Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/_c5a36once4DgMJUqMG31A6ui8Y.roa
File: _c5a36once4DgMJUqMG31A6ui8Y.roa (raw, json)
Hash identifier: POHyABVba43QeHxfedm2muS5sM/kWF2xcMszQTzkW6g=
Subject key identifier: FD:CE:5A:DF:AA:27:71:EE:03:80:C2:54:A8:C1:B7:D4:0E:AE:8B:C6
Certificate issuer: /CN=cdb63efa269a1411754e1cdaab848fb06fa08411
Certificate serial: 02FA73
Authority key identifier: CD:B6:3E:FA:26:9A:14:11:75:4E:1C:DA:AB:84:8F:B0:6F:A0:84:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/_c5a36once4DgMJUqMG31A6ui8Y.roa
Signing time: Thu 31 Mar 2022 15:00:12 +0000
ROA not before: Thu 31 Mar 2022 15:00:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42714
IP address blocks: 195.211.184.0/22 maxlen: 24
31.170.128.0/20 maxlen: 24
31.170.128.0/19 maxlen: 24
31.170.144.0/21 maxlen: 24
31.170.152.0/21 maxlen: 24
193.200.38.0/24 maxlen: 24
193.200.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195187 (0x2fa73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb63efa269a1411754e1cdaab848fb06fa08411
Validity
Not Before: Mar 31 15:00:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fdce5adfaa2771ee0380c254a8c1b7d40eae8bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3f:c4:6f:5d:f3:53:c1:ec:3e:1b:a7:c3:6e:
37:a3:3c:82:cf:0f:59:ac:b7:e8:36:90:f4:b9:90:
b1:bd:09:f8:d5:29:ce:6e:10:42:ed:f7:63:3f:5a:
49:a0:48:3a:c1:05:72:25:5b:ec:7e:a7:df:80:94:
bc:93:c5:35:fd:92:37:59:d9:a8:07:24:08:b6:11:
92:97:ad:0f:f4:3a:01:ae:20:33:29:f4:30:3e:01:
22:88:20:91:b8:5d:6e:2a:1a:88:da:91:64:24:a1:
f7:4e:75:c2:cb:1a:46:57:da:c0:16:17:de:7c:fe:
59:d8:2d:f6:db:fd:e7:2a:a5:2f:c5:d3:08:da:ae:
06:05:73:22:0c:d1:25:71:cf:91:9c:14:13:93:b0:
eb:8e:82:df:d3:d8:f9:c2:cf:e3:d5:37:93:dc:99:
4b:bf:f3:65:1c:72:f6:4e:6b:fd:93:0d:ee:c9:98:
14:10:26:3b:e0:52:09:c1:45:d1:af:83:fc:65:9d:
40:2c:f8:6d:d2:5c:69:a8:52:55:12:8d:95:1c:42:
25:99:97:18:b9:20:46:d8:d4:71:1f:ae:23:8e:37:
11:4a:c1:45:77:c1:bc:8f:45:7d:37:f3:c6:c1:ef:
b6:9b:95:90:22:61:01:e2:bd:29:56:ad:86:ab:f8:
e3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CE:5A:DF:AA:27:71:EE:03:80:C2:54:A8:C1:B7:D4:0E:AE:8B:C6
X509v3 Authority Key Identifier:
keyid:CD:B6:3E:FA:26:9A:14:11:75:4E:1C:DA:AB:84:8F:B0:6F:A0:84:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/_c5a36once4DgMJUqMG31A6ui8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.128.0/19
193.200.38.0/23
195.211.184.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:06:d8:22:a0:46:d8:c1:34:e2:1b:09:b8:1d:39:0a:52:1f:
7f:fb:a0:3d:6a:f4:be:b2:df:6b:d5:25:3f:5c:6a:51:9a:fe:
ff:1a:2d:24:c2:f5:07:38:8f:41:94:d2:9c:34:8e:c9:38:cd:
48:49:71:c8:1e:bd:3a:e7:de:88:d7:3a:8b:60:8e:87:d9:3b:
c9:bc:f7:6d:95:2a:e2:40:dc:bd:5d:28:6d:6f:3a:5d:e7:e6:
84:a3:95:f7:4c:64:29:5a:8d:48:cd:a3:49:e5:bf:28:f9:32:
66:37:72:54:ef:a5:44:f9:cf:2d:3e:9e:fa:1f:62:a6:11:69:
ef:b1:af:40:d9:15:b4:19:db:0a:e0:d1:50:b6:6e:97:6a:36:
16:5b:1d:dc:29:80:c5:de:8d:8d:b6:47:e5:3b:08:14:ad:2e:
0d:e5:1a:49:01:b4:23:cf:b9:5a:cd:f8:fe:73:89:59:19:2c:
5d:6e:5d:d0:28:0b:9f:2d:ea:d1:38:7c:2a:1a:04:07:51:73:
aa:1a:21:4d:c2:37:32:24:1d:4d:e0:73:e7:ae:21:b8:a3:19:
4d:17:1c:2b:21:f0:8c:65:04:e8:9a:42:19:7a:ba:74:b9:ae:
eb:8c:eb:60:45:85:6c:ba:41:6e:c9:12:eb:d0:18:ae:82:57:
68:b0:dd:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:59 2024 by rpki-client on console-ams.rpki-client.org