Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/zkX2WOBF7yrAMb6QI6K-UYd8m-U.roa
File: zkX2WOBF7yrAMb6QI6K-UYd8m-U.roa (raw, json)
Hash identifier: Eo7Ziw0nX4LRT5unoPTjqB5nKL9x500+LlhyMxGshvM=
Subject key identifier: CE:45:F6:58:E0:45:EF:2A:C0:31:BE:90:23:A2:BE:51:87:7C:9B:E5
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01847633531E0A11D05510680AA3E2B6C14D
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/zkX2WOBF7yrAMb6QI6K-UYd8m-U.roa
Signing time: Mon 14 Nov 2022 12:53:05 +0000
ROA not before: Mon 14 Nov 2022 12:53:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31163
IP address blocks: 109.188.0.0/16 maxlen: 24
85.26.128.0/17 maxlen: 24
193.201.228.0/22 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
31.173.192.0/24 maxlen: 24
31.173.193.0/24 maxlen: 24
31.173.196.0/24 maxlen: 24
31.173.199.0/24 maxlen: 24
31.173.194.0/24 maxlen: 24
31.173.197.0/24 maxlen: 24
31.173.195.0/24 maxlen: 24
31.173.198.0/24 maxlen: 24
31.173.201.0/24 maxlen: 24
31.173.204.0/24 maxlen: 24
31.173.202.0/24 maxlen: 24
31.173.205.0/24 maxlen: 24
31.173.200.0/24 maxlen: 24
31.173.203.0/24 maxlen: 24
31.173.206.0/24 maxlen: 24
31.173.209.0/24 maxlen: 24
31.173.212.0/24 maxlen: 24
31.173.207.0/24 maxlen: 24
31.173.210.0/24 maxlen: 24
31.173.213.0/24 maxlen: 24
31.173.208.0/24 maxlen: 24
31.173.211.0/24 maxlen: 24
31.173.217.0/24 maxlen: 24
31.173.215.0/24 maxlen: 24
31.173.218.0/24 maxlen: 24
31.173.216.0/24 maxlen: 24
31.173.219.0/24 maxlen: 24
31.173.214.0/24 maxlen: 24
31.173.220.0/24 maxlen: 24
31.173.223.0/24 maxlen: 24
31.173.221.0/24 maxlen: 24
31.173.222.0/24 maxlen: 24
78.25.64.0/18 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
109.106.192.0/24 maxlen: 24
109.106.197.0/24 maxlen: 24
109.106.195.0/24 maxlen: 24
109.106.198.0/24 maxlen: 24
109.106.193.0/24 maxlen: 24
109.106.196.0/24 maxlen: 24
109.106.199.0/24 maxlen: 24
109.106.194.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
46.232.200.0/21 maxlen: 24
62.64.0.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
46.29.192.0/21 maxlen: 24
178.178.3.0/24 maxlen: 24
178.178.0.0/24 maxlen: 24
178.178.2.0/24 maxlen: 24
178.178.4.0/24 maxlen: 24
178.178.1.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
37.29.123.0/24 maxlen: 24
37.29.125.0/24 maxlen: 24
37.29.120.0/24 maxlen: 24
37.29.119.0/24 maxlen: 24
37.29.122.0/24 maxlen: 24
37.29.121.0/24 maxlen: 24
37.29.124.0/24 maxlen: 24
37.29.126.0/24 maxlen: 24
37.29.127.0/24 maxlen: 24
