Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/wzN3ez5eoqCcgCusXfzts3zWr_o.roa
File: wzN3ez5eoqCcgCusXfzts3zWr_o.roa (raw, json)
Hash identifier: DJ+Rcodsnb6oHeH+wONjIK+bh3aKPcDT+jJazG/f9g4=
Subject key identifier: C3:33:77:7B:3E:5E:A2:A0:9C:80:2B:AC:5D:FC:ED:B3:7C:D6:AF:FA
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01840ED37E9F95CDD722B11B4E22C71FE90A
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/wzN3ez5eoqCcgCusXfzts3zWr_o.roa
Signing time: Tue 25 Oct 2022 11:07:32 +0000
ROA not before: Tue 25 Oct 2022 11:07:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50928
IP address blocks: 109.188.0.0/16 maxlen: 24
46.29.192.0/21 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
37.29.0.0/17 maxlen: 24
37.28.160.0/19 maxlen: 24
78.25.64.0/18 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
31.173.248.0/21 maxlen: 21
31.173.248.0/24 maxlen: 24
31.173.252.0/24 maxlen: 24
31.173.253.0/24 maxlen: 24
31.173.249.0/24 maxlen: 24
31.173.250.0/24 maxlen: 24
31.173.251.0/24 maxlen: 24
95.137.0.0/17 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
81.24.128.0/20 maxlen: 24
78.41.100.0/22 maxlen: 24
195.78.116.0/23 maxlen: 24
83.169.192.0/18 maxlen: 24
109.74.112.0/20 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
46.232.200.0/21 maxlen: 24
62.64.0.0/19 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
46.229.128.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0e:d3:7e:9f:95:cd:d7:22:b1:1b:4e:22:c7:1f:e9:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 25 11:07:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c333777b3e5ea2a09c802bac5dfcedb37cd6affa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:49:0a:38:16:0a:9d:e7:cd:f2:55:36:ec:e5:
e3:94:07:7a:c2:79:0c:22:4c:a6:72:3d:0c:96:eb:
28:39:d8:8e:68:ed:d1:de:86:83:77:e9:39:6f:a4:
8a:2c:69:96:cd:b1:9f:04:a3:cd:ec:2f:26:0b:b2:
06:5c:95:a8:7c:b8:37:b4:c2:cd:bf:6e:b2:33:54:
0f:11:4c:35:dc:2b:06:d0:dd:ad:5d:3a:eb:43:a8:
7d:bd:c3:15:3d:57:7d:10:fe:bd:56:a5:e3:4c:04:
fc:d7:8d:b0:bb:b7:70:c4:f7:be:98:9a:1a:a5:63:
15:2d:8e:78:6e:8f:c3:b2:64:66:18:e8:90:78:cc:
43:f3:66:6f:36:51:f3:e1:e3:ce:34:4a:cb:6f:f9:
38:4d:e2:b2:99:42:19:1f:b4:39:ba:21:5f:69:39:
d4:a7:dc:c1:16:a5:ae:a5:ec:9b:15:c8:05:cb:34:
ef:d1:26:bd:8f:1b:b3:ea:90:9a:87:14:5a:84:11:
9b:af:f8:06:d1:d2:97:30:0f:38:94:7c:6e:8f:bb:
e4:c0:de:a7:2e:75:23:22:27:82:85:1a:84:e8:fb:
4e:69:74:99:fb:d8:37:34:77:fe:d8:25:73:53:fb:
74:37:09:b1:5c:a1:ec:4a:97:80:cd:a3:2f:99:b2:
61:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:33:77:7B:3E:5E:A2:A0:9C:80:2B:AC:5D:FC:ED:B3:7C:D6:AF:FA
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/wzN3ez5eoqCcgCusXfzts3zWr_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.248.0/21
37.28.160.0/19
37.29.0.0/17
46.29.192.0/21
46.229.128.0/20
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
0f:41:54:cb:fa:bc:c6:a3:80:c1:1c:89:07:d6:48:ac:69:76:
fc:1a:95:c5:47:67:12:76:f0:b2:c3:87:a3:de:95:92:b8:06:
06:fe:47:3b:a1:33:ee:ea:dd:97:a2:51:70:db:c4:58:5e:20:
d8:f1:aa:e6:05:ef:c0:d2:b0:7f:9d:b5:2e:6f:79:7e:df:a5:
36:e8:2a:38:f2:b9:00:17:eb:af:0b:0a:64:ac:0c:69:52:fe:
8d:6d:c5:04:36:99:39:b2:85:c7:65:e7:88:c5:8a:8d:92:2e:
93:55:d9:c0:2e:26:a1:e2:b2:b8:e1:96:b6:93:00:6e:4c:79:
64:4f:00:0d:bc:1b:29:1f:db:bb:5f:12:91:21:eb:3c:62:b4:
8f:e7:68:72:de:54:8b:1e:8d:b5:e6:69:11:00:1e:b8:55:dc:
13:ca:94:b0:ad:30:2a:4b:ee:bd:61:0c:10:e7:f4:47:36:48:
4f:b8:58:19:5b:42:6d:36:55:ca:eb:1e:d1:f7:e4:7f:42:e3:
62:61:9c:a6:6c:4c:53:cc:d6:70:5a:5f:5a:e1:ac:54:b1:fc:
84:cb:a4:02:be:7e:63:d6:81:f1:66:8e:7f:6a:aa:38:c1:8f:
77:6f:07:e4:87:5e:cb:96:bd:89:93:1e:d3:fc:05:dc:b0:6b:
e7:89:e1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:36 2024 by rpki-client on console-ams.rpki-client.org