Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/yLdEXG7srOvQXQkdvMkNh20B_IA.roa
File: yLdEXG7srOvQXQkdvMkNh20B_IA.roa (raw, json)
Hash identifier: kzeGXueAH59EUmjVCtGq261t55pYnIlwBdq+nAvo33k=
Subject key identifier: C8:B7:44:5C:6E:EC:AC:EB:D0:5D:09:1D:BC:C9:0D:87:6D:01:FC:80
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184765900BE9C353CDBCF6CC0A3ED06F4D1
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/yLdEXG7srOvQXQkdvMkNh20B_IA.roa
Signing time: Mon 14 Nov 2022 13:34:15 +0000
ROA not before: Mon 14 Nov 2022 13:34:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29648
IP address blocks: 109.188.0.0/16 maxlen: 24
85.26.128.0/17 maxlen: 24
193.201.228.0/22 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
78.25.64.0/18 maxlen: 24
31.173.119.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
195.5.128.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
31.173.104.0/24 maxlen: 24
31.173.105.0/24 maxlen: 24
31.173.112.0/24 maxlen: 24
31.173.109.0/24 maxlen: 24
31.173.110.0/24 maxlen: 24
31.173.107.0/24 maxlen: 24
31.173.108.0/24 maxlen: 24
31.173.106.0/24 maxlen: 24
31.173.111.0/24 maxlen: 24
31.173.117.0/24 maxlen: 24
31.173.118.0/24 maxlen: 24
31.173.115.0/24 maxlen: 24
31.173.116.0/24 maxlen: 24
31.173.113.0/24 maxlen: 24
31.173.114.0/24 maxlen: 24
46.232.200.0/21 maxlen: 24
62.64.0.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
195.16.96.0/19 maxlen: 24
79.171.8.0/21 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
185.3.32.0/22 maxlen: 24
86.109.192.0/19 maxlen: 24
188.170.98.0/24 maxlen: 24
188.170.97.0/24 maxlen: 24
188.170.96.0/24 maxlen: 24
188.170.103.0/24 maxlen: 24
188.170.100.0/24 maxlen: 24
188.170.105.0/24 maxlen: 24
188.170.102.0/24 maxlen: 24
188.170.99.0/24 maxlen: 24
188.170.104.0/24 maxlen: 24
188.170.101.0/24 maxlen: 24
188.170.106.0/24 maxlen: 24
188.170.111.0/24 maxlen: 24
188.170.108.0/24 maxlen: 24
188.170.110.0/24 maxlen: 24
188.170.107.0/24 maxlen: 24
212.69.96.0/19 maxlen: 24
188.170.109.0/24 maxlen: 24
188.170.112.0/24 maxlen: 24
188.170.114.0/24 maxlen: 24
188.170.113.0/24 maxlen: 24
188.170.116.0/24 maxlen: 24
188.170.115.0/24 maxlen: 24
188.170.118.0/24 maxlen: 24
188.170.117.0/24 maxlen: 24
188.170.119.0/24 maxlen: 24
188.170.122.0/24 maxlen: 24
188.170.121.0/24 maxlen: 24
188.170.124.0/24 maxlen: 24
188.170.123.0/24 maxlen: 24
188.170.125.0/24 maxlen: 24
188.170.120.0/24 maxlen: 24
188.170.127.0/24 maxlen: 24
188.170.126.0/24 maxlen: 24
78.109.120.0/24 maxlen: 24
78.109.121.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
178.176.96.0/24 maxlen: 24
178.176.98.0/24 maxlen: 24
178.176.97.0/24 maxlen: 24
178.176.102.0/24 maxlen: 24
178.176.99.0/24 maxlen: 24
178.176.101.0/24 maxlen: 24
178.176.103.0/24 maxlen: 24
178.176.100.0/24 maxlen: 24
78.41.100.0/22 maxlen: 24
178.176.118.0/24 maxlen: 24
178.176.115.0/24 maxlen: 24
