Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/tYyOtGJIraWUOAT5uEDYsiPJGv4.roa
File: tYyOtGJIraWUOAT5uEDYsiPJGv4.roa (raw, json)
Hash identifier: 0HRog8Yz+fAzdsFSWo7paVyc59pomBiKABo3h0ryxEg=
Subject key identifier: B5:8C:8E:B4:62:48:AD:A5:94:38:04:F9:B8:40:D8:B2:23:C9:1A:FE
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01850561559B89BCDDE712FB9BB11F71BDAE
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/tYyOtGJIraWUOAT5uEDYsiPJGv4.roa
Signing time: Mon 12 Dec 2022 08:09:03 +0000
ROA not before: Mon 12 Dec 2022 08:09:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31208
IP address blocks: 195.16.96.0/19 maxlen: 24
178.178.84.0/22 maxlen: 22
178.178.82.0/24 maxlen: 24
178.178.80.0/23 maxlen: 23
193.201.228.0/22 maxlen: 24
178.178.131.0/24 maxlen: 24
178.178.130.0/24 maxlen: 24
178.178.129.0/24 maxlen: 24
178.178.132.0/24 maxlen: 24
178.178.128.0/24 maxlen: 24
213.154.160.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
178.176.230.0/23 maxlen: 23
212.119.160.0/19 maxlen: 24
37.28.186.0/24 maxlen: 24
188.170.50.0/24 maxlen: 24
37.28.184.0/24 maxlen: 24
188.170.48.0/24 maxlen: 24
37.28.185.0/24 maxlen: 24
188.170.49.0/24 maxlen: 24
188.170.54.0/24 maxlen: 24
188.170.55.0/24 maxlen: 24
37.28.187.0/24 maxlen: 24
188.170.56.0/24 maxlen: 24
188.170.52.0/24 maxlen: 24
188.170.57.0/24 maxlen: 24
188.170.53.0/24 maxlen: 24
188.170.62.0/24 maxlen: 24
188.170.63.0/24 maxlen: 24
188.170.59.0/24 maxlen: 24
188.170.60.0/24 maxlen: 24
188.170.61.0/24 maxlen: 24
37.29.75.0/24 maxlen: 24
37.29.74.0/24 maxlen: 24
37.29.73.0/24 maxlen: 24
37.29.72.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.72.0/24 maxlen: 24
128.204.73.0/24 maxlen: 24
178.176.58.0/24 maxlen: 24
178.176.56.0/24 maxlen: 24
178.176.57.0/24 maxlen: 24
178.176.62.0/24 maxlen: 24
178.176.63.0/24 maxlen: 24
178.176.59.0/24 maxlen: 24
178.176.60.0/24 maxlen: 24
178.176.61.0/24 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
83.149.41.0/24 maxlen: 24
83.149.44.0/23 maxlen: 23
83.149.40.0/24 maxlen: 24
83.149.42.0/23 maxlen: 23
195.78.116.0/23 maxlen: 24
83.149.46.0/23 maxlen: 23
83.169.212.0/24 maxlen: 24
83.169.208.0/24 maxlen: 24
83.169.213.0/24 maxlen: 24
83.169.209.0/24 maxlen: 24
83.169.210.0/24 maxlen: 24
83.169.211.0/24 maxlen: 24
83.169.214.0/24 maxlen: 24
83.169.215.0/24 maxlen: 24
188.162.0.0/16 maxlen: 24
178.178.135.0/24 maxlen: 24
178.178.134.0/24 maxlen: 24
178.178.137.0/24 maxlen: 24
178.178.133.0/24 maxlen: 24
178.178.136.0/24 maxlen: 24
178.178.143.0/24 maxlen: 24
178.178.142.0/24 maxlen: 24
212.44.64.0/19 maxlen: 24
46.229.136.0/22 maxlen: 22
46.229.141.0/24 maxlen: 24
46.229.140.0/24 maxlen: 24
