Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ED8FAuxQ9Pvab9fhn0UjJ2jWyeI.roa
File: ED8FAuxQ9Pvab9fhn0UjJ2jWyeI.roa (raw, json)
Hash identifier: 6Ye1jJ69whU2WDRzsNS5e+fUQJvyopB/EVIN6s0iGyg=
Subject key identifier: 10:3F:05:02:EC:50:F4:FB:DA:6F:D7:E1:9F:45:23:27:68:D6:C9:E2
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1C6A007C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ED8FAuxQ9Pvab9fhn0UjJ2jWyeI.roa
Signing time: Sat 01 Jan 2022 01:02:33 +0000
ROA not before: Sat 01 Jan 2022 01:02:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44851
IP address blocks: 31.13.196.0/24 maxlen: 24
93.123.120.0/21 maxlen: 21
93.123.120.0/24 maxlen: 24
93.123.122.0/24 maxlen: 24
93.123.124.0/24 maxlen: 24
93.123.120.0/22 maxlen: 22
93.123.124.0/22 maxlen: 22
93.123.121.0/24 maxlen: 24
93.123.123.0/24 maxlen: 24
93.123.125.0/24 maxlen: 24
93.123.126.0/24 maxlen: 24
93.123.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 476708988 (0x1c6a007c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 01:02:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=103f0502ec50f4fbda6fd7e19f45232768d6c9e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:db:a4:d9:00:42:62:d2:0c:4c:08:fa:43:fb:
7e:c3:09:0a:b4:a2:85:62:36:0c:df:87:6e:45:3a:
59:3e:52:58:05:04:82:b0:32:4e:42:46:74:90:ad:
e5:1b:7b:8c:3c:cc:63:17:4a:9d:4d:a5:d2:68:90:
3d:99:75:85:75:8a:e0:b2:a9:4a:17:85:8a:4f:62:
32:53:29:41:fe:91:86:51:9b:8d:d4:de:21:6c:9e:
c5:8c:a0:2c:cd:fc:69:b6:c2:07:8e:c3:28:19:8c:
a3:18:64:31:76:cc:f5:ba:41:2e:87:f3:bf:16:7b:
06:e3:f1:b5:c8:ed:cc:de:36:4a:0d:5a:f8:3d:d2:
41:6f:57:5c:0b:05:65:fa:8e:e4:ad:6b:6a:e6:cc:
0a:e5:b5:32:07:27:20:01:4c:d9:4a:50:46:ad:17:
be:06:fd:71:e1:42:18:fb:1f:67:62:96:68:f2:ee:
a9:bb:eb:f8:9a:03:75:9b:8a:66:ed:f2:59:91:36:
b2:50:3e:e9:66:74:52:16:51:0f:32:70:f5:6f:c2:
b3:08:99:21:f2:da:43:fc:7a:52:38:f7:71:4d:c9:
5a:c8:c5:a4:29:3c:5a:60:59:c6:0a:e5:8a:8d:73:
0a:a6:9d:bd:36:81:b5:4d:7c:23:d9:cb:61:84:90:
31:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3F:05:02:EC:50:F4:FB:DA:6F:D7:E1:9F:45:23:27:68:D6:C9:E2
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ED8FAuxQ9Pvab9fhn0UjJ2jWyeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.196.0/24
93.123.120.0/21
Signature Algorithm: sha256WithRSAEncryption
55:54:7f:4d:fc:0f:43:55:81:cf:cb:71:56:66:a6:34:99:0d:
6f:97:74:04:aa:68:90:4d:de:43:e1:91:05:c4:85:e2:eb:0c:
13:c8:ad:3b:00:d9:d4:81:0c:b0:54:02:74:a1:fe:a2:f8:aa:
fc:35:2d:6a:d9:2f:96:5c:95:fc:80:16:a7:46:99:28:b4:5d:
94:ff:26:3d:30:0b:6b:5c:3d:f5:14:e2:8e:47:f9:e8:4b:f6:
d5:8c:df:9f:14:49:13:b1:f5:7a:5f:b0:4c:ed:98:ad:48:30:
77:2a:84:db:6b:8a:fc:37:ef:35:fe:48:ce:68:86:0e:4b:4b:
7a:6e:af:99:8e:46:95:53:8f:2b:be:5f:9a:a6:d9:68:c6:97:
79:7e:a7:1e:fd:33:23:92:4c:a6:ea:5c:7e:35:ff:90:bb:c9:
b2:05:c6:bf:3a:a1:1d:bf:5b:96:74:38:8e:69:d5:55:b0:1c:
73:b7:0b:8c:67:4c:52:30:17:be:b7:38:ef:51:03:f2:ba:ee:
77:f3:ff:d8:5b:f2:7b:83:25:57:50:cc:f3:3e:10:8e:c8:7d:
97:93:d8:7d:d6:37:e5:b4:a4:95:28:a1:e6:c9:42:f2:5e:d8:
86:db:b7:a6:f2:49:5d:45:16:ca:07:be:e9:d7:a3:b3:e9:cd:
cb:65:94:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:33 2023 by rpki-client on console-ams.rpki-client.org