Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/tn9mZZY46Zto7FaqnE8sQAxjrEA.roa
File: tn9mZZY46Zto7FaqnE8sQAxjrEA.roa (raw, json)
Hash identifier: 3yVVwGtPJJi+W7iFWu6XI3VIKncuPE4QldCTez+Lp8Q=
Subject key identifier: B6:7F:66:65:96:38:E9:9B:68:EC:56:AA:9C:4F:2C:40:0C:63:AC:40
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F176BE16DC5A58397EF87FBA9F75819E
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/tn9mZZY46Zto7FaqnE8sQAxjrEA.roa
Signing time: Thu 08 Dec 2022 11:20:01 +0000
ROA not before: Thu 08 Dec 2022 11:20:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25159
IP address blocks: 109.188.0.0/16 maxlen: 24
195.16.96.0/19 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
85.26.144.0/20 maxlen: 20
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
78.25.119.0/24 maxlen: 24
94.25.131.0/24 maxlen: 24
94.25.144.0/20 maxlen: 20
212.69.96.0/19 maxlen: 24
94.25.164.0/24 maxlen: 24
94.25.160.0/24 maxlen: 24
94.25.172.0/22 maxlen: 22
94.25.168.0/22 maxlen: 22
188.170.25.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
188.170.32.0/21 maxlen: 21
188.170.40.0/21 maxlen: 21
37.28.176.0/21 maxlen: 21
212.119.160.0/19 maxlen: 24
178.177.0.0/18 maxlen: 18
178.177.3.0/24 maxlen: 24
78.25.112.0/22 maxlen: 22
78.25.116.0/23 maxlen: 23
78.25.118.0/24 maxlen: 24
94.25.176.0/21 maxlen: 21
94.25.184.0/21 maxlen: 21
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
37.29.32.0/21 maxlen: 21
178.176.52.0/22 maxlen: 22
178.176.72.0/21 maxlen: 21
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
31.173.0.0/21 maxlen: 21
195.149.111.0/24 maxlen: 24
31.173.8.0/21 maxlen: 21
178.176.0.0/19 maxlen: 19
83.229.254.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
178.176.32.0/21 maxlen: 21
178.176.40.0/21 maxlen: 21
31.173.72.0/21 maxlen: 21
31.173.80.0/21 maxlen: 21
31.173.88.0/21 maxlen: 21
188.170.0.0/19 maxlen: 19
188.170.24.0/24 maxlen: 24
31.173.16.0/21 maxlen: 21
31.173.24.0/21 maxlen: 21
31.173.32.0/19 maxlen: 19
31.173.60.0/24 maxlen: 24
31.173.64.0/21 maxlen: 21
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
62.64.0.0/20 maxlen: 20
213.243.64.0/18 maxlen: 24
83.229.211.0/24 maxlen: 24
217.115.80.0/20 maxlen: 24
46.229.128.0/22 maxlen: 22
212.44.64.0/19 maxlen: 24
83.222.212.0/22 maxlen: 22
83.222.216.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:76:be:16:dc:5a:58:39:7e:f8:7f:ba:9f:75:81:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 11:20:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b67f66659638e99b68ec56aa9c4f2c400c63ac40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ba:ba:e4:35:7f:45:6e:b1:12:09:d6:a0:46:
56:5a:63:0c:63:f1:6f:7a:55:3c:e0:85:7e:7d:8c:
85:ce:90:5e:b2:3d:27:29:47:eb:f3:76:18:99:01:
a1:ee:68:1a:ca:69:1d:6d:e5:cb:6c:07:07:2b:d5:
a4:0e:ac:f7:18:85:cd:22:49:01:c9:0e:d8:66:47:
62:26:00:b8:3f:ef:ac:b2:5c:5f:46:12:f2:e1:da:
fd:0b:97:69:4d:95:57:72:59:17:3b:9d:74:33:2c:
83:f8:bc:f0:e1:7b:71:2d:a4:9b:54:41:d6:cf:50:
be:5c:d1:0f:e3:45:e8:b1:51:1c:30:6e:61:64:3d:
e8:df:6c:ed:94:40:7b:38:3f:5d:d4:e0:c0:a3:e1:
ce:fb:67:0a:97:65:66:e1:05:c5:11:66:f4:12:af:
d4:f7:58:60:aa:38:9c:2e:6c:c7:45:b1:a2:28:8a:
ff:67:9f:39:3e:5c:46:4c:c2:9f:a3:be:4f:cf:4f:
5a:d5:8d:9a:f1:af:9e:a5:7c:c1:59:9e:23:de:3c:
69:d2:ac:db:a3:48:2b:d4:8e:01:1d:f9:6d:c4:1c:
51:3d:4b:5a:c8:a0:4f:2f:f6:31:14:6a:fe:c5:d9:
39:13:20:cd:2d:62:fc:dd:c0:fd:8d:8f:8a:52:ec:
93:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7F:66:65:96:38:E9:9B:68:EC:56:AA:9C:4F:2C:40:0C:63:AC:40
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/tn9mZZY46Zto7FaqnE8sQAxjrEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.0.0-31.173.95.255
37.28.176.0/21
37.29.32.0/21
46.229.128.0/22
62.64.0.0/20
78.25.112.0/21
83.222.212.0-83.222.223.255
83.229.211.0/24
83.229.254.0/24
85.26.144.0/20
94.25.131.0/24
94.25.144.0-94.25.160.255
94.25.164.0/24
94.25.168.0-94.25.191.255
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.0.0-178.176.47.255
178.176.52.0/22
178.176.72.0/21
178.177.0.0/18
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.0.0-188.170.47.255
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
67:10:90:60:c1:ea:ae:74:af:54:6f:73:6c:fc:e1:b9:12:b2:
cc:68:96:0a:cd:f8:b0:d7:13:9d:2c:54:6c:ba:35:84:8a:09:
c1:25:31:55:84:e5:e8:af:a2:da:9a:6f:d9:1c:46:4e:3d:66:
c1:fe:72:a4:ab:c4:98:b6:b8:2b:8e:0b:29:e8:0e:67:2b:e7:
72:4b:62:63:5b:ff:2f:fa:83:0d:60:7e:ec:75:8f:56:3f:f5:
f5:5a:f8:ea:0f:21:5b:d0:e2:ff:d2:98:c3:2e:db:9c:65:81:
1a:2a:5c:22:e5:b2:47:9f:70:57:11:54:0c:8d:9a:e3:bb:57:
5a:a9:40:85:cb:2a:67:c2:e5:cf:07:0e:3f:68:63:c3:fe:59:
e7:40:5b:ec:45:91:82:d4:0b:04:cd:68:97:ee:c0:18:3e:6d:
7e:b4:12:df:1a:be:5c:7d:c5:b2:52:44:71:26:ae:5d:15:db:
a4:26:5d:2d:22:22:10:ea:2c:a7:42:fc:6e:ea:93:7a:a7:a0:
1a:dc:8b:13:65:41:6d:22:26:95:d1:7a:3b:25:a6:5f:75:ad:
fb:0e:7a:6b:f1:2d:f9:55:d3:45:92:4b:3c:d4:36:27:2b:37:
49:a6:1d:e9:47:c7:95:02:e3:25:e8:92:95:7c:ba:2e:18:cf:
52:71:c8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:26 2024 by rpki-client on console-fra.rpki-client.org