Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/sZ6GM2z8iAA8t_1NTt8aJnPEGpk.roa
File: sZ6GM2z8iAA8t_1NTt8aJnPEGpk.roa (raw, json)
Hash identifier: ok5yfbFyOxPhr5AgGF/7FBHCMAw3qLZtPF0njhpf0qg=
Subject key identifier: B1:9E:86:33:6C:FC:88:00:3C:B7:FD:4D:4E:DF:1A:26:73:C4:1A:99
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F14BBD24F581FB62734F1FFA747D72C4
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/sZ6GM2z8iAA8t_1NTt8aJnPEGpk.roa
Signing time: Thu 08 Dec 2022 10:33:03 +0000
ROA not before: Thu 08 Dec 2022 10:33:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31224
IP address blocks: 109.188.0.0/16 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.192.0/22 maxlen: 22
193.201.228.0/22 maxlen: 24
178.178.88.0/22 maxlen: 22
178.178.92.0/22 maxlen: 22
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
212.69.96.0/19 maxlen: 24
31.173.123.0/24 maxlen: 24
31.173.122.0/24 maxlen: 24
31.173.121.0/24 maxlen: 24
31.173.125.0/24 maxlen: 24
31.173.120.0/24 maxlen: 24
31.173.124.0/24 maxlen: 24
31.173.127.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
31.173.126.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
78.25.88.0/22 maxlen: 22
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
37.29.44.0/22 maxlen: 22
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
178.176.104.0/21 maxlen: 21
83.149.32.0/22 maxlen: 22
83.149.36.0/22 maxlen: 22
83.149.34.0/24 maxlen: 24
83.149.37.0/24 maxlen: 24
83.149.39.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
31.173.96.0/24 maxlen: 24
31.173.97.0/24 maxlen: 24
31.173.102.0/24 maxlen: 24
31.173.99.0/24 maxlen: 24
31.173.103.0/24 maxlen: 24
31.173.100.0/24 maxlen: 24
31.173.100.0/23 maxlen: 23
31.173.101.0/24 maxlen: 24
178.176.112.0/24 maxlen: 24
178.176.113.0/24 maxlen: 24
83.169.216.0/24 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
46.229.132.0/22 maxlen: 22
212.44.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:4b:bd:24:f5:81:fb:62:73:4f:1f:fa:74:7d:72:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 10:33:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b19e86336cfc88003cb7fd4d4edf1a2673c41a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f7:4e:ce:91:53:e8:13:47:3b:54:c2:be:52:
a8:2e:de:27:ba:30:37:36:81:e2:1e:7e:3f:7b:65:
6c:79:b5:c1:d9:a8:16:a1:59:00:7d:96:eb:6d:2a:
7a:d6:3f:17:97:f4:89:9e:6e:26:26:9c:1d:cd:dd:
8a:d8:19:d2:f1:10:ab:85:1d:a1:70:27:f7:8b:44:
7d:80:31:3f:a1:d5:29:a0:93:cc:4a:0f:4a:f8:69:
a5:fe:1d:27:b7:de:86:19:0a:41:f2:58:9c:bf:e6:
90:d2:1c:05:0e:5f:85:cf:ca:8c:2d:fb:53:db:9e:
71:c3:9c:51:e7:d3:c7:97:47:a5:46:b3:91:ba:4f:
21:ea:a7:46:ba:e8:47:83:fc:94:e4:c4:f9:b1:72:
73:bc:b0:5f:b9:75:01:79:31:cb:a5:2c:89:6c:b2:
93:cc:70:5b:03:25:74:5b:a8:0e:cd:b3:e8:9f:c8:
5b:be:d5:2c:dc:a2:3d:d7:b8:38:6b:db:e5:4b:86:
6f:a3:63:3b:4e:db:f9:c9:7d:39:d4:9f:09:f9:dc:
b8:25:f9:5e:29:91:64:4e:2d:6a:4f:cf:85:8d:06:
62:50:7f:b0:0d:fa:59:ec:9f:d1:d2:ca:b6:ef:77:
a4:32:ee:e4:51:2b:cb:d0:13:51:be:45:8f:12:7b:
27:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:9E:86:33:6C:FC:88:00:3C:B7:FD:4D:4E:DF:1A:26:73:C4:1A:99
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/sZ6GM2z8iAA8t_1NTt8aJnPEGpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.96.0/23
31.173.99.0-31.173.103.255
31.173.120.0/21
37.29.44.0/22
46.229.132.0/22
78.25.88.0/22
83.149.32.0/21
83.169.216.0/24
85.26.192.0/22
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.104.0-178.176.113.255
178.178.88.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
5a:e7:73:61:fa:7e:70:d7:3d:55:aa:ce:fb:c1:8f:2e:aa:82:
5d:1c:79:d9:5c:c9:72:e8:00:dd:eb:90:c9:28:23:ce:e4:a9:
41:28:38:d6:b4:aa:d4:1b:3f:f2:dc:16:f6:52:7e:81:e7:6c:
b2:6e:b4:91:88:50:82:96:c7:15:9d:96:d5:61:65:8d:43:05:
dc:e2:32:69:33:e0:fc:bd:d0:09:71:b4:32:42:5e:9f:ac:bd:
ae:b7:23:e8:4f:c8:08:68:84:e2:e3:ea:d7:d2:db:ad:1a:44:
2a:84:6b:a9:87:ee:2b:5d:de:d5:5c:91:79:1c:f2:e6:22:4f:
22:be:25:aa:d4:88:ef:d2:40:ac:10:f8:c3:de:d6:6f:a7:9f:
95:a4:9e:e0:7b:11:d1:de:d8:8b:7d:a1:3e:af:f7:67:68:79:
1b:6e:1c:c4:6e:e5:86:74:39:60:81:79:4d:91:38:fe:25:dd:
fe:3b:2e:19:57:f8:e9:bd:6f:fb:6c:bb:a8:55:8b:54:cb:5e:
b8:36:67:07:72:a0:df:54:d7:9b:11:08:9a:7b:b0:23:da:c6:
70:b3:78:1b:7d:9e:fc:f4:49:a9:87:bc:19:a2:c1:73:d7:f0:
eb:31:c3:4d:8f:fd:f0:68:44:db:88:f5:91:a9:9f:93:94:39:
a1:ee:5f:26
-----BEGIN CERTIFICATE-----
MIIF0DCCBLigAwIBAgISAYTxS70k9YH7YnNPH/p0fXLEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMjA4MTAzMzAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTllODYzMzZjZmM4ODAwM2NiN2ZkNGQ0ZWRmMWEyNjczYzQxYTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvdOzpFT6BNHO1TCvlKoLt4nujA3
NoHiHn4/e2VsebXB2agWoVkAfZbrbSp61j8Xl/SJnm4mJpwdzd2K2BnS8RCrhR2h
cCf3i0R9gDE/odUpoJPMSg9K+Gml/h0nt96GGQpB8licv+aQ0hwFDl+Fz8qMLftT
255xw5xR59PHl0elRrORuk8h6qdGuuhHg/yU5MT5sXJzvLBfuXUBeTHLpSyJbLKT
zHBbAyV0W6gOzbPon8hbvtUs3KI917g4a9vlS4Zvo2M7Ttv5yX051J8J+dy4Jfle
KZFkTi1qT8+FjQZiUH+wDfpZ7J/R0sq273ekMu7kUSvL0BNRvkWPEnsn+QIDAQAB
o4IC3DCCAtgwHQYDVR0OBBYEFLGehjNs/IgAPLf9TU7fGiZzxBqZMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvc1o2R00yejhpQUE4dF8xTlR0OGFKblBFR3BrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHxBggrBgEFBQcBBwEB/wSB4TCB3jCB2wQCAAEwgdQDBAEf
rWAwDAMEAB+tYwMEAx+tYAMEAx+teAMEAiUdLAMEAi7lhAMEAk4ZWAMEA1OVIAME
AFOp2AMEAlUawAMEBm18QAMDAG28AwQGgMxAAwQDsheQMAwDBAOysGgDBAGysHAD
BAOyslgDBAK5AyADBAK50owDBAO8XqgDAwC8ogMEAsHJ5AMEBcMFgAMEBcMQYAME
AcNOdAMEAMOVbwMEBcPmQAMEBdQOoAMEBdQsQAMEBdRFYAMEBdR3oAMEBdWaoAME
BdWoIAMEBtXzQAMEBNlzUDANBgkqhkiG9w0BAQsFAAOCAQEAWudzYfp+cNc9VarO
+8GPLqqCXRx52VzJcugA3euQySgjzuSpQSg41rSq1Bs/8twW9lJ+gedssm60kYhQ
gpbHFZ2W1WFljUMF3OIyaTPg/L3QCXG0MkJen6y9rrcj6E/ICGiE4uPq19LbrRpE
KoRrqYfuK13e1VyReRzy5iJPIr4lqtSI79JArBD4w97Wb6eflaSe4HsR0d7Yi32h
Pq/3Z2h5G24cxG7lhnQ5YIF5TZE4/iXd/jsuGVf46b1v+2y7qFWLVMteuDZnB3Kg
31TXmxEImnuwI9rGcLN4G32e/PRJqYe8GaLBc9fw6zHDTY/98GhE24j1kamfk5Q5
oe5fJg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:26 2024 by rpki-client on console-fra.rpki-client.org