Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/kR3K_Kges1RMJWZzjnpwwFj4Buo.roa
File: kR3K_Kges1RMJWZzjnpwwFj4Buo.roa (raw, json)
Hash identifier: 05OlEx9hxrBjmxFyq8/x4a6oghdQ/TmGuUjUgDr4OdE=
Subject key identifier: 91:1D:CA:FC:A8:1E:B3:54:4C:25:66:73:8E:7A:70:C0:58:F8:06:EA
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 0BD5A303
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/kR3K_Kges1RMJWZzjnpwwFj4Buo.roa
Signing time: Sat 01 Jan 2022 10:53:50 +0000
ROA not before: Sat 01 Jan 2022 10:53:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47694
IP address blocks: 176.124.0.0/19 maxlen: 19
178.217.160.0/21 maxlen: 21
31.133.32.0/21 maxlen: 21
31.133.32.0/22 maxlen: 22
31.133.36.0/22 maxlen: 22
91.211.16.0/22 maxlen: 22
91.211.19.0/24 maxlen: 24
81.163.128.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198550275 (0xbd5a303)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: Jan 1 10:53:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=911dcafca81eb3544c2566738e7a70c058f806ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d3:f5:22:ae:79:25:34:5d:77:2e:f1:10:c6:
ef:88:c5:7e:5d:00:e4:10:4b:5e:ea:44:ee:7e:f5:
d6:60:23:ff:59:d4:c1:a0:43:16:6c:50:ef:82:c3:
38:18:6c:9d:55:db:00:f4:c0:1e:ec:b1:a3:40:c1:
19:2a:16:79:f5:0d:fb:b3:87:d7:b3:7d:b6:e9:91:
bc:cc:5c:12:c5:6f:cd:ab:68:fa:ea:83:69:ea:16:
8c:4c:5d:b1:b5:c4:c2:ac:a1:00:89:8d:d8:49:8d:
79:cd:1c:20:7a:e1:ac:43:30:74:70:48:26:84:fb:
1e:e5:7c:55:e7:25:50:e1:57:b4:53:25:95:62:ed:
d1:25:0d:1c:66:a2:dd:0d:cd:fe:be:08:9d:6e:7f:
8a:27:d4:55:2b:9a:73:a2:d2:52:eb:95:03:79:56:
26:f5:27:d0:2f:86:61:7a:ad:99:4d:f9:99:f0:fd:
4a:ac:89:11:cf:d0:97:f7:11:c8:2d:ef:ce:65:3f:
ec:9f:16:ba:96:bd:50:ea:6d:43:3b:26:fb:06:3f:
f3:aa:92:0f:ec:5a:ea:b3:8b:52:9c:62:7f:17:bc:
b9:36:69:b4:57:40:b2:a7:e5:fa:50:ca:49:3c:a9:
14:e5:87:d3:a4:ad:93:2c:a1:55:f9:85:95:69:3a:
f6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:1D:CA:FC:A8:1E:B3:54:4C:25:66:73:8E:7A:70:C0:58:F8:06:EA
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/kR3K_Kges1RMJWZzjnpwwFj4Buo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.32.0/21
81.163.128.0/19
91.211.16.0/22
176.124.0.0/19
178.217.160.0/21
Signature Algorithm: sha256WithRSAEncryption
bc:da:62:5f:1c:24:53:25:6f:bf:f5:cb:f8:95:d1:de:c7:5b:
b2:e3:f5:ed:8a:10:d7:c7:bf:55:b5:78:a4:94:2c:d0:08:a9:
44:88:e3:1d:eb:e8:ff:c3:cb:a3:9d:23:b6:04:19:7d:dd:34:
