Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/y-6UTPDUQDFbtNOesRkN7qRuPSY.roa
File: y-6UTPDUQDFbtNOesRkN7qRuPSY.roa (raw, json)
Hash identifier: ic1M0VIuVa7NgcA6+6caP/0x1r24PUDCkHif8G1/K6s=
Subject key identifier: CB:EE:94:4C:F0:D4:40:31:5B:B4:D3:9E:B1:19:0D:EE:A4:6E:3D:26
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F243D4329B6A322840A53EE0FF5A5B76
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/y-6UTPDUQDFbtNOesRkN7qRuPSY.roa
Signing time: Thu 08 Dec 2022 15:04:02 +0000
ROA not before: Thu 08 Dec 2022 15:04:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31208
IP address blocks: 195.16.96.0/19 maxlen: 24
178.178.84.0/22 maxlen: 22
178.178.82.0/24 maxlen: 24
178.178.80.0/23 maxlen: 23
193.201.228.0/22 maxlen: 24
178.178.131.0/24 maxlen: 24
178.178.130.0/24 maxlen: 24
178.178.129.0/24 maxlen: 24
178.178.132.0/24 maxlen: 24
178.178.128.0/24 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
178.176.230.0/23 maxlen: 23
212.119.160.0/19 maxlen: 24
37.28.186.0/24 maxlen: 24
188.170.50.0/24 maxlen: 24
37.28.184.0/24 maxlen: 24
188.170.48.0/24 maxlen: 24
37.28.185.0/24 maxlen: 24
188.170.49.0/24 maxlen: 24
188.170.54.0/24 maxlen: 24
188.170.55.0/24 maxlen: 24
37.28.187.0/24 maxlen: 24
188.170.56.0/24 maxlen: 24
188.170.52.0/24 maxlen: 24
188.170.57.0/24 maxlen: 24
188.170.53.0/24 maxlen: 24
188.170.62.0/24 maxlen: 24
188.170.63.0/24 maxlen: 24
188.170.59.0/24 maxlen: 24
188.170.60.0/24 maxlen: 24
188.170.61.0/24 maxlen: 24
37.29.75.0/24 maxlen: 24
37.29.74.0/24 maxlen: 24
37.29.73.0/24 maxlen: 24
37.29.72.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.72.0/24 maxlen: 24
128.204.73.0/24 maxlen: 24
178.176.58.0/24 maxlen: 24
178.176.56.0/24 maxlen: 24
178.176.57.0/24 maxlen: 24
178.176.62.0/24 maxlen: 24
178.176.63.0/24 maxlen: 24
178.176.59.0/24 maxlen: 24
178.176.60.0/24 maxlen: 24
178.176.61.0/24 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
83.149.41.0/24 maxlen: 24
83.149.44.0/23 maxlen: 23
83.149.40.0/24 maxlen: 24
83.149.42.0/23 maxlen: 23
195.78.116.0/23 maxlen: 24
83.149.46.0/23 maxlen: 23
83.169.212.0/24 maxlen: 24
83.169.208.0/24 maxlen: 24
83.169.213.0/24 maxlen: 24
83.169.209.0/24 maxlen: 24
83.169.210.0/24 maxlen: 24
83.169.211.0/24 maxlen: 24
83.169.214.0/24 maxlen: 24
83.169.215.0/24 maxlen: 24
188.162.0.0/16 maxlen: 24
178.178.135.0/24 maxlen: 24
178.178.134.0/24 maxlen: 24
178.178.137.0/24 maxlen: 24
178.178.133.0/24 maxlen: 24
178.178.136.0/24 maxlen: 24
178.178.143.0/24 maxlen: 24
178.178.142.0/24 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
46.229.136.0/22 maxlen: 22
46.229.141.0/24 maxlen: 24
46.229.140.0/24 maxlen: 24
46.229.143.0/24 maxlen: 24
46.229.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f2:43:d4:32:9b:6a:32:28:40:a5:3e:e0:ff:5a:5b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 15:04:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cbee944cf0d440315bb4d39eb1190deea46e3d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2d:89:0f:71:a1:ff:8d:82:66:1a:7a:2a:4b:
99:53:a4:3c:5f:76:7f:fc:02:2d:cb:9a:18:da:08:
17:98:60:5a:01:7a:87:b1:f5:b9:7e:61:17:1c:f5:
b6:3b:0a:ad:11:4d:2f:fc:61:f1:4a:6b:4f:a4:6a:
c0:c2:35:28:f4:d8:9d:5c:78:96:9a:e8:b9:ac:73:
9a:22:6d:b1:d4:d3:27:b7:ac:35:25:b6:2c:f5:02:
b3:53:83:76:5b:69:06:4a:41:fb:bc:41:ed:d1:58:
38:5b:cc:14:31:f2:f7:60:ed:09:85:dc:87:70:cd:
b4:88:88:4b:39:f7:95:1d:07:1b:08:7d:1e:13:fe:
34:1d:a0:a4:e6:c8:26:15:22:79:d3:aa:27:21:78:
80:73:ab:04:8d:b4:2a:80:b6:6f:fb:c4:c9:b0:46:
b5:bb:7f:64:24:58:56:11:3c:4e:23:a8:ff:75:d7:
0a:4d:4c:0c:e8:ad:f6:29:f1:2c:82:1d:80:13:08:
97:c0:79:3e:00:16:24:56:40:15:5f:ef:1e:68:6a:
97:65:d8:89:b0:33:73:f7:87:61:6c:d1:b2:68:2b:
29:5f:c0:cf:42:32:2b:5f:60:db:cd:e1:4c:ef:c8:
ba:7c:ba:41:94:89:a9:fb:ac:27:94:60:fd:93:49:
71:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EE:94:4C:F0:D4:40:31:5B:B4:D3:9E:B1:19:0D:EE:A4:6E:3D:26
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/y-6UTPDUQDFbtNOesRkN7qRuPSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.28.184.0/22
37.29.72.0/22
46.229.136.0/21
83.149.40.0/21
83.169.208.0/21
128.204.72.0/23
178.176.56.0/21
178.176.230.0/23
178.178.80.0-178.178.82.255
178.178.84.0/22
178.178.128.0-178.178.137.255
178.178.142.0/23
188.162.0.0/16
188.170.48.0-188.170.50.255
188.170.52.0-188.170.57.255
188.170.59.0-188.170.63.255
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
0c:1f:f2:40:55:60:95:59:99:b2:7d:f2:65:aa:b9:9c:cf:c7:
35:0b:d1:f5:59:e7:b5:a6:96:e3:0c:35:ef:12:1f:4e:4d:df:
7a:38:19:b8:c4:cb:f1:0a:d9:d0:fd:63:c8:20:3b:ea:8d:86:
5c:da:5c:ed:86:6a:4f:70:c4:6d:6b:05:f7:32:6f:59:a0:f1:
cf:ab:0d:d9:2e:cd:b0:52:58:b1:21:23:aa:bf:26:6b:84:cd:
7a:f0:90:d2:71:9a:02:60:85:89:38:47:27:b5:39:ae:8a:c2:
97:5e:5a:1f:91:26:e0:a6:e7:26:75:ad:3c:0f:0b:27:9b:73:
a2:78:bf:b5:89:37:f1:ed:3d:79:58:c1:9f:98:53:08:b3:d8:
03:a8:64:fc:40:04:0e:f9:4b:d7:31:25:cc:8c:e5:93:82:d6:
a9:1d:43:53:47:9d:45:f0:b8:d6:77:d6:d5:01:fe:0e:de:81:
ac:52:0f:1b:89:58:60:24:00:0e:1d:1a:45:26:5a:d1:25:1e:
f2:3c:48:d7:b9:66:7a:cb:22:c0:1f:a4:1f:59:40:56:81:3f:
fc:ed:9f:ac:73:0d:d5:23:f8:69:c5:fd:cb:dc:2f:60:8c:c9:
a9:2b:c3:fe:74:f9:87:a6:29:cc:27:9a:27:34:84:e2:a1:3e:
3b:42:d1:1a
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgISAYTyQ9Qym2oyKEClPuD/Wlt2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMjA4MTUwNDAyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmVlOTQ0Y2YwZDQ0MDMxNWJiNGQzOWViMTE5MGRlZWE0NmUzZDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsC2JD3Gh/42CZhp6KkuZU6Q8X3Z/
/AIty5oY2ggXmGBaAXqHsfW5fmEXHPW2OwqtEU0v/GHxSmtPpGrAwjUo9NidXHiW
mui5rHOaIm2x1NMnt6w1JbYs9QKzU4N2W2kGSkH7vEHt0Vg4W8wUMfL3YO0JhdyH
cM20iIhLOfeVHQcbCH0eE/40HaCk5sgmFSJ506onIXiAc6sEjbQqgLZv+8TJsEa1
u39kJFhWETxOI6j/ddcKTUwM6K32KfEsgh2AEwiXwHk+ABYkVkAVX+8eaGqXZdiJ
sDNz94dhbNGyaCspX8DPQjIrX2DbzeFM78i6fLpBlImp+6wnlGD9k0lxSQIDAQAB
o4IC4zCCAt8wHQYDVR0OBBYEFMvulEzw1EAxW7TTnrEZDe6kbj0mMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEveS02VVRQRFVRREZidE5PZXNSa043cVJ1UFNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH4BggrBgEFBQcBBwEB/wSB6DCB5TCB4gQCAAEwgdsDBAIl
HLgDBAIlHUgDBAMu5YgDBANTlSgDBANTqdADBAGAzEgDBAOysDgDBAGysOYwDAME
BLKyUAMEALKyUgMEArKyVDAMAwQHsrKAAwQBsrKIAwQBsrKOAwMAvKIwDAMEBLyq
MAMEALyqMjAMAwQCvKo0AwQBvKo4MAwDBAC8qjsDBAa8qgADBALByeQDBAXDBYAD
BAXDEGADBAHDTnQDBADDlW8DBAXD5kADBAXUDqADBAXULEADBAXURWADBAXUd6AD
BAXVmqADBAXVqCADBAbV80ADBATZc1AwDQYJKoZIhvcNAQELBQADggEBAAwf8kBV
YJVZmbJ98mWquZzPxzUL0fVZ57WmluMMNe8SH05N33o4GbjEy/EK2dD9Y8ggO+qN
hlzaXO2Gak9wxG1rBfcyb1mg8c+rDdkuzbBSWLEhI6q/JmuEzXrwkNJxmgJghYk4
Rye1Oa6KwpdeWh+RJuCm5yZ1rTwPCyebc6J4v7WJN/HtPXlYwZ+YUwiz2AOoZPxA
BA75S9cxJcyM5ZOC1qkdQ1NHnUXwuNZ31tUB/g7egaxSDxuJWGAkAA4dGkUmWtEl
HvI8SNe5ZnrLIsAfpB9ZQFaBP/ztn6xzDdUj+GnF/cvcL2CMyakrw/50+YemKcwn
mic0hOKhPjtC0Ro=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:26 2024 by rpki-client on console-fra.rpki-client.org