79.171.8.0/21 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
185.3.32.0/22 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
178.176.215.0/24 maxlen: 24
178.176.218.0/24 maxlen: 24
178.176.217.0/24 maxlen: 24
178.176.219.0/24 maxlen: 24
178.176.214.0/24 maxlen: 24
178.176.216.0/24 maxlen: 24
178.176.223.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
178.176.220.0/24 maxlen: 24
178.176.222.0/24 maxlen: 24
178.176.221.0/24 maxlen: 24
188.170.187.0/24 maxlen: 24
188.170.190.0/24 maxlen: 24
188.170.189.0/24 maxlen: 24
188.170.192.0/24 maxlen: 24
188.170.191.0/24 maxlen: 24
188.170.188.0/24 maxlen: 24
188.170.195.0/24 maxlen: 24
188.170.198.0/24 maxlen: 24
188.170.197.0/24 maxlen: 24
188.170.199.0/24 maxlen: 24
188.170.194.0/24 maxlen: 24
188.170.193.0/24 maxlen: 24
188.170.196.0/24 maxlen: 24
188.170.200.0/22 maxlen: 22
188.170.204.0/22 maxlen: 22
188.170.211.0/24 maxlen: 24
188.170.213.0/24 maxlen: 24
188.170.208.0/24 maxlen: 24
188.170.210.0/24 maxlen: 24
188.170.209.0/24 maxlen: 24
188.170.212.0/24 maxlen: 24
188.170.214.0/24 maxlen: 24
188.170.219.0/24 maxlen: 24
188.170.216.0/24 maxlen: 24
188.170.215.0/24 maxlen: 24
188.170.218.0/24 maxlen: 24
188.170.217.0/24 maxlen: 24
188.170.224.0/24 maxlen: 24
188.170.221.0/24 maxlen: 24
188.170.222.0/24 maxlen: 24
188.170.220.0/24 maxlen: 24
188.170.225.0/24 maxlen: 24
188.170.226.0/24 maxlen: 24
188.170.223.0/24 maxlen: 24
188.170.227.0/24 maxlen: 24
37.29.112.0/24 maxlen: 24
37.29.115.0/24 maxlen: 24
37.29.118.0/24 maxlen: 24
37.29.117.0/24 maxlen: 24
37.29.114.0/24 maxlen: 24
37.29.113.0/24 maxlen: 24
37.29.116.0/24 maxlen: 24
128.204.64.0/18 maxlen: 24
188.170.171.0/24 maxlen: 24
188.170.170.0/24 maxlen: 24
188.170.169.0/24 maxlen: 24
188.170.168.0/21 maxlen: 21
188.170.172.0/24 maxlen: 24
188.170.179.0/24 maxlen: 24
188.170.174.0/24 maxlen: 24
95.137.0.0/17 maxlen: 24
188.170.173.0/24 maxlen: 24
188.170.176.0/24 maxlen: 24
188.170.175.0/24 maxlen: 24
188.170.178.0/24 maxlen: 24
188.170.177.0/24 maxlen: 24
188.170.182.0/24 maxlen: 24
188.170.181.0/24 maxlen: 24
188.170.184.0/24 maxlen: 24
188.170.183.0/24 maxlen: 24
188.170.186.0/24 maxlen: 24
188.170.185.0/24 maxlen: 24
188.170.180.0/24 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
83.149.24.0/24 maxlen: 24
83.149.29.0/24 maxlen: 24
83.149.30.0/24 maxlen: 24
83.149.28.0/24 maxlen: 24
83.149.25.0/24 maxlen: 24
83.149.31.0/24 maxlen: 24
78.41.100.0/22 maxlen: 24
178.176.192.0/24 maxlen: 24