46.229.143.0/24 maxlen: 24
46.229.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:61:55:9b:89:bc:dd:e7:12:fb:9b:b1:1f:71:bd:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 08:09:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b58c8eb46248ada5943804f9b840d8b223c91afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:73:68:24:02:02:ff:79:42:e8:d5:b1:e8:69:
15:3b:a2:f4:61:f6:b9:7c:49:d2:04:64:44:10:22:
d6:15:1b:3a:12:52:b7:8f:de:ef:07:b8:17:38:c3:
59:40:74:00:2d:26:da:05:7b:1e:89:aa:9e:ea:f8:
14:ce:30:67:27:2e:f7:81:64:0a:76:99:da:cf:89:
3a:c6:0d:6f:40:ce:c0:28:fc:03:2e:0b:5f:87:48:
b4:8d:f9:5a:bd:15:09:68:fd:7f:3d:34:aa:1b:49:
a4:1b:89:cd:ad:36:6e:5f:8f:80:4c:b1:d0:1b:1e:
60:23:6c:47:85:71:f3:5f:76:fd:47:8f:c0:15:f8:
21:1a:47:0a:36:4d:af:62:4f:06:be:d3:f6:a2:6b:
1d:52:b9:4a:ca:74:e0:9c:31:a3:98:6c:7b:57:15:
1e:be:96:89:d7:d1:88:c4:f5:f0:d3:ca:a6:bf:2b:
a2:73:ac:e6:6e:e6:48:91:ca:93:9e:f1:b9:4a:f9:
e3:0f:e7:fd:17:8f:4e:ae:1e:b6:6a:24:d2:58:39:
37:2d:b2:0b:26:ea:83:92:46:4e:b6:8b:a8:45:89:
74:4d:f5:3c:75:bf:50:49:23:75:77:60:08:b3:24:
c2:b5:d2:a4:18:60:23:30:05:1f:fc:dc:92:00:80:
f5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:8C:8E:B4:62:48:AD:A5:94:38:04:F9:B8:40:D8:B2:23:C9:1A:FE
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/tYyOtGJIraWUOAT5uEDYsiPJGv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.28.184.0/22
37.29.72.0/22
46.229.136.0/21
83.149.40.0/21
83.169.208.0/21
128.204.72.0/23
178.176.56.0/21
178.176.230.0/23
178.178.80.0-178.178.82.255
178.178.84.0/22
178.178.128.0-178.178.137.255
178.178.142.0/23
188.162.0.0/16
188.170.48.0-188.170.50.255
188.170.52.0-188.170.57.255
188.170.59.0-188.170.63.255
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
Signature Algorithm: sha256WithRSAEncryption
7b:b2:a3:82:b3:d0:89:c2:19:b3:6e:d2:a9:3c:23:db:8f:d5:
6a:ca:04:b5:ea:22:c4:b4:6e:a2:a7:b4:d2:61:ec:b9:88:c7:
f2:ba:5a:5e:3d:7b:6e:5a:fa:45:73:7e:71:04:08:f8:6a:0f:
2f:9c:c6:6e:65:c8:a7:0b:98:40:58:70:01:98:82:5c:77:6a:
ac:bd:c4:a1:b3:85:b5:be:94:75:4a:f3:57:87:23:3d:15:32:
fd:e0:32:1d:70:ad:59:97:66:f5:44:ac:c8:d3:31:6d:68:8d:
ef:c4:99:ae:23:c6:40:ff:9e:00:37:98:7d:39:74:75:2a:76:
97:28:c2:b1:ab:df:a7:da:e1:a6:01:c4:b1:e1:ea:f9:fd:e6:
bc:86:8a:02:08:e3:5d:c0:d6:9c:b2:60:6d:32:fd:96:d8:5e:
be:12:78:67:a5:be:c4:1b:98:b8:37:3d:80:9e:74:37:13:0c:
fc:fc:de:da:0f:74:b9:5e:37:90:39:da:12:b4:f7:40:5a:ac:
76:a2:23:32:9c:6b:3b:74:4a:e0:5d:5e:6e:ae:20:6e:db:ef:
ee:26:e0:a6:01:51:a1:f5:db:aa:6c:7d:0b:10:a8:56:5f:3b:
b4:a5:50:04:54:90:22:b7:e5:44:92:e4:f4:5a:32:c7:0a:4a:
3f:5f:17:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:36 2024 by rpki-client on console-ams.rpki-client.org