178.176.117.0/24 maxlen: 24
178.176.114.0/24 maxlen: 24
178.176.116.0/24 maxlen: 24
178.176.123.0/24 maxlen: 24
178.176.120.0/24 maxlen: 24
178.176.125.0/24 maxlen: 24
178.176.122.0/24 maxlen: 24
178.176.119.0/24 maxlen: 24
178.176.124.0/24 maxlen: 24
178.176.121.0/24 maxlen: 24
178.176.126.0/24 maxlen: 24
178.176.127.0/24 maxlen: 24
83.169.192.0/18 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:76:59:00:be:9c:35:3c:db:cf:6c:c0:a3:ed:06:f4:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Nov 14 13:34:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8b7445c6eecacebd05d091dbcc90d876d01fc80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:50:f8:83:56:b7:e3:f7:8e:06:93:ad:03:2d:
7b:0d:77:bf:53:a8:a9:59:5a:e3:e3:a3:70:51:87:
3e:9c:54:9d:28:9e:16:47:3f:7b:ef:c3:15:38:c2:
71:7b:8e:a1:58:5d:28:e4:88:4b:94:bd:a4:7e:71:
62:e3:7f:9b:e1:cd:bb:52:38:e2:6d:ab:df:32:6a:
40:21:16:c0:a9:e2:58:26:3d:b2:a5:32:0e:99:57:
c2:ab:0c:2c:db:0f:79:68:c8:ae:bd:22:9c:cf:ae:
f5:a9:6d:fc:6a:fb:9c:96:b5:d5:f2:df:a3:84:10:
1c:d0:bf:92:36:8e:ee:18:50:22:16:b4:d2:c6:8b:
0c:eb:85:a2:ac:2e:88:93:0f:46:08:23:73:de:5f:
8c:9d:58:d8:1f:aa:f1:d5:b3:31:8c:e8:0b:e5:86:
07:40:37:c6:74:7b:66:83:4d:77:6a:bb:5d:6e:f3:
10:da:4c:11:86:15:99:dc:83:3e:4f:a2:90:e7:aa:
ec:e5:78:f5:95:fe:95:1b:fd:08:6a:07:4c:f3:20:
04:1d:20:54:9c:9b:eb:fd:c1:3f:d5:02:0b:45:83:
bd:9c:08:f4:be:88:c6:09:74:3f:4d:48:be:c9:27:
bc:1b:5b:ed:22:dd:c3:e6:0a:ce:22:92:d9:e9:ee:
4a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B7:44:5C:6E:EC:AC:EB:D0:5D:09:1D:BC:C9:0D:87:6D:01:FC:80
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/yLdEXG7srOvQXQkdvMkNh20B_IA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.104.0-31.173.119.255
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
78.109.120.0/23
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.96.0/21
178.176.114.0-178.176.127.255
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.96.0/19
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
4e:e5:48:94:37:7e:14:85:dc:d8:20:f6:56:d5:b5:c6:94:0b:
14:88:e8:be:50:5a:fd:ce:56:e5:ac:13:44:aa:87:f4:91:ef:
44:41:2c:12:a0:63:6e:fe:dc:f2:a1:54:f4:a5:7e:46:02:03:
4c:fb:e1:f0:69:db:fe:9d:52:e9:42:2c:f1:08:9d:c4:d0:8f:
96:a5:4e:ff:da:2c:31:ad:f9:41:1a:52:9a:ea:ff:4d:3d:2e:
57:1d:09:6a:64:df:c5:2a:ce:b2:b0:0e:1f:7e:f7:68:78:d7:
e4:05:a1:69:93:47:fa:7c:8b:29:8b:92:e3:10:35:5d:13:16:
a8:cd:da:9b:cb:f9:e2:af:8f:fa:6a:fb:48:89:34:60:21:cc:
9f:8a:2c:f8:3e:f4:60:c2:22:5c:0a:f0:3f:fd:fc:47:4f:68:
3f:2d:ed:cb:46:18:73:9c:84:e4:50:34:74:ea:61:ff:8d:8a:
10:a4:96:76:4f:16:49:51:97:ac:b2:b4:3a:25:08:d8:2e:12:
b6:68:e4:35:f8:1d:1a:93:f3:b0:e0:cf:16:97:8f:a5:04:32:
68:02:c7:d4:d9:e7:87:31:a7:84:b0:b0:24:50:a1:68:ae:fc:
21:78:2e:98:a4:30:19:80:76:77:60:bc:e5:e0:79:a0:e0:31:
65:4a:c0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:36 2024 by rpki-client on console-ams.rpki-client.org