Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/xkAySlc_SZ_E4QjWWzXl1PNT10o.roa
File: xkAySlc_SZ_E4QjWWzXl1PNT10o.roa (raw, json)
Hash identifier: oyLRax5axNU0CPC2YfYMmPNcmkxjvLbW0WZ993cdWaQ=
Subject key identifier: C6:40:32:4A:57:3F:49:9F:C4:E1:08:D6:5B:35:E5:D4:F3:53:D7:4A
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01850561516354CEE488E124235475A106AE
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/xkAySlc_SZ_E4QjWWzXl1PNT10o.roa
Signing time: Mon 12 Dec 2022 08:09:01 +0000
ROA not before: Mon 12 Dec 2022 08:09:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29648
IP address blocks: 193.201.228.0/22 maxlen: 24
213.154.160.0/19 maxlen: 24
31.173.119.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
77.233.160.0/19 maxlen: 19
77.233.161.0/24 maxlen: 24
77.233.164.0/24 maxlen: 24
77.233.160.0/24 maxlen: 24
77.233.162.0/24 maxlen: 24
77.233.166.0/24 maxlen: 24
77.233.167.0/24 maxlen: 24
77.233.170.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
31.173.104.0/24 maxlen: 24
31.173.105.0/24 maxlen: 24
31.173.112.0/24 maxlen: 24
31.173.108.0/24 maxlen: 24
31.173.109.0/24 maxlen: 24
31.173.110.0/24 maxlen: 24
31.173.106.0/24 maxlen: 24
31.173.111.0/24 maxlen: 24
31.173.107.0/24 maxlen: 24
31.173.116.0/24 maxlen: 24
31.173.113.0/24 maxlen: 24
31.173.117.0/24 maxlen: 24
31.173.114.0/24 maxlen: 24
31.173.118.0/24 maxlen: 24
31.173.115.0/24 maxlen: 24
77.233.173.0/24 maxlen: 24
77.233.178.0/24 maxlen: 24
77.233.185.0/24 maxlen: 24
77.233.181.0/24 maxlen: 24
77.233.180.0/24 maxlen: 24
77.233.186.0/24 maxlen: 24
77.233.182.0/24 maxlen: 24
77.233.188.0/24 maxlen: 24
77.233.191.0/24 maxlen: 24
77.233.190.0/24 maxlen: 24
212.44.64.0/19 maxlen: 24
195.16.96.0/19 maxlen: 24
188.170.98.0/24 maxlen: 24
86.109.192.0/19 maxlen: 19
86.109.192.0/20 maxlen: 20
188.170.96.0/24 maxlen: 24
188.170.97.0/24 maxlen: 24
188.170.102.0/24 maxlen: 24
86.109.193.0/24 maxlen: 24
188.170.103.0/24 maxlen: 24
188.170.99.0/24 maxlen: 24
188.170.100.0/24 maxlen: 24
188.170.104.0/24 maxlen: 24
86.109.195.0/24 maxlen: 24
188.170.101.0/24 maxlen: 24
188.170.105.0/24 maxlen: 24
188.170.110.0/24 maxlen: 24
188.170.106.0/24 maxlen: 24
188.170.111.0/24 maxlen: 24
188.170.107.0/24 maxlen: 24
86.109.200.0/23 maxlen: 23
188.170.108.0/24 maxlen: 24
212.69.96.0/19 maxlen: 24
188.170.109.0/24 maxlen: 24
188.170.112.0/24 maxlen: 24
188.170.114.0/24 maxlen: 24
86.109.213.0/24 maxlen: 24
188.170.115.0/24 maxlen: 24
188.170.116.0/24 maxlen: 24
86.109.212.0/24 maxlen: 24
86.109.208.0/24 maxlen: 24
188.170.118.0/24 maxlen: 24
188.170.117.0/24 maxlen: 24
188.170.113.0/24 maxlen: 24
86.109.210.0/24 maxlen: 24
188.170.119.0/24 maxlen: 24
188.170.123.0/24 maxlen: 24
86.109.216.0/24 maxlen: 24
188.170.122.0/24 maxlen: 24
86.109.215.0/24 maxlen: 24
86.109.218.0/23 maxlen: 23
188.170.125.0/24 maxlen: 24
188.170.121.0/24 maxlen: 24
188.170.120.0/24 maxlen: 24
86.109.214.0/24 maxlen: 24
188.170.124.0/24 maxlen: 24
188.170.127.0/24 maxlen: 24
86.109.220.0/24 maxlen: 24
188.170.126.0/24 maxlen: 24
86.109.223.0/24 maxlen: 24
86.109.222.0/24 maxlen: 24
78.109.120.0/24 maxlen: 24
78.109.121.0/24 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
178.176.98.0/24 maxlen: 24
195.149.111.0/24 maxlen: 24
178.176.96.0/24 maxlen: 24
178.176.97.0/24 maxlen: 24
178.176.102.0/24 maxlen: 24
178.176.103.0/24 maxlen: 24
178.176.99.0/24 maxlen: 24
178.176.100.0/24 maxlen: 24