178.176.194.0/24 maxlen: 24
178.176.193.0/24 maxlen: 24
178.176.196.0/24 maxlen: 24
178.176.195.0/24 maxlen: 24
178.176.198.0/24 maxlen: 24
178.176.197.0/24 maxlen: 24
178.176.202.0/24 maxlen: 24
178.176.203.0/24 maxlen: 24
178.176.210.0/24 maxlen: 24
178.176.209.0/24 maxlen: 24
178.176.212.0/24 maxlen: 24
178.176.211.0/24 maxlen: 24
178.176.213.0/24 maxlen: 24
178.176.208.0/24 maxlen: 24
83.169.192.0/18 maxlen: 24
109.74.112.0/20 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
46.229.128.0/20 maxlen: 24
83.229.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:76:33:53:1e:0a:11:d0:55:10:68:0a:a3:e2:b6:c1:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Nov 14 12:53:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce45f658e045ef2ac031be9023a2be51877c9be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8f:fc:c1:1d:23:c0:0f:51:4d:9c:55:84:3c:
02:60:39:08:a3:95:b2:ee:5b:2d:86:f1:d3:33:18:
9e:57:74:98:ec:e1:be:d9:2b:61:72:ee:6d:e2:f0:
1d:62:1f:b5:75:3a:84:b2:f4:bb:54:01:94:6c:b3:
71:0f:50:82:0b:3f:19:ae:0c:2c:c9:d6:21:41:bc:
e5:44:ec:1d:37:6f:9f:3a:e3:3c:ab:1a:61:5c:19:
0f:e1:41:5d:1e:83:34:10:b6:86:2e:c9:b9:bf:ce:
b6:8c:d6:e9:e0:c6:5a:94:3b:31:7a:c0:8a:fd:b2:
7c:8e:24:57:8c:f9:8a:5d:97:34:e2:3e:0d:9b:df:
d3:67:16:02:ee:44:0f:34:09:0a:a2:29:c9:79:29:
c1:fd:b4:88:d7:74:0a:2c:ec:88:74:e8:db:e8:25:
34:3d:19:9b:91:52:fc:16:94:da:60:15:0a:bb:4d:
fe:59:88:4f:5a:63:a4:0d:93:05:27:50:fe:1c:cc:
8d:de:13:b5:3b:4e:ce:13:b6:2a:7b:13:07:d8:c2:
88:ef:85:2b:0a:d7:2f:1b:2b:62:93:f5:74:62:35:
e1:f3:b8:12:11:86:ca:99:40:ff:93:df:c5:cf:03:
03:a5:3b:37:be:0d:82:2a:60:10:81:fd:38:22:4b:
2a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:45:F6:58:E0:45:EF:2A:C0:31:BE:90:23:A2:BE:51:87:7C:9B:E5
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/zkX2WOBF7yrAMb6QI6K-UYd8m-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.192.0/19
37.29.112.0/20
46.29.192.0/21
46.229.128.0/20
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.149.24.0/23
83.149.28.0/22
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.106.192.0/21
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.192.0-178.176.198.255
178.176.202.0/23
178.176.208.0/20
178.178.0.0-178.178.4.255
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.168.0-188.170.227.255
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
05:46:44:be:ba:c9:c9:48:01:f6:a1:b8:b5:81:c4:fa:00:b0:
dd:d2:ca:8a:97:ec:f6:31:64:45:dd:20:d9:67:85:09:d5:7d:
74:a5:7d:d2:48:13:35:17:6d:1a:8e:ae:33:70:e2:97:97:55:
3b:97:c8:21:5d:41:94:ce:45:34:84:37:6d:39:a2:fb:01:46:
5b:7f:8b:5e:c3:bf:01:f4:8f:5a:21:e9:6f:64:c2:be:76:0c:
25:8a:71:2f:cd:c5:c4:f0:8c:dd:aa:3b:1f:2e:5e:da:67:e0:
49:69:c1:68:f6:90:5b:8e:b0:df:4a:d2:8a:ab:71:26:c3:83:
62:55:7c:5e:0f:bd:5e:69:2b:60:b5:cd:96:97:e0:9a:9b:31:
0d:f5:65:94:e7:cb:64:0c:4e:3a:ef:ab:e0:50:f5:a5:4c:0a:
5b:4d:9c:18:19:61:0b:f5:9c:d0:eb:0e:6f:7f:b5:1f:18:4c:
63:7d:f2:62:62:d3:56:cd:5d:da:ae:6a:5c:04:83:53:ae:64:
70:31:62:73:de:89:ae:7c:bb:00:b4:9b:73:24:a9:13:3e:a2:
5f:53:42:0c:0d:66:4f:c0:7a:2e:e0:66:be:36:9a:16:78:1c:
19:d2:ce:5d:4f:4d:42:da:c2:cc:50:08:cb:61:e5:98:6e:9c:
de:dc:c0:a6
-----BEGIN CERTIFICATE-----
MIIGTjCCBTagAwIBAgISAYR2M1MeChHQVRBoCqPitsFNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMTE0MTI1MzA1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTQ1ZjY1OGUwNDVlZjJhYzAzMWJlOTAyM2EyYmU1MTg3N2M5YmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4/8wR0jwA9RTZxVhDwCYDkIo5Wy
7lsthvHTMxieV3SY7OG+2Sthcu5t4vAdYh+1dTqEsvS7VAGUbLNxD1CCCz8Zrgws
ydYhQbzlROwdN2+fOuM8qxphXBkP4UFdHoM0ELaGLsm5v862jNbp4MZalDsxesCK
/bJ8jiRXjPmKXZc04j4Nm9/TZxYC7kQPNAkKoinJeSnB/bSI13QKLOyIdOjb6CU0
PRmbkVL8FpTaYBUKu03+WYhPWmOkDZMFJ1D+HMyN3hO1O07OE7YqexMH2MKI74Ur
CtcvGytik/V0YjXh87gSEYbKmUD/k9/FzwMDpTs3vg2CKmAQgf04Iksq4QIDAQAB
o4IDWjCCA1YwHQYDVR0OBBYEFM5F9ljgRe8qwDG+kCOivlGHfJvlMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvemtYMldPQkY3eXJBTWI2UUk2Sy1VWWQ4bS1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBbgYIKwYBBQUHAQcBAf8EggFdMIIBWTCCAVUEAgABMIIB
TQMEBR+twAMEBCUdcAMEAy4dwAMEBC7lgAMEAy7oyAMEBT5AAAMEBU3poAMEBk4Z
QAMEAk4pZAMEA0+rCAMEBFD3sAMEBFEYgAMEAVOVGAMEAlOVHAMEBlOpwAMEBVPe
wAMEB1PlgAMEB1UagAMEBVZtwAMEAlvB1AMEB12ZgAMEB14ZgAMEB1+JAAMEBG1K
cAMEA21qwAMEBm18QAMDAG28AwQGgMxAAwQDsheQMAwDBAaysMADBACysMYDBAGy
sMoDBASysNAwCwMDAbKyAwQAsrIEAwQCuQMgAwQCudKMAwQDvF6oAwMAvKIwDAME
A7yqqAMEAryq4AMEAsHJ5AMEBcMFgAMEBcMQYAMEAcNOdAMEAMOVbwMEBcPmQAME
BdQOoAMEBdQsQAMEBdRFYAMEBdR3oAMEBdWaoAMEBdWoIAMEBtXzQAMEBNlzUDAN
BgkqhkiG9w0BAQsFAAOCAQEABUZEvrrJyUgB9qG4tYHE+gCw3dLKipfs9jFkRd0g
2WeFCdV9dKV90kgTNRdtGo6uM3Dil5dVO5fIIV1BlM5FNIQ3bTmi+wFGW3+LXsO/
AfSPWiHpb2TCvnYMJYpxL83FxPCM3ao7Hy5e2mfgSWnBaPaQW46w30rSiqtxJsOD
YlV8Xg+9XmkrYLXNlpfgmpsxDfVllOfLZAxOOu+r4FD1pUwKW02cGBlhC/Wc0OsO
b3+1HxhMY33yYmLTVs1d2q5qXASDU65kcDFic96Jrny7ALSbcySpEz6iX1NCDA1m
T8B6LuBmvjaaFngcGdLOXU9NQtrCzFAIy2HlmG6c3tzApg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:36 2025 by rpki-client