Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/yFnC_srd2OqERUQ3ri1-qauIevs.roa
File: yFnC_srd2OqERUQ3ri1-qauIevs.roa (raw, json)
Hash identifier: ApAqaUsUw/zlFktmO5BVf74lXDTa5Plrl8tramDSPuw=
Subject key identifier: C8:59:C2:FE:CA:DD:D8:EA:84:45:44:37:AE:2D:7E:A9:AB:88:7A:FB
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018601D8BCF87CE5937FD09F608EF0E19D03
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/yFnC_srd2OqERUQ3ri1-qauIevs.roa
Signing time: Mon 30 Jan 2023 08:43:46 +0000
ROA not before: Mon 30 Jan 2023 08:43:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12714
IP address blocks: 79.120.106.0/24 maxlen: 24
128.140.164.0/24 maxlen: 24
79.120.112.0/24 maxlen: 24
128.140.166.0/24 maxlen: 24
217.19.104.0/23 maxlen: 23
94.154.64.0/24 maxlen: 24
94.154.71.0/24 maxlen: 24
94.154.67.0/24 maxlen: 24
94.154.66.0/24 maxlen: 24
94.154.65.0/24 maxlen: 24
94.154.75.0/24 maxlen: 24
94.154.74.0/24 maxlen: 24
94.154.73.0/24 maxlen: 24
185.12.208.0/22 maxlen: 22
94.154.77.0/24 maxlen: 24
94.154.78.0/23 maxlen: 23
94.154.72.0/24 maxlen: 24
94.154.76.0/24 maxlen: 24
193.242.132.0/23 maxlen: 23
193.242.128.0/22 maxlen: 22
31.40.10.0/24 maxlen: 24
91.242.40.0/22 maxlen: 22
91.242.42.0/24 maxlen: 24
31.40.13.0/24 maxlen: 24
212.13.26.0/24 maxlen: 24
95.220.224.0/22 maxlen: 22
95.221.0.0/20 maxlen: 20
176.106.132.0/23 maxlen: 23
91.207.42.0/23 maxlen: 23
109.106.213.0/24 maxlen: 24
109.106.214.0/24 maxlen: 24
79.120.104.0/24 maxlen: 24
79.120.2.0/23 maxlen: 23
89.221.16.0/20 maxlen: 20
79.120.4.0/22 maxlen: 22
89.221.24.0/24 maxlen: 24
89.221.21.0/24 maxlen: 24
95.221.24.0/21 maxlen: 21
79.120.13.0/24 maxlen: 24
89.221.29.0/24 maxlen: 24
79.120.22.0/24 maxlen: 24
79.120.30.0/24 maxlen: 24
91.201.0.0/22 maxlen: 22
176.192.224.0/24 maxlen: 24
176.192.225.0/24 maxlen: 24
176.192.226.0/23 maxlen: 23
93.91.224.0/24 maxlen: 24
93.91.232.0/23 maxlen: 23
185.18.44.0/22 maxlen: 22
176.192.75.0/24 maxlen: 24
79.111.120.0/24 maxlen: 24
79.111.122.0/24 maxlen: 24
185.50.136.0/22 maxlen: 22
91.239.63.0/24 maxlen: 24
176.192.22.0/24 maxlen: 24
79.111.85.0/24 maxlen: 24
79.111.81.0/24 maxlen: 24
213.145.7.0/24 maxlen: 24
176.192.50.0/24 maxlen: 24
213.145.10.0/24 maxlen: 24
178.212.214.0/24 maxlen: 24
213.138.210.0/24 maxlen: 24
213.138.211.0/24 maxlen: 24
213.138.212.0/24 maxlen: 24
213.138.208.0/24 maxlen: 24
213.138.213.0/24 maxlen: 24
213.138.209.0/24 maxlen: 24
213.138.214.0/24 maxlen: 24
213.138.215.0/24 maxlen: 24
213.138.220.0/22 maxlen: 22