178.176.101.0/24 maxlen: 24
178.176.118.0/24 maxlen: 24
178.176.114.0/24 maxlen: 24
178.176.115.0/24 maxlen: 24
178.176.116.0/24 maxlen: 24
178.176.117.0/24 maxlen: 24
178.176.122.0/24 maxlen: 24
178.176.123.0/24 maxlen: 24
178.176.119.0/24 maxlen: 24
178.176.124.0/24 maxlen: 24
178.176.120.0/24 maxlen: 24
178.176.125.0/24 maxlen: 24
178.176.121.0/24 maxlen: 24
178.176.126.0/24 maxlen: 24
178.176.127.0/24 maxlen: 24
83.169.217.0/24 maxlen: 24
83.169.218.0/24 maxlen: 24
83.169.219.0/24 maxlen: 24
83.169.220.0/24 maxlen: 24
83.169.221.0/24 maxlen: 24
83.169.222.0/24 maxlen: 24
83.169.223.0/24 maxlen: 24
188.94.168.0/24 maxlen: 24
188.94.172.0/24 maxlen: 24
188.94.169.0/24 maxlen: 24
188.94.170.0/24 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.171.0/24 maxlen: 24
188.94.173.0/24 maxlen: 24
188.94.174.0/24 maxlen: 24
188.94.175.0/24 maxlen: 24
217.115.80.0/20 maxlen: 20
217.115.81.0/24 maxlen: 24
217.115.80.0/24 maxlen: 24
217.115.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:61:51:63:54:ce:e4:88:e1:24:23:54:75:a1:06:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 08:09:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c640324a573f499fc4e108d65b35e5d4f353d74a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:28:f6:bb:63:4c:72:4b:96:9c:f6:53:cd:d8:
29:1b:eb:89:db:2e:ce:46:62:33:6d:cf:fa:c6:1d:
18:8d:97:5e:d5:3c:fd:38:82:6e:14:5c:20:c7:ab:
d7:93:cd:02:8a:76:f2:91:8e:fc:f6:04:09:b3:f6:
8e:d9:81:d4:69:27:01:2a:84:60:20:6e:11:08:bc:
fa:b8:91:98:d3:f6:44:39:31:8d:c3:fc:c3:16:c2:
f6:a4:ba:69:ff:9c:c0:1a:73:a9:6f:33:b4:38:b8:
87:b6:62:7e:38:92:30:4a:78:12:18:67:64:64:7d:
55:2d:65:03:17:23:a8:dc:df:ef:a8:c9:e3:fb:a8:
15:f4:e3:90:a7:db:f3:d8:e9:a6:25:a7:4e:b4:05:
b1:79:d9:3b:46:62:43:8f:0e:55:4a:89:49:18:be:
e8:59:2d:ce:e4:8b:35:48:79:7b:50:75:0c:80:cc:
4f:f1:9b:16:db:81:57:5b:93:d0:80:a1:79:5e:6c:
84:c5:89:ce:28:5c:bf:db:a6:29:2d:4c:d9:7f:07:
8a:45:8c:2c:ec:94:b1:28:1d:9b:00:03:ac:11:d9:
86:c9:3a:97:ac:c3:32:b5:3b:0c:2f:4d:b5:8e:18:
80:9e:a8:a2:50:22:c4:96:c1:8f:49:01:b4:c1:80:
d2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:40:32:4A:57:3F:49:9F:C4:E1:08:D6:5B:35:E5:D4:F3:53:D7:4A
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/xkAySlc_SZ_E4QjWWzXl1PNT10o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.104.0-31.173.119.255
77.233.160.0/19
78.109.120.0/23
83.169.217.0-83.169.223.255
86.109.192.0/19
178.176.96.0/21
178.176.114.0-178.176.127.255
188.94.168.0/21
188.162.0.0/16
188.170.96.0/19
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
0b:78:75:37:f3:61:a6:88:b8:8e:5e:53:e5:73:fd:9a:7c:2e:
e1:fa:fe:6e:01:1d:25:5f:c0:cf:fb:c2:73:05:1f:49:06:1f:
f9:33:07:9b:e7:62:3d:a7:0a:f5:07:44:b1:74:0e:28:eb:69:
1c:0c:a1:41:e0:de:5b:c7:70:c8:6f:9c:33:7a:11:8d:7b:b0:
ab:b2:7e:28:f5:41:1b:54:f5:84:0d:df:29:1a:4a:ea:47:df:
60:14:aa:00:25:9d:4f:71:23:c7:8e:ea:4d:d0:70:8a:70:3e:
ff:13:0d:83:de:36:5c:19:8d:c4:9b:16:f5:60:d9:75:3c:0d:
64:e9:58:1b:2e:33:bf:13:10:c6:a9:cf:80:08:54:13:56:e5:
7a:a4:ec:a1:f1:9c:87:ee:0a:af:48:03:60:11:72:9d:c8:96:
ca:6f:e9:ef:47:70:a7:1d:b9:d9:8f:8f:7c:f4:06:d0:e7:a8:
6d:a4:a7:7f:42:f0:8b:6b:f9:a9:f1:4b:2c:0c:50:e9:6f:30:
72:74:61:65:81:a9:c3:48:b3:ce:b1:c4:0d:cb:db:da:db:7b:
6e:83:d5:36:3e:f0:b6:80:43:11:38:cd:99:65:69:de:33:cb:
c7:91:e0:4a:53:a3:da:12:2d:c6:80:8d:01:fb:cc:ec:db:60:
44:e0:d3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:25 2025 by rpki-client