Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/zmZjnHvSqAeEJZWP0oi5ZYrmGjY.roa
File: zmZjnHvSqAeEJZWP0oi5ZYrmGjY.roa (raw, json)
Hash identifier: 6vVQyl+aRt9qf60sd3HRJJzWET9cdlLGOoZxuuSkxWw=
Subject key identifier: CE:66:63:9C:7B:D2:A8:07:84:25:95:8F:D2:88:B9:65:8A:E6:1A:36
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0185059116B8D170C0162F767693DEBB5DE1
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/zmZjnHvSqAeEJZWP0oi5ZYrmGjY.roa
Signing time: Mon 12 Dec 2022 09:01:12 +0000
ROA not before: Mon 12 Dec 2022 09:01:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50928
IP address blocks: 46.29.192.0/21 maxlen: 21
46.29.199.0/24 maxlen: 24
46.29.194.0/24 maxlen: 24
46.29.196.0/24 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.16.96.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
188.170.244.0/23 maxlen: 23
188.170.244.0/24 maxlen: 24
188.170.245.0/24 maxlen: 24
188.170.250.0/24 maxlen: 24
188.170.251.0/24 maxlen: 24
188.170.252.0/24 maxlen: 24
188.170.248.0/24 maxlen: 24
188.170.249.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 21
188.162.0.0/16 maxlen: 24
178.23.149.0/24 maxlen: 24
178.23.148.0/24 maxlen: 24
178.23.151.0/24 maxlen: 24
178.23.150.0/24 maxlen: 24
178.176.250.0/24 maxlen: 24
178.176.251.0/24 maxlen: 24
178.176.252.0/24 maxlen: 24
178.176.248.0/24 maxlen: 24
178.176.253.0/24 maxlen: 24
178.176.249.0/24 maxlen: 24
37.29.81.0/24 maxlen: 24
37.29.80.0/24 maxlen: 24
37.29.83.0/24 maxlen: 24
37.29.80.0/22 maxlen: 22
37.29.82.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
31.173.248.0/21 maxlen: 21
31.173.248.0/24 maxlen: 24
31.173.252.0/24 maxlen: 24
31.173.253.0/24 maxlen: 24
31.173.249.0/24 maxlen: 24
31.173.250.0/24 maxlen: 24
31.173.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:91:16:b8:d1:70:c0:16:2f:76:76:93:de:bb:5d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 09:01:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce66639c7bd2a8078425958fd288b9658ae61a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:cb:4e:d7:a6:d8:98:41:de:e1:fd:29:22:e8:
7d:5f:b1:59:8d:13:46:e6:70:6c:ad:f5:b1:aa:a7:
20:98:56:cc:37:6e:69:92:37:58:c9:00:d1:0b:22:
64:ab:86:2d:2a:6c:b6:dd:e8:2c:c3:2f:ba:b3:2b:
07:f2:4a:31:bc:b3:43:88:8c:ea:19:f5:ae:a4:0c:
a4:6c:79:09:1f:87:d2:5d:be:3e:f0:bc:4c:46:1e:
f8:c8:42:1b:9e:e6:13:03:87:fa:14:c2:6d:19:9f:
36:59:06:93:81:da:c6:f1:17:32:5c:dc:67:6d:16:
43:3b:ae:99:a8:15:50:5b:a0:a7:67:2d:dd:db:39:
da:7d:62:8f:eb:d2:86:4e:0e:6b:5a:a5:19:5a:1f:
bd:21:6f:a8:12:0f:3b:cc:ae:1a:2e:67:cc:3c:1f:
8c:c4:28:72:22:06:42:86:9f:dc:a4:34:e5:41:89:
6e:b2:37:65:1f:93:c2:11:ed:ac:9f:ab:2e:c7:aa:
97:c0:96:10:9c:8e:80:c9:cb:78:bd:32:f2:55:8d:
e3:5a:6b:71:61:09:ec:54:11:fd:16:15:56:06:ef:
21:ad:68:5f:0e:dd:dc:ed:86:c8:7f:ed:c8:a1:f7:
60:90:e9:10:a2:f3:2c:86:c7:88:f8:73:c3:b6:80:
f3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:66:63:9C:7B:D2:A8:07:84:25:95:8F:D2:88:B9:65:8A:E6:1A:36
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/zmZjnHvSqAeEJZWP0oi5ZYrmGjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.248.0/21
37.29.80.0/22
46.29.192.0/21
178.23.144.0/21
178.176.248.0-178.176.253.255
188.162.0.0/16
188.170.244.0/23
188.170.248.0-188.170.252.255
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
Signature Algorithm: sha256WithRSAEncryption
8c:21:b9:75:6a:42:0a:19:bb:20:6e:5c:20:89:ca:df:32:66:
e6:22:f9:ab:ab:cb:36:a0:5d:cf:db:04:bd:ea:61:01:00:a5:
cc:ca:20:b3:c0:fd:5a:3b:80:e5:5e:0e:28:65:ff:e5:a5:92:
86:86:7c:39:a7:dc:e2:6d:c0:9d:2f:6d:4e:c7:2e:b4:62:18:
da:d5:84:f7:48:f4:44:a5:c9:46:55:4f:4b:fd:4d:f8:08:ef:
d5:5f:7f:b7:8e:bf:f7:5e:2d:f9:8d:d4:3c:b5:dd:ca:19:c3:
d8:2d:e3:35:65:9e:c3:42:28:2d:7f:88:1a:91:7c:c9:67:a9:
96:57:3f:f8:3c:fa:f0:21:c5:8e:99:d0:cf:f7:ef:8e:d6:eb:
66:3a:a9:f9:6f:e5:d6:7d:7d:f4:b0:84:bd:48:18:67:a9:a8:
8d:31:12:2b:57:f1:81:10:6f:b0:eb:eb:6c:b3:c7:82:89:dc:
7d:a5:7c:4b:8b:8b:d7:69:9e:52:95:1a:60:a6:f6:47:7c:81:
de:6e:d2:db:fc:60:50:10:e2:88:2c:ce:fb:63:30:61:73:06:
d3:9a:42:b1:c0:de:10:ae:94:40:e1:b0:a4:65:40:58:6e:c0:
43:8d:0d:9a:2c:b8:3a:eb:2d:83:1a:7c:a5:90:09:22:2a:fe:
45:b3:cf:5b
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgISAYUFkRa40XDAFi92dpPeu13hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMjEyMDkwMTEyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTY2NjM5YzdiZDJhODA3ODQyNTk1OGZkMjg4Yjk2NThhZTYxYTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMtO16bYmEHe4f0pIuh9X7FZjRNG
5nBsrfWxqqcgmFbMN25pkjdYyQDRCyJkq4YtKmy23egswy+6sysH8koxvLNDiIzq
GfWupAykbHkJH4fSXb4+8LxMRh74yEIbnuYTA4f6FMJtGZ82WQaTgdrG8RcyXNxn
bRZDO66ZqBVQW6CnZy3d2znafWKP69KGTg5rWqUZWh+9IW+oEg87zK4aLmfMPB+M
xChyIgZChp/cpDTlQYlusjdlH5PCEe2sn6sux6qXwJYQnI6Ayct4vTLyVY3jWmtx
YQnsVBH9FhVWBu8hrWhfDt3c7YbIf+3IofdgkOkQovMshseI+HPDtoDzHQIDAQAB
o4ICbTCCAmkwHQYDVR0OBBYEFM5mY5x70qgHhCWVj9KIuWWK5ho2MB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvem1aam5IdlNxQWVFSlpXUDBvaTVaWXJtR2pZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGCBggrBgEFBQcBBwEB/wRzMHEwbwQCAAEwaQMEAx+t+AME
AiUdUAMEAy4dwAMEA7IXkDAMAwQDsrD4AwQBsrD8AwMAvKIDBAG8qvQwDAMEA7yq
+AMEALyq/AMEAsHJ5AMEBcMFgAMEBcMQYAMEAcNOdAMEAMOVbwMEBcPmQAMEBdQO
oDANBgkqhkiG9w0BAQsFAAOCAQEAjCG5dWpCChm7IG5cIInK3zJm5iL5q6vLNqBd
z9sEvephAQClzMogs8D9WjuA5V4OKGX/5aWShoZ8Oafc4m3AnS9tTscutGIY2tWE
90j0RKXJRlVPS/1N+Ajv1V9/t46/914t+Y3UPLXdyhnD2C3jNWWew0IoLX+IGpF8
yWepllc/+Dz68CHFjpnQz/fvjtbrZjqp+W/l1n199LCEvUgYZ6mojTESK1fxgRBv
sOvrbLPHgoncfaV8S4uL12meUpUaYKb2R3yB3m7S2/xgUBDiiCzO+2MwYXMG05pC
scDeEK6UQOGwpGVAWG7AQ40Nmiy4Oustgxp8pZAJIir+RbPPWw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:36 2024 by rpki-client on console-ams.rpki-client.org