Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/wPTLiSq0DKng5QCl3k2PCWyfPaw.roa
File: wPTLiSq0DKng5QCl3k2PCWyfPaw.roa (raw, json)
Hash identifier: fL/mPf8zsum1sotk6KZc9kl572d5pVMJnO+Mv+1tQpE=
Subject key identifier: C0:F4:CB:89:2A:B4:0C:A9:E0:E5:00:A5:DE:4D:8F:09:6C:9F:3D:AC
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018505AE3C62B4ACA096B87CAF6F51627E16
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/wPTLiSq0DKng5QCl3k2PCWyfPaw.roa
Signing time: Mon 12 Dec 2022 09:33:02 +0000
ROA not before: Mon 12 Dec 2022 09:33:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31208
IP address blocks: 195.16.96.0/19 maxlen: 24
178.178.84.0/22 maxlen: 22
178.178.82.0/24 maxlen: 24
178.178.80.0/23 maxlen: 23
193.201.228.0/22 maxlen: 24
178.178.131.0/24 maxlen: 24
178.178.130.0/24 maxlen: 24
178.178.129.0/24 maxlen: 24
178.178.132.0/24 maxlen: 24
178.178.128.0/24 maxlen: 24
178.176.230.0/23 maxlen: 23
37.28.186.0/24 maxlen: 24
188.170.50.0/24 maxlen: 24
37.28.184.0/24 maxlen: 24
188.170.48.0/24 maxlen: 24
37.28.185.0/24 maxlen: 24
188.170.49.0/24 maxlen: 24
188.170.54.0/24 maxlen: 24
188.170.55.0/24 maxlen: 24
37.28.187.0/24 maxlen: 24
188.170.56.0/24 maxlen: 24
188.170.52.0/24 maxlen: 24
188.170.57.0/24 maxlen: 24
188.170.53.0/24 maxlen: 24
188.170.62.0/24 maxlen: 24
188.170.63.0/24 maxlen: 24
188.170.59.0/24 maxlen: 24
188.170.60.0/24 maxlen: 24
188.170.61.0/24 maxlen: 24
37.29.75.0/24 maxlen: 24
37.29.74.0/24 maxlen: 24
37.29.73.0/24 maxlen: 24
37.29.72.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.72.0/24 maxlen: 24
128.204.73.0/24 maxlen: 24
178.176.58.0/24 maxlen: 24
178.176.56.0/24 maxlen: 24
178.176.57.0/24 maxlen: 24
178.176.62.0/24 maxlen: 24
178.176.63.0/24 maxlen: 24
178.176.59.0/24 maxlen: 24
178.176.60.0/24 maxlen: 24
178.176.61.0/24 maxlen: 24
83.149.41.0/24 maxlen: 24
83.149.44.0/23 maxlen: 23
83.149.40.0/24 maxlen: 24
83.149.42.0/23 maxlen: 23
83.149.46.0/23 maxlen: 23
83.169.212.0/24 maxlen: 24
83.169.208.0/24 maxlen: 24
83.169.213.0/24 maxlen: 24
83.169.209.0/24 maxlen: 24
83.169.210.0/24 maxlen: 24
83.169.211.0/24 maxlen: 24
83.169.214.0/24 maxlen: 24
83.169.215.0/24 maxlen: 24
188.162.0.0/16 maxlen: 24
178.178.135.0/24 maxlen: 24
178.178.134.0/24 maxlen: 24
178.178.137.0/24 maxlen: 24
178.178.133.0/24 maxlen: 24
178.178.136.0/24 maxlen: 24
178.178.143.0/24 maxlen: 24
178.178.142.0/24 maxlen: 24
46.229.136.0/22 maxlen: 22
46.229.141.0/24 maxlen: 24
46.229.140.0/24 maxlen: 24
46.229.143.0/24 maxlen: 24
