Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/wz78XqjIwWfp-WVIH31ilkicKKI.roa
File: wz78XqjIwWfp-WVIH31ilkicKKI.roa (raw, json)
Hash identifier: Z1QqA+zEFT3f/ZNO2w/QEvGfl8mNU+3CAUGuXksHElU=
Subject key identifier: C3:3E:FC:5E:A8:C8:C1:67:E9:F9:65:48:1F:7D:62:96:48:9C:28:A2
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184C7D3E3B27E40EFFF3F0E531C6A791A71
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/wz78XqjIwWfp-WVIH31ilkicKKI.roa
Signing time: Wed 30 Nov 2022 09:17:43 +0000
ROA not before: Wed 30 Nov 2022 09:17:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31195
IP address blocks: 109.188.0.0/16 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
178.178.64.0/24 maxlen: 24
178.178.71.0/24 maxlen: 24
178.178.66.0/24 maxlen: 24
178.178.65.0/24 maxlen: 24
178.178.68.0/24 maxlen: 24
178.178.67.0/24 maxlen: 24
178.178.70.0/24 maxlen: 24
178.178.73.0/24 maxlen: 24
185.3.32.0/22 maxlen: 24
178.178.72.0/24 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
31.173.225.0/24 maxlen: 24
31.173.226.0/24 maxlen: 24
78.25.64.0/18 maxlen: 24
185.210.140.0/22 maxlen: 24
31.173.132.0/23 maxlen: 23
212.119.160.0/19 maxlen: 24
31.173.134.0/23 maxlen: 23
31.173.135.0/24 maxlen: 24
178.176.233.0/24 maxlen: 24
178.176.235.0/24 maxlen: 24
178.176.234.0/24 maxlen: 24
31.173.143.0/24 maxlen: 24
80.247.176.0/20 maxlen: 24
37.28.188.0/22 maxlen: 22
37.28.191.0/24 maxlen: 24
37.28.190.0/24 maxlen: 24
91.193.212.0/22 maxlen: 24
37.29.89.0/24 maxlen: 24
37.29.91.0/24 maxlen: 24
37.29.88.0/22 maxlen: 22
37.29.95.0/24 maxlen: 24
37.29.92.0/22 maxlen: 22
37.29.94.0/24 maxlen: 24
188.170.233.0/24 maxlen: 24
188.170.231.0/24 maxlen: 24
188.170.228.0/23 maxlen: 23
188.170.232.0/24 maxlen: 24
188.170.230.0/24 maxlen: 24
188.170.236.0/24 maxlen: 24
188.170.234.0/24 maxlen: 24
188.170.239.0/24 maxlen: 24
188.170.237.0/24 maxlen: 24
188.170.235.0/24 maxlen: 24
31.173.231.0/24 maxlen: 24
31.173.228.0/23 maxlen: 23
31.173.228.0/24 maxlen: 24
31.173.230.0/24 maxlen: 24
31.173.232.0/23 maxlen: 23
31.173.229.0/24 maxlen: 24
31.173.239.0/24 maxlen: 24
31.173.236.0/23 maxlen: 23
31.173.238.0/24 maxlen: 24
31.173.235.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
37.29.43.0/24 maxlen: 24
95.137.0.0/17 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 24
83.149.52.0/22 maxlen: 22
83.169.192.0/18 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c7:d3:e3:b2:7e:40:ef:ff:3f:0e:53:1c:6a:79:1a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Nov 30 09:17:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c33efc5ea8c8c167e9f965481f7d6296489c28a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:25:f5:b0:62:d9:f5:4c:08:5e:a3:ce:43:dd:
39:84:e1:e4:a6:1b:76:31:06:50:98:92:d4:73:bc:
ad:6e:36:bf:93:c3:3d:d5:1c:43:40:57:d1:f8:06:
27:78:0d:00:25:cc:57:63:ff:b2:a5:68:c3:8d:9d:
8f:a4:47:4c:84:90:56:95:c3:62:32:fe:31:97:3c:
f3:11:be:67:4c:b7:13:fa:a3:37:52:67:b6:50:7f:
05:40:2d:10:7c:28:32:5b:e8:5b:ce:96:35:7e:5f:
0f:2a:da:db:f4:25:dc:52:eb:75:f2:95:8d:6b:24:
1b:d7:50:59:b3:81:6f:00:f8:bf:32:dc:a4:f7:c1:
c1:2e:cb:73:4a:07:49:71:02:50:fa:c7:65:3a:65:
9b:bd:c4:88:30:a2:96:0c:2c:fd:dd:a3:9f:ed:4f:
7b:83:6e:aa:32:20:a7:81:96:54:4b:0f:b5:92:ca:
60:29:34:61:11:ce:06:da:6a:92:e7:d6:70:fb:fe:
f3:bb:5e:80:46:64:59:b9:1a:5d:ce:23:c2:0a:90:
ba:03:32:37:fa:2f:6b:58:21:92:45:3f:93:c2:3f:
91:de:24:8f:a2:4f:e7:9c:90:25:f8:23:35:2f:f8:
ee:f5:90:5a:1a:08:34:2c:90:12:80:08:c7:e9:a0:
fc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3E:FC:5E:A8:C8:C1:67:E9:F9:65:48:1F:7D:62:96:48:9C:28:A2
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/wz78XqjIwWfp-WVIH31ilkicKKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.132.0/22
31.173.143.0/24
31.173.225.0-31.173.226.255
31.173.228.0-31.173.233.255
31.173.235.0-31.173.239.255
37.28.188.0/22
37.29.43.0/24
37.29.88.0/21
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.149.52.0/22
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.233.0-178.176.235.255
178.178.64.0-178.178.68.255
178.178.70.0-178.178.73.255
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.228.0-188.170.237.255
188.170.239.0/24
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
93:21:f0:2d:e8:ab:cf:46:fe:78:b7:85:b8:f5:ad:3a:df:cc:
f9:a8:2b:ae:c9:0c:65:d0:a4:fa:6b:74:51:6b:a5:d5:50:76:
ab:09:49:f2:9b:1d:c4:7e:1f:f1:7c:c9:43:0b:1a:69:3c:83:
65:40:ff:f8:83:47:18:09:a3:55:2d:62:db:bb:bf:ed:f7:d7:
a7:13:fc:b7:0d:e6:b6:b6:6b:cf:60:74:7b:3d:ec:01:26:a0:
0d:06:f0:8e:ca:f2:eb:fa:84:42:62:ae:9c:7d:60:4f:00:7d:
93:b5:75:bf:12:66:1d:8f:7b:94:51:1c:66:fe:b0:6a:19:ef:
a6:d5:e6:1c:58:92:30:83:dd:d0:bc:53:a2:fd:24:06:19:9b:
c8:e9:bd:e4:5f:96:7b:78:ce:97:02:cb:71:de:3d:6e:78:2d:
fc:08:4b:b5:94:02:51:3e:5e:0a:9e:5f:aa:81:bb:22:74:1a:
df:df:36:5e:90:1b:1e:b6:6e:65:24:12:16:16:e7:12:38:63:
7c:82:20:4f:df:b8:96:12:9e:34:fd:6a:57:8a:bc:6c:82:70:
e0:dc:76:89:9b:06:a7:31:fe:4c:ae:42:70:4b:a5:92:83:73:
17:10:3f:42:24:95:51:e3:01:ba:e2:86:e8:0e:83:7c:15:96:
b9:6e:3c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:02 2025 by rpki-client