: 24
31.173.103.0/24 maxlen: 24
31.173.100.0/24 maxlen: 24
31.173.100.0/23 maxlen: 23
31.173.101.0/24 maxlen: 24
83.169.192.0/18 maxlen: 24
109.74.112.0/20 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
46.232.200.0/21 maxlen: 24
62.64.0.0/19 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
46.229.128.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0e:c5:c2:e3:8d:29:b5:27:eb:ed:2b:d6:af:be:31:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 25 10:52:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a969c147102e0755040972dd85dad0cc2458a72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:91:ab:3e:a1:f5:9a:97:2a:61:09:77:d0:bf:
17:e7:db:27:77:8d:a8:b4:9b:3e:95:12:f3:80:09:
f3:4e:58:ef:c6:e4:94:62:17:7b:0f:55:9c:48:5b:
af:25:0f:7e:59:bf:8d:24:6e:d3:f4:c5:d0:4e:d4:
25:2b:f9:64:0d:3d:ef:43:ab:15:be:0e:48:74:88:
b1:e8:48:ba:ad:32:cb:c1:b8:22:a1:a1:98:b4:a7:
14:1b:46:6c:de:a6:66:81:ad:0f:ad:85:54:2e:e3:
7d:38:12:3c:0a:07:cd:d5:7b:2f:85:2e:be:1b:40:
64:23:ef:c5:8f:5f:44:d5:f7:b0:9e:ae:48:2a:22:
25:db:d5:cc:c1:1a:8e:83:cc:ac:e8:c6:55:b5:66:
0f:e2:61:9b:63:87:52:74:de:54:e0:fd:31:2f:25:
be:fc:68:f8:f8:86:12:e9:b2:e0:36:c3:5b:e7:2f:
ee:91:45:bf:80:15:89:c8:9c:f2:42:7d:ee:29:09:
b6:7c:cb:30:96:18:88:d0:50:f1:a7:3f:1d:d6:1a:
86:35:36:9c:9f:f7:00:1f:80:70:31:35:6a:f8:9d:
41:ae:00:56:82:2a:f7:b7:f6:b0:ba:ac:f9:50:f7:
04:63:f3:96:5f:75:14:2d:42:c9:73:76:75:b8:04:
c8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:69:C1:47:10:2E:07:55:04:09:72:DD:85:DA:D0:CC:24:58:A7:2E
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/qWnBRxAuB1UECXLdhdrQzCRYpy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.96.0/23
31.173.99.0-31.173.103.255
31.173.120.0/21
37.28.160.0/19
37.29.0.0/17
46.29.192.0/21
46.229.128.0/20
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
a8:ca:d3:78:4b:25:35:98:9d:a4:09:5e:01:04:dd:b8:db:aa:
d9:88:29:a2:3d:21:c3:88:4f:c5:7f:8e:8d:4d:a2:36:37:46:
0f:e5:1b:90:d8:5e:a0:2a:8e:5c:6d:9c:8e:83:d8:5a:f4:d5:
83:df:10:df:91:14:61:44:b4:e5:aa:28:91:ed:25:d3:b2:a0:
fa:a0:67:dd:5d:1c:60:0a:49:03:cb:b4:a6:1c:8f:0c:46:58:
94:a4:6a:87:38:d5:c7:a1:de:72:7d:b3:d1:13:e0:b7:71:9e:
f5:d6:71:74:6e:d2:f1:82:cb:99:75:21:5d:1a:eb:af:9e:55:
a2:95:b3:5e:34:fa:a4:68:2e:df:90:e8:0e:e9:a8:7c:3c:9e:
14:58:7b:8a:57:de:ae:2b:6c:1e:e2:9f:1f:d3:61:e9:4f:57:
50:6c:ae:93:52:1d:e2:79:83:c8:13:28:e7:0a:e7:cd:39:0c:
56:47:73:89:ac:c3:20:b3:a0:28:2a:6d:4b:0c:77:79:c6:35:
19:20:ff:5e:da:b0:fd:b1:b7:6d:29:83:db:d9:60:1f:c6:36:
7c:c2:07:59:70:f0:99:16:6c:e3:cc:08:a5:f0:c7:a2:2d:3b:
34:be:03:fb:96:b2:40:41:84:90:a5:12:69:f9:c9:35:16:ae:
97:f4:76:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:25 2025 by rpki-client