Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/q_FaY5y_ZGTHcAwMsR65SS2Vy_M.roa
File: q_FaY5y_ZGTHcAwMsR65SS2Vy_M.roa (raw, json)
Hash identifier: 8FtRpD+fZ5HoKrO434LX0JyN3euhksrV2rawKI08vxw=
Subject key identifier: AB:F1:5A:63:9C:BF:64:64:C7:70:0C:0C:B1:1E:B9:49:2D:95:CB:F3
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01842D24B778D226FB916F8D2573E8DC2D51
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/q_FaY5y_ZGTHcAwMsR65SS2Vy_M.roa
Signing time: Mon 31 Oct 2022 08:24:51 +0000
ROA not before: Mon 31 Oct 2022 08:24:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25159
IP address blocks: 109.188.0.0/16 maxlen: 24
46.29.192.0/21 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
37.29.0.0/17 maxlen: 24
78.25.64.0/18 maxlen: 24
188.170.25.0/24 maxlen: 24
37.28.160.0/19 maxlen: 24
185.210.140.0/22 maxlen: 24
188.170.32.0/21 maxlen: 21
188.170.40.0/21 maxlen: 21
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
178.177.0.0/18 maxlen: 18
178.177.3.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
178.176.52.0/22 maxlen: 22
178.176.72.0/21 maxlen: 21
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
31.173.0.0/21 maxlen: 21
77.233.160.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
31.173.8.0/21 maxlen: 21
178.176.0.0/19 maxlen: 19
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
178.176.32.0/21 maxlen: 21
78.41.100.0/22 maxlen: 24
178.176.40.0/21 maxlen: 21
31.173.72.0/21 maxlen: 21
31.173.80.0/21 maxlen: 21
31.173.88.0/21 maxlen: 21
188.170.0.0/19 maxlen: 19
188.170.24.0/24 maxlen: 24
31.173.16.0/21 maxlen: 21
31.173.24.0/21 maxlen: 21
31.173.32.0/19 maxlen: 19
83.169.192.0/18 maxlen: 24
31.173.60.0/24 maxlen: 24
31.173.64.0/21 maxlen: 21
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
188.94.168.0/21 maxlen: 24
46.232.200.0/21 maxlen: 24
62.64.0.0/19 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
212.44.64.0/19 maxlen: 24
46.229.128.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2d:24:b7:78:d2:26:fb:91:6f:8d:25:73:e8:dc:2d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 31 08:24:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=abf15a639cbf6464c7700c0cb11eb9492d95cbf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:49:7d:dc:87:3a:7d:ed:38:08:d4:b8:83:2d:
58:2a:ab:9c:d0:b4:53:9f:19:dd:f8:a2:c1:b1:fa:
d3:e6:84:f2:35:b0:4a:69:2b:8d:93:de:c9:d0:78:
61:93:f7:08:01:7f:2e:6a:0c:1e:c8:20:dc:c4:db:
86:3d:61:2b:7d:e6:31:36:d1:66:5d:15:2f:8b:0c:
31:38:01:bd:b8:cf:16:82:68:b7:60:db:88:1b:14:
8d:82:36:c4:04:e6:d5:84:1a:a8:bd:ca:2c:4d:4d:
bf:72:e8:e7:da:e4:7a:a3:ea:7c:97:59:a4:b6:db:
95:3e:3d:90:2f:7c:52:ae:99:b4:d4:af:2f:d9:85:
60:73:d9:7a:cd:f7:38:3c:a4:dc:91:ee:f2:e4:92:
c1:61:54:cc:5a:e1:cc:14:4d:60:23:56:5b:79:ec:
f8:65:0a:c8:df:3f:60:c7:86:db:9b:f7:85:a1:67:
16:02:5a:01:e6:d8:4f:ac:a2:4b:63:17:c0:59:ac:
c9:f2:64:35:17:25:59:b7:dd:01:50:be:00:bd:99:
46:06:13:c4:47:a3:0d:62:49:f3:eb:b6:39:3e:1c:
7c:cd:bc:60:70:c6:fc:1c:ed:28:36:5b:56:ce:9c:
87:45:1c:e3:ad:45:b8:02:7a:53:21:82:58:46:73:
05:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F1:5A:63:9C:BF:64:64:C7:70:0C:0C:B1:1E:B9:49:2D:95:CB:F3
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/q_FaY5y_ZGTHcAwMsR65SS2Vy_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.0.0-31.173.95.255
37.28.160.0/19
37.29.0.0/17
46.29.192.0/21
46.229.128.0/20
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.0.0-178.176.47.255
178.176.52.0/22
178.176.72.0/21
178.177.0.0/18
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.0.0-188.170.47.255
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
3a:00:c2:40:bd:e2:8f:59:4d:08:26:f2:f6:43:46:96:bf:b3:
b4:de:95:29:17:3a:0c:f6:ab:b6:c7:40:8c:09:69:d9:39:7e:
99:10:c9:a0:2e:4d:26:bd:f6:e6:90:05:61:cc:da:ca:b4:d7:
64:48:00:87:1e:d6:20:10:99:fb:c8:3a:92:5b:98:89:82:6d:
0a:6e:af:08:00:a3:48:30:33:de:96:a4:59:b7:55:ca:66:85:
79:d7:45:bd:74:1e:ee:0e:23:51:0d:db:02:4f:3f:83:3f:57:
9e:43:9a:b1:9c:db:5c:a9:15:f1:3b:5d:df:58:45:c2:06:a9:
92:d1:44:e3:43:32:1a:fa:26:ad:f1:43:45:8f:71:e2:ca:95:
6a:69:9e:e8:a5:93:ca:43:05:01:b9:98:56:5a:f7:7f:ad:04:
95:b0:92:a9:96:b8:48:e0:a6:9a:ba:4e:83:cc:33:7b:4b:12:
71:f2:2c:92:a5:8e:b0:f2:6b:63:70:cb:88:4c:a0:90:bf:ce:
79:6f:f5:b1:db:2f:ce:4a:2c:f3:74:a1:81:8e:07:d7:76:95:
af:9e:a7:36:15:68:fa:ca:27:14:c3:e0:5f:05:a9:60:ac:b6:
39:c4:47:25:14:dd:31:53:e4:70:bf:db:5f:62:81:15:3f:6f:
c0:9c:a5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:04 2025 by rpki-client