213.138.222.0/24 maxlen: 24
213.138.223.0/24 maxlen: 24
195.78.60.0/23 maxlen: 23
213.138.221.0/24 maxlen: 24
46.232.217.0/24 maxlen: 24
46.232.218.0/24 maxlen: 24
46.232.220.0/24 maxlen: 24
176.192.116.0/24 maxlen: 24
176.192.125.0/24 maxlen: 24
176.192.124.0/24 maxlen: 24
91.218.40.0/22 maxlen: 22
79.111.8.0/22 maxlen: 22
195.225.160.0/24 maxlen: 24
195.225.161.0/24 maxlen: 24
195.225.160.0/22 maxlen: 22
195.225.162.0/24 maxlen: 24
195.225.163.0/24 maxlen: 24
94.232.11.0/24 maxlen: 24
94.232.15.0/24 maxlen: 24
194.28.216.0/22 maxlen: 22
194.28.218.0/24 maxlen: 24
194.28.216.0/24 maxlen: 24
109.170.106.0/24 maxlen: 24
109.75.240.0/24 maxlen: 24
109.170.68.0/24 maxlen: 24
109.75.242.0/23 maxlen: 23
109.75.249.0/24 maxlen: 24
109.75.250.0/23 maxlen: 23
195.191.10.0/23 maxlen: 23
178.211.1.0/24 maxlen: 24
217.115.176.0/24 maxlen: 24
195.216.200.0/23 maxlen: 23
80.68.70.0/23 maxlen: 23
80.68.72.0/22 maxlen: 22
80.68.76.0/24 maxlen: 24
78.41.96.0/22 maxlen: 22
91.196.236.0/22 maxlen: 22
109.95.231.0/24 maxlen: 24
217.8.86.0/24 maxlen: 24
217.8.94.0/24 maxlen: 24
217.8.95.0/24 maxlen: 24
217.8.93.0/24 maxlen: 24
95.129.92.0/23 maxlen: 23
212.48.141.0/24 maxlen: 24
212.48.155.0/24 maxlen: 24
193.169.222.0/23 maxlen: 23
89.20.144.0/24 maxlen: 24
89.20.151.0/24 maxlen: 24
89.20.149.0/24 maxlen: 24
89.20.159.0/24 maxlen: 24
2a00:16d0::/32 maxlen: 32
2a00:d18::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:01:d8:bc:f8:7c:e5:93:7f:d0:9f:60:8e:f0:e1:9d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 30 08:43:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c859c2fecaddd8ea84454437ae2d7ea9ab887afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ba:1f:74:de:62:0f:a5:a7:28:70:91:14:ec:
ae:c1:f0:d0:23:9b:96:87:0f:f0:59:a3:83:c6:b1:
26:16:98:b6:3f:3e:53:fb:75:13:5a:4d:4f:63:87:
05:25:68:37:72:ab:60:cd:0b:2c:46:92:6c:08:d8:
68:a4:37:71:08:e7:69:28:87:8e:95:e6:3b:0b:a7:
4f:82:f7:4f:d0:02:cf:f1:5f:ab:eb:ae:39:ee:f8:
d9:14:04:c0:6e:83:51:5e:18:b9:d4:07:bf:89:c3:
57:25:d9:95:20:d7:16:6d:90:fc:5a:00:b3:3e:ae:
1c:e0:ff:c8:c6:57:bc:58:18:df:85:c6:81:d2:79:
73:b2:2c:d0:c2:c2:fe:65:e3:6c:72:77:ec:61:a3:
2a:ca:c4:9f:2a:a6:cc:32:e8:ff:44:fd:15:16:53:
39:53:b6:c4:77:83:7f:4c:27:b8:12:0d:6f:36:7c:
77:5a:44:17:cd:8b:29:e8:74:c1:9d:1c:c6:e6:3a:
a3:4e:65:31:96:06:8a:e7:a0:5e:c9:07:2d:b0:27:
51:7e:c7:1d:0a:23:5b:58:48:c2:f0:dd:3a:98:6c:
1f:11:ef:d3:22:5a:33:33:ca:f9:47:d4:7d:f3:e5:
7a:02:48:0f:63:66:33:26:3b:d5:f8:7f:eb:80:34:
0a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:59:C2:FE:CA:DD:D8:EA:84:45:44:37:AE:2D:7E:A9:AB:88:7A:FB
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/yFnC_srd2OqERUQ3ri1-qauIevs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.10.0/24
31.40.13.0/24
46.232.217.0-46.232.218.255
46.232.220.0/24
78.41.96.0/22
79.111.8.0/22
79.111.81.0/24
79.111.85.0/24
79.111.120.0/24
79.111.122.0/24
79.120.2.0-79.120.7.255
79.120.13.0/24
79.120.22.0/24
79.120.30.0/24
79.120.104.0/24
79.120.106.0/24
79.120.112.0/24
80.68.70.0-80.68.76.255
89.20.144.0/24
89.20.149.0/24
89.20.151.0/24
89.20.159.0/24
89.221.16.0/20
91.196.236.0/22
91.201.0.0/22
91.207.42.0/23
91.218.40.0/22
91.239.63.0/24
91.242.40.0/22
93.91.224.0/24
93.91.232.0/23
94.154.64.0/22
94.154.71.0-94.154.79.255
94.232.11.0/24
94.232.15.0/24
95.129.92.0/23
95.220.224.0/22
95.221.0.0/20
95.221.24.0/21
109.75.240.0/24
109.75.242.0/23
109.75.249.0-109.75.251.255
109.95.231.0/24
109.106.213.0-109.106.214.255
109.170.68.0/24
109.170.106.0/24
128.140.164.0/24
128.140.166.0/24
176.106.132.0/23
176.192.22.0/24
176.192.50.0/24
176.192.75.0/24
176.192.116.0/24
176.192.124.0/23
176.192.224.0/22
178.211.1.0/24
178.212.214.0/24
185.12.208.0/22
185.18.44.0/22
185.50.136.0/22
193.169.222.0/23
193.242.128.0-193.242.133.255
194.28.216.0/22
195.78.60.0/23
195.191.10.0/23
195.216.200.0/23
195.225.160.0/22
212.13.26.0/24
212.48.141.0/24
212.48.155.0/24
213.138.208.0/21
213.138.220.0/22
213.145.7.0/24
213.145.10.0/24
217.8.86.0/24
217.8.93.0-217.8.95.255
217.19.104.0/23
217.115.176.0/24
IPv6:
2a00:d18::/32
2a00:16d0::/32
Signature Algorithm: sha256WithRSAEncryption
96:a4:a1:6c:97:c0:40:3a:19:33:9b:81:b9:bc:a6:72:73:88:
4b:f2:e9:8e:ca:3a:62:3e:fc:0f:8f:ab:b5:95:67:3b:51:fb:
ca:00:0a:12:55:7b:06:61:28:13:95:1d:40:f2:8b:cf:e2:42:
aa:2e:6b:e4:e3:60:ca:9d:a9:2c:39:ce:10:bb:af:a4:be:cd:
7f:80:50:4f:ab:55:65:06:18:94:fb:f2:c5:3f:e4:a2:03:83:
0f:47:12:4b:72:ed:02:e9:d3:09:92:4c:f3:ab:06:2c:dd:e0:
a1:e5:51:ee:ef:ff:f4:e7:5b:38:27:bf:6b:5d:a4:f0:53:7f:
53:a1:5c:41:5d:3c:31:fe:ee:da:b1:99:3a:f2:9b:ff:1d:16:
d5:66:de:71:63:df:39:46:b0:31:e5:f0:19:19:ad:24:bf:43:
a3:9f:92:b3:d8:12:f1:eb:4e:83:c1:b3:15:0f:47:db:3e:36:
19:95:e1:45:24:5e:57:19:53:2b:94:7f:a4:60:6f:b3:fe:1d:
d6:b9:e4:93:1c:ae:b2:25:d2:d4:4a:98:aa:1f:ec:6a:e8:32:
d7:6f:2b:9e:f5:a6:cc:e8:85:6b:cf:79:cc:e7:4a:f2:11:94:
df:82:5b:89:7a:20:f8:0b:86:3b:04:3e:9f:fa:a9:49:3b:d9:
9d:23:13:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:33 2025 by rpki-client