Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9_fDDgNturuKRJSztEa9ujzxm90.roa
File: 9_fDDgNturuKRJSztEa9ujzxm90.roa (raw, json)
Hash identifier: gOelWXY86tFvlBJSdPSZzBD4dCMixRfy7TmIqvv+QvA=
Subject key identifier: F7:F7:C3:0E:03:6D:BA:BB:8A:44:94:B3:B4:46:BD:BA:3C:F1:9B:DD
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1C67AC07
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9_fDDgNturuKRJSztEa9ujzxm90.roa
Signing time: Sat 01 Jan 2022 01:02:31 +0000
ROA not before: Sat 01 Jan 2022 01:02:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43548
IP address blocks: 94.156.4.0/23 maxlen: 23
93.123.65.0/24 maxlen: 24
31.13.212.0/24 maxlen: 24
87.120.196.0/24 maxlen: 24
87.120.205.0/24 maxlen: 24
85.217.164.0/22 maxlen: 22
87.120.108.0/24 maxlen: 24
91.92.168.0/22 maxlen: 22
87.121.108.0/23 maxlen: 23
87.120.99.0/24 maxlen: 24
87.120.216.0/24 maxlen: 24
85.217.176.0/21 maxlen: 21
87.120.222.0/24 maxlen: 24
31.13.247.0/24 maxlen: 24
94.156.80.0/21 maxlen: 21
87.120.246.0/24 maxlen: 24
94.156.97.0/24 maxlen: 24
2a00:1728:2d::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 476556295 (0x1c67ac07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 01:02:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f7f7c30e036dbabb8a4494b3b446bdba3cf19bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:62:28:cf:87:52:0e:98:72:c4:39:76:27:56:
85:e5:27:b2:8b:ea:4f:39:6f:f5:bd:7a:bc:84:bb:
13:64:e3:5b:3c:cd:0f:70:cc:7b:19:1d:43:f5:b2:
71:32:99:d2:6c:d1:be:63:60:c3:6e:65:04:c3:3a:
38:0d:05:50:38:4f:24:3e:7a:e7:6b:5d:96:8d:bd:
a1:c2:41:b4:ba:d5:24:12:5f:11:53:d1:e4:b8:f1:
ae:fc:ad:91:0a:76:52:d3:46:4d:15:97:d5:ec:91:
a0:6f:64:24:b3:b4:6c:9d:23:d4:bb:ea:c9:67:24:
51:0e:97:32:7b:d7:ff:e8:f8:12:f1:ce:74:17:82:
3f:ff:79:e4:f6:a2:9e:dd:e9:1d:cf:48:37:08:75:
ae:c2:46:af:91:bb:78:63:b1:26:0c:2d:b7:9c:b4:
1e:68:33:1f:d7:67:93:ff:18:3c:7e:f8:98:53:7e:
8c:36:7d:8f:fa:3a:90:94:e2:14:d2:64:92:af:3c:
ac:34:71:58:7c:c2:bd:91:5f:dc:0d:d3:34:90:44:
2a:56:eb:96:3f:72:e3:80:02:0e:e7:45:3a:45:28:
40:74:1a:11:1b:a6:04:df:a5:4f:d6:75:87:9a:97:
d7:77:4c:9a:40:6f:69:3b:9d:92:bf:db:31:25:e9:
d9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F7:C3:0E:03:6D:BA:BB:8A:44:94:B3:B4:46:BD:BA:3C:F1:9B:DD
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9_fDDgNturuKRJSztEa9ujzxm90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.212.0/24
31.13.247.0/24
85.217.164.0/22
85.217.176.0/21
87.120.99.0/24
87.120.108.0/24
87.120.196.0/24
87.120.205.0/24
87.120.216.0/24
87.120.222.0/24
87.120.246.0/24
87.121.108.0/23
91.92.168.0/22
93.123.65.0/24
94.156.4.0/23
94.156.80.0/21
94.156.97.0/24
IPv6:
2a00:1728:2d::/48
Signature Algorithm: sha256WithRSAEncryption
45:30:b4:8b:72:af:0a:eb:b2:f1:96:54:5b:74:2b:99:d8:54:
9c:db:94:26:cd:92:3d:f9:3b:d8:67:0e:ae:0f:c3:f1:9a:de:
e0:f8:8c:38:5c:d4:fb:78:b7:93:a9:f3:0c:e3:23:5c:ea:d6:
16:63:e7:7d:a6:d0:4a:a2:12:18:9b:6e:f1:25:25:19:fa:99:
9c:a1:67:a2:1a:33:ba:9b:df:02:84:d4:ac:4c:5a:09:63:b5:
ae:09:8c:21:6e:b8:95:84:0e:d9:c9:8b:9f:48:3b:aa:02:4e:
49:54:dc:76:76:58:6f:87:e4:13:80:4c:50:4f:36:dc:aa:56:
47:4e:75:35:92:b6:43:3a:27:48:0d:cb:92:00:87:26:2e:64:
be:80:f7:03:a7:e9:ab:44:c4:37:7c:c7:ec:30:f8:cf:98:1f:
f5:21:9f:a5:fb:dc:28:3e:92:eb:6c:0f:a1:99:70:34:a4:f3:
48:4a:3c:e1:c3:06:cb:45:cb:36:67:77:60:a3:c0:69:fe:c7:
50:65:34:3c:b8:e4:18:63:46:01:57:89:35:b7:b9:8c:ce:4b:
91:9e:c3:d7:7f:7c:50:df:b3:9a:db:11:6e:da:03:43:62:61:
fb:77:aa:bb:cc:8c:f2:96:f7:6c:60:a0:57:8b:8f:74:e3:1b:
42:24:ce:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:32 2023 by rpki-client on console-ams.rpki-client.org