65:ce:ad:50:09:62:08:d5:27:55:d9:cd:ef:a7:8f:b4:60:11:
9a:fa:38:d7:e9:68:51:27:22:38:c7:d1:4c:5a:03:a5:52:e3:
3f:bd:64:86:75:e1:9b:90:43:36:50:6c:95:e5:cb:c5:49:1c:
fa:02:2d:32:8f:dd:32:17:d1:5c:0b:42:8c:a6:5c:98:78:ef:
9c:9c:61:29:d2:98:46:d0:2b:de:97:35:4c:da:8a:0f:7e:3c:
a4:ee:6c:28:39:61:19:1b:d8:d2:61:13:42:90:3f:1a:59:5c:
73:9b:9a:4b:c2:fd:01:76:b7:c3:be:8e:8e:0b:c3:14:89:a1:
9c:94:17:ff:52:c2:3a:68:0a:b4:9f:56:58:bf:e3:e9:9f:47:
79:95:40:29:67:3c:1b:a3:80:3c:9f:ce:6d:7c:38:31:af:65:
5a:07:6c:f6:df:52:f3:ae:45:4b:60:37:a7:98:36:79:5a:ac:
4f:f1:9f:c6:fb:90:83:8a:a8:0d:26:a2:23:89:9f:73:5a:5c:
9f:62:c2:95
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIEC9WjAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
YzY0ZjlkMDRlZmQ1YTlmYzJlMjNiNDJkNWI1MWFlZmQ5YTUwMjUwMB4XDTIyMDEw
MTEwNTM1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTExZGNhZmNhODFl
YjM1NDRjMjU2NjczOGU3YTcwYzA1OGY4MDZlYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJLT9SKueSU0XXcu8RDG74jFfl0A5BBLXupE7n711mAj/1nU
waBDFmxQ74LDOBhsnVXbAPTAHuyxo0DBGSoWefUN+7OH17N9tumRvMxcEsVvzato
+uqDaeoWjExdsbXEwqyhAImN2EmNec0cIHrhrEMwdHBIJoT7HuV8VeclUOFXtFMl
lWLt0SUNHGai3Q3N/r4InW5/iifUVSuac6LSUuuVA3lWJvUn0C+GYXqtmU35mfD9
SqyJEc/Ql/cRyC3vzmU/7J8Wupa9UOptQzsm+wY/86qSD+xa6rOLUpxifxe8uTZp
tFdAsqfl+lDKSTypFOWH06StkyyhVfmFlWk69mkCAwEAAaOCAiEwggIdMB0GA1Ud
DgQWBBSRHcr8qB6zVEwlZnOOenDAWPgG6jAfBgNVHSMEGDAWgBRcZPnQTv1an8Li
O0LVtRrv2aUCUDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1hHVDUwRTc5V3BfQzRqdEMxYlVhNzltbEFsQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjkvMTg0OWE2LWY5MjEtNGI1MC05MTVlLWI2NmZhNGY0NzYzYS8x
L2tSM0tfS2dlczFSTUpXWnpqbnB3d0ZqNEJ1by5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkv
MTg0OWE2LWY5MjEtNGI1MC05MTVlLWI2NmZhNGY0NzYzYS8xL1hHVDUwRTc5V3Bf
QzRqdEMxYlVhNzltbEFsQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3
BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAx+FIAMEBVGjgAMEAlvTEAMEBbB8
AAMEA7LZoDANBgkqhkiG9w0BAQsFAAOCAQEAvNpiXxwkUyVvv/XL+JXR3sdbsuP1
7YoQ18e/VbV4pJQs0AipRIjjHevo/8PLo50jtgQZfd00Zc6tUAliCNUnVdnN76eP
tGARmvo41+loUSciOMfRTFoDpVLjP71khnXhm5BDNlBsleXLxUkc+gItMo/dMhfR
XAtCjKZcmHjvnJxhKdKYRtAr3pc1TNqKD348pO5sKDlhGRvY0mETQpA/Gllcc5ua
S8L9AXa3w76OjgvDFImhnJQX/1LCOmgKtJ9WWL/j6Z9HeZVAKWc8G6OAPJ/ObXw4
Ma9lWgds9t9S865FS2A3p5g2eVqsT/GfxvuQg4qoDSaiI4mfc1pcn2LClQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:48 2024 by rpki-client on console-ams.rpki-client.org