46.229.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:ae:3c:62:b4:ac:a0:96:b8:7c:af:6f:51:62:7e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 09:33:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0f4cb892ab40ca9e0e500a5de4d8f096c9f3dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ff:d7:99:04:c8:43:74:a8:c5:b8:b1:9d:df:
e7:28:6d:cd:f3:57:2c:0e:ae:48:ff:db:de:2c:33:
70:62:a8:c1:54:53:96:6f:76:77:11:da:f2:19:dc:
51:e8:7d:2a:23:20:d1:7a:96:08:9b:af:82:e0:34:
87:13:10:53:0b:d2:51:cc:22:6e:12:af:4c:05:cd:
f4:62:1c:30:71:a8:31:84:22:88:28:59:7a:0e:2f:
fa:ca:3a:24:6e:11:e9:d5:0f:56:a9:27:05:82:02:
ea:57:b5:2d:81:5f:10:97:b0:fa:6a:88:4c:37:91:
b1:0c:88:f3:46:fc:59:88:13:ef:36:18:6b:1a:6b:
77:f7:77:5d:7a:ee:1c:c8:37:7a:4a:43:00:75:33:
9d:88:c8:48:2e:c9:60:ec:e2:f1:16:5a:ce:82:b4:
6d:f1:1c:0f:6d:0c:49:08:09:f5:a1:30:c1:c1:0a:
50:33:08:49:24:e6:48:af:d8:7b:98:00:a5:68:cc:
ca:c3:af:dc:b1:55:65:0f:52:37:19:fe:b1:02:af:
96:5e:f5:ba:24:df:5c:36:50:47:37:3d:41:d2:c9:
04:06:16:5f:8a:8f:09:46:17:81:ad:65:97:cb:6a:
4a:3f:34:bb:16:c6:e9:7a:a5:a3:b1:ab:fa:1f:56:
be:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F4:CB:89:2A:B4:0C:A9:E0:E5:00:A5:DE:4D:8F:09:6C:9F:3D:AC
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/wPTLiSq0DKng5QCl3k2PCWyfPaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.28.184.0/22
37.29.72.0/22
46.229.136.0/21
83.149.40.0/21
83.169.208.0/21
128.204.72.0/23
178.176.56.0/21
178.176.230.0/23
178.178.80.0-178.178.82.255
178.178.84.0/22
178.178.128.0-178.178.137.255
178.178.142.0/23
188.162.0.0/16
188.170.48.0-188.170.50.255
188.170.52.0-188.170.57.255
188.170.59.0-188.170.63.255
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
Signature Algorithm: sha256WithRSAEncryption
61:2e:d5:50:9a:5b:0b:c4:c9:59:00:d3:64:28:ae:92:2b:4b:
ec:e7:e6:d2:e3:c0:2d:d6:72:59:30:38:90:a4:b5:81:d8:26:
4d:21:89:79:d6:97:3c:43:b0:02:ae:34:cb:82:0e:8f:e2:0e:
fe:65:38:e4:17:a2:c0:45:4a:45:94:15:3a:53:e7:9f:86:7c:
74:4c:a1:0b:85:97:29:3c:7d:5b:58:9d:50:c7:8b:58:6c:fb:
e7:8b:a5:8f:b9:fb:95:73:a7:b6:55:6c:91:b8:5c:16:89:29:
d4:6d:8e:1e:5d:7a:52:9a:00:57:4b:a0:79:db:3f:36:c9:be:
3b:37:e9:df:3b:90:87:49:1e:1b:45:e7:8d:b8:75:bf:ad:07:
f2:f1:5e:c4:3e:5f:a4:e9:ce:06:d7:1f:9a:2e:ea:7e:c3:ee:
7e:e0:38:13:11:0c:5b:5b:f7:c6:03:e9:a6:cd:b6:91:13:a6:
40:ec:cf:46:cb:70:07:6d:31:df:52:9c:d1:13:33:55:b9:bd:
0b:7a:36:c1:a6:ee:a3:78:aa:95:0e:74:09:a8:d3:78:d8:8b:
dc:4e:a6:6f:ec:91:56:94:9b:5f:28:18:ae:8f:16:35:d9:63:
82:03:08:a8:11:64:79:26:1b:ac:c7:8d:c4:06:58:35:9d:32:
0d:4f:4c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:01 2025 by rpki-client