Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/yJnLefNVbuQMhmFospa9L5U1Vj0.roa
File: yJnLefNVbuQMhmFospa9L5U1Vj0.roa (raw, json)
Hash identifier: 1phsY5qNHHPrvV6rF0ZwbvFqx1Ciy6KbC03oQggmDkw=
Subject key identifier: C8:99:CB:79:F3:55:6E:E4:0C:86:61:68:B2:96:BD:2F:95:35:56:3D
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184E2660D17307D0BE9A6D164BDDB6DA1F2
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/yJnLefNVbuQMhmFospa9L5U1Vj0.roa
Signing time: Mon 05 Dec 2022 13:07:29 +0000
ROA not before: Mon 05 Dec 2022 13:07:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20632
IP address blocks: 109.188.0.0/16 maxlen: 24
84.204.230.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
84.204.160.0/20 maxlen: 20
84.204.176.0/21 maxlen: 21
79.171.8.0/21 maxlen: 21
84.204.188.0/22 maxlen: 22
84.204.192.0/18 maxlen: 18
193.201.228.0/22 maxlen: 24
217.195.64.0/19 maxlen: 19
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
84.204.0.0/17 maxlen: 17
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 20
91.193.212.0/22 maxlen: 24
84.204.132.0/22 maxlen: 22
84.204.138.0/24 maxlen: 24
84.204.136.0/24 maxlen: 24
84.204.139.0/24 maxlen: 24
84.204.140.0/22 maxlen: 22
84.204.144.0/20 maxlen: 20
195.5.128.0/19 maxlen: 24
82.140.64.0/18 maxlen: 18
128.204.64.0/18 maxlen: 24
82.140.93.0/24 maxlen: 24
95.137.0.0/17 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
82.196.64.0/19 maxlen: 19
81.24.128.0/20 maxlen: 20
195.78.116.0/23 maxlen: 24
213.172.0.0/19 maxlen: 19
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 24
195.144.224.0/19 maxlen: 19
81.3.128.0/18 maxlen: 18
213.243.64.0/18 maxlen: 24
213.182.160.0/19 maxlen: 19
217.115.80.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
46.47.192.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e2:66:0d:17:30:7d:0b:e9:a6:d1:64:bd:db:6d:a1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 5 13:07:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c899cb79f3556ee40c866168b296bd2f9535563d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:df:3a:92:e6:7d:25:3d:a5:46:d5:f7:80:9b:
ea:4b:07:06:3a:61:73:98:a8:f0:4f:bd:bf:46:4e:
f5:8e:f0:2d:f7:c4:aa:12:a0:98:fe:4a:5d:10:e3:
bf:84:dc:81:4f:15:07:ba:6b:43:af:8f:0d:6b:81:
78:63:a5:36:27:8e:a9:99:3b:29:1c:af:17:b5:42:
6a:96:d8:35:70:16:fd:fc:b3:b0:30:c6:0d:c4:d4:
d3:dc:a0:57:b8:be:cf:9d:3f:61:cd:a8:b0:52:b8:
86:08:7c:c3:1c:f9:6e:54:52:50:f9:70:11:d2:7f:
cb:0e:c0:78:3b:2f:6b:8f:e1:62:e8:59:e7:76:68:
7e:cf:49:4c:d0:ff:80:7f:b6:41:bb:92:c2:50:ad:
1d:7e:e6:e0:56:32:74:7c:e6:97:4a:ca:0d:39:81:
f5:1c:2b:73:3b:cf:c3:c6:c8:99:f4:2a:44:b6:8a:
29:fe:66:e2:d4:05:c8:27:13:1d:a9:bd:7d:0b:4e:
b3:81:03:a8:24:cf:e1:92:7f:39:db:e6:3d:25:0f:
21:58:bc:7d:da:c1:ca:c0:e0:a2:84:39:01:7e:2e:
82:65:d1:bf:a1:12:d6:b7:60:82:8a:cf:d4:c7:de:
5a:a2:3e:db:82:3c:f2:47:b0:33:37:67:dc:23:99:
2d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:99:CB:79:F3:55:6E:E4:0C:86:61:68:B2:96:BD:2F:95:35:56:3D
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/yJnLefNVbuQMhmFospa9L5U1Vj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.47.192.0/18
79.171.8.0/21
80.247.176.0/20
81.3.128.0/18
81.24.128.0/20
82.140.64.0/18
82.196.64.0/19
84.204.0.0/17
84.204.132.0-84.204.136.255
84.204.138.0-84.204.183.255
84.204.188.0-84.204.255.255
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.144.224.0/19
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.172.0.0/19
213.182.160.0/19
213.243.64.0/18
217.115.80.0/20
217.195.64.0/19
Signature Algorithm: sha256WithRSAEncryption
ab:98:ee:be:82:c1:7b:c2:4c:f7:3b:fd:9f:d0:9b:b4:b2:dc:
0b:46:35:ba:8d:76:7e:dc:46:6e:8a:33:63:40:5c:56:26:f2:
4a:af:78:49:12:96:a3:b3:cd:0c:23:78:0a:5a:a7:52:b2:a9:
27:5f:1c:7d:2a:0d:d2:db:a3:79:79:2a:52:6e:ce:05:ed:f6:
5c:92:10:74:3f:3a:19:c4:09:f0:a2:7b:f5:52:94:83:6f:f2:
19:f4:90:8b:ef:9f:c9:91:d9:4f:30:e3:89:13:95:08:6c:8a:
80:53:b9:9e:72:98:88:9c:19:ef:1b:26:41:34:1d:be:17:f2:
6d:65:32:75:ac:04:d2:3b:9f:83:6f:36:59:01:5b:30:0f:f3:
69:43:5f:0c:3f:ed:e3:5f:51:a6:6b:3e:7c:56:9f:2b:23:b7:
ad:05:ee:c1:77:a2:e4:69:a7:8c:c0:46:3d:1a:72:e1:34:44:
d6:98:12:c7:9d:d8:73:51:43:4e:df:c9:ed:14:81:e0:b8:aa:
6f:69:0c:e3:7c:fa:b7:21:73:03:69:fb:76:95:ef:80:37:41:
1b:de:42:71:25:e8:b9:ec:22:f3:03:3a:b2:24:d2:7e:19:3e:
46:41:5e:45:ee:59:b6:6a:c6:46:cf:8e:8f:d3:9e:38:79:eb:
d0:48:a3:52
-----BEGIN CERTIFICATE-----
MIIGHjCCBQagAwIBAgISAYTiZg0XMH0L6abRZL3bbaHyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMjA1MTMwNzI5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODk5Y2I3OWYzNTU2ZWU0MGM4NjYxNjhiMjk2YmQyZjk1MzU1NjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkN86kuZ9JT2lRtX3gJvqSwcGOmFz
mKjwT72/Rk71jvAt98SqEqCY/kpdEOO/hNyBTxUHumtDr48Na4F4Y6U2J46pmTsp
HK8XtUJqltg1cBb9/LOwMMYNxNTT3KBXuL7PnT9hzaiwUriGCHzDHPluVFJQ+XAR
0n/LDsB4Oy9rj+Fi6Fnndmh+z0lM0P+Af7ZBu5LCUK0dfubgVjJ0fOaXSsoNOYH1
HCtzO8/DxsiZ9CpEtoop/mbi1AXIJxMdqb19C06zgQOoJM/hkn852+Y9JQ8hWLx9
2sHKwOCihDkBfi6CZdG/oRLWt2CCis/Ux95aoj7bgjzyR7AzN2fcI5ktDwIDAQAB
o4IDKjCCAyYwHQYDVR0OBBYEFMiZy3nzVW7kDIZhaLKWvS+VNVY9MB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEveUpuTGVmTlZidVFNaG1Gb3NwYTlMNVUxVmowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBPgYIKwYBBQUHAQcBAf8EggEtMIIBKTCCASUEAgABMIIB
HQMEBi4vwAMEA0+rCAMEBFD3sAMEBlEDgAMEBFEYgAMEBlKMQAMEBVLEQAMEB1TM
ADAMAwQCVMyEAwQAVMyIMAwDBAFUzIoDBANUzLAwCwMEAlTMvAMDAFTMAwQHVRqA
AwQFVm3AAwQCW8HUAwQHXZmAAwQHXhmAAwQHX4kAAwQEbUpwAwQGbXxAAwMAbbwD
BAaAzEADBAOyF5ADBAK5AyADBAK50owDBAO8XqgDAwC8ogMEAsHJ5AMEBcMFgAME
BcMQYAMEAcNOdAMEBcOQ4AMEAMOVbwMEBcPmQAMEBdQOoAMEBdQsQAMEBdRFYAME
BdR3oAMEBdWaoAMEBdWoIAMEBdWsAAMEBdW2oAMEBtXzQAMEBNlzUAMEBdnDQDAN
BgkqhkiG9w0BAQsFAAOCAQEAq5juvoLBe8JM9zv9n9CbtLLcC0Y1uo12ftxGbooz
Y0BcVibySq94SRKWo7PNDCN4ClqnUrKpJ18cfSoN0tujeXkqUm7OBe32XJIQdD86
GcQJ8KJ79VKUg2/yGfSQi++fyZHZTzDjiROVCGyKgFO5nnKYiJwZ7xsmQTQdvhfy
bWUydawE0jufg282WQFbMA/zaUNfDD/t419Rpms+fFafKyO3rQXuwXei5GmnjMBG
PRpy4TRE1pgSx53Yc1FDTt/J7RSB4Liqb2kM43z6tyFzA2n7dpXvgDdBG95CcSXo
uewi8wM6siTSfhk+RkFeRe5ZtmrGRs+Oj9OeOHnr0EijUg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:36 2024 by rpki-client on console-ams.rpki-client.org