Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oQd6hZswbhUsQ0NPz9VxEoO4KDQ.roa
File: oQd6hZswbhUsQ0NPz9VxEoO4KDQ.roa (raw, json)
Hash identifier: z3+XoV7EDwotn7//WwDWSpTlJKSwr219Plc8dJ2SmUY=
Subject key identifier: A1:07:7A:85:9B:30:6E:15:2C:43:43:4F:CF:D5:71:12:83:B8:28:34
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0184384715710F2A3C8377807D55F7216340
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oQd6hZswbhUsQ0NPz9VxEoO4KDQ.roa
Signing time: Wed 02 Nov 2022 12:18:13 +0000
ROA not before: Wed 02 Nov 2022 12:18:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22653
IP address blocks: 31.169.124.0/24 maxlen: 24
31.169.125.0/24 maxlen: 24
31.169.126.0/24 maxlen: 24
31.169.127.0/24 maxlen: 24
194.169.172.0/24 maxlen: 24
185.246.223.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
185.218.136.0/23 maxlen: 24
185.225.72.0/24 maxlen: 24
94.154.163.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
37.139.130.0/23 maxlen: 24
94.154.173.0/24 maxlen: 24
212.87.205.0/24 maxlen: 24
85.217.128.0/24 maxlen: 24
194.55.226.0/24 maxlen: 24
164.40.186.0/23 maxlen: 24
164.40.184.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
193.42.32.0/24 maxlen: 24
193.222.97.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
193.222.98.0/23 maxlen: 24
193.47.62.0/24 maxlen: 24
193.37.42.0/24 maxlen: 24
193.37.46.0/24 maxlen: 24
194.48.249.0/24 maxlen: 24
193.37.47.0/24 maxlen: 24
194.55.187.0/24 maxlen: 24
185.221.66.0/24 maxlen: 24
94.103.126.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:38:47:15:71:0f:2a:3c:83:77:80:7d:55:f7:21:63:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 2 12:18:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1077a859b306e152c43434fcfd5711283b82834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ee:e5:c6:1a:63:50:df:e1:68:31:ab:c0:4e:
09:fd:4f:4a:f0:8c:ba:d2:64:e2:da:d5:b6:d7:f0:
3f:9d:e8:10:69:af:54:67:16:52:3d:b6:aa:74:38:
73:90:6f:28:72:d5:e3:d4:0f:a6:9c:50:ae:e8:1b:
1f:56:2c:6c:d0:3c:a5:16:d5:54:25:08:c4:70:9e:
6a:fc:5e:9c:bb:99:c0:86:77:16:9b:0d:6a:99:bb:
e7:38:36:a7:b3:3c:ea:34:8d:d9:7d:ae:76:97:b4:
31:4d:41:55:d7:93:10:93:61:9c:f6:d1:b3:fe:1e:
a7:01:45:a2:03:a0:ae:6e:79:de:a3:77:6a:b6:fc:
b6:70:86:db:43:58:55:e1:b3:2f:89:fe:8b:d4:b3:
92:a6:8e:93:2d:75:f8:bf:7f:ea:d8:f8:f2:80:0d:
0c:76:e1:0e:cb:d6:10:66:dd:21:43:e5:e1:12:47:
c7:c4:81:92:39:16:26:59:10:e1:d8:53:9f:41:22:
7f:bc:2b:c5:1f:d1:19:0b:6f:7b:aa:15:74:53:35:
52:08:1e:91:28:8a:aa:a9:b8:ed:c2:bb:24:ae:70:
93:8e:24:8f:b8:87:2e:05:8a:dd:db:4e:86:1e:31:
7e:76:44:9c:3c:0c:3d:b9:7c:ba:8b:75:4b:28:3d:
29:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:07:7A:85:9B:30:6E:15:2C:43:43:4F:CF:D5:71:12:83:B8:28:34
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oQd6hZswbhUsQ0NPz9VxEoO4KDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.124.0/22
37.139.130.0/23
85.217.128.0/24
87.121.221.0/24
92.249.50.0/24
94.103.126.0/24
94.154.160.0/23
94.154.163.0/24
94.154.173.0/24
164.40.184.0/24
164.40.186.0/23
178.215.236.0/24
185.218.136.0/23
185.221.66.0/24
185.225.72.0/24
185.246.223.0/24
185.252.177.0/24
193.37.42.0/24
193.37.46.0/23
193.42.32.0/24
193.47.62.0/24
193.222.97.0-193.222.99.255
194.48.249.0/24
194.55.187.0/24
194.55.226.0/24
194.169.172.0/24
212.87.205.0/24
Signature Algorithm: sha256WithRSAEncryption
70:e8:69:12:fc:1b:57:b8:e0:7d:d5:58:6f:fb:0e:1e:dd:f6:
bc:2b:a4:88:2b:7f:e8:55:2b:ed:64:25:ca:58:a4:87:7d:95:
01:5a:ad:ff:2e:6d:20:30:39:64:9f:62:f8:33:d6:82:37:ae:
5e:dd:04:e9:40:2d:17:4b:05:55:17:4d:36:b1:ad:7a:4b:5d:
16:96:77:30:0b:cd:92:7f:73:88:b8:b4:f8:f2:1a:b5:c9:97:
f6:ba:ae:ac:4b:2f:b3:b2:96:5d:58:96:e4:cc:5a:fe:93:26:
df:3f:18:2a:14:e8:fb:2f:7c:d4:53:0f:5a:56:7b:e4:e3:af:
9d:e5:70:ed:db:67:02:23:a7:98:66:80:ae:b5:f9:f9:2b:ae:
f3:ad:f4:95:1d:00:86:65:59:01:31:91:ba:a7:03:70:32:86:
19:fb:13:f8:5b:ca:88:66:68:9b:29:0b:4e:9b:6c:72:3d:bc:
55:3b:48:24:03:3f:2b:13:89:38:93:df:1e:83:00:e5:8f:a8:
9e:62:9a:0c:e2:1c:b9:2c:1d:ec:8b:e6:df:ef:3c:ed:f4:68:
01:bd:8b:4c:17:9a:82:da:06:ba:03:01:9e:30:00:2c:8b:6a:
45:bb:02:c5:71:7b:0b:a7:1f:2b:e7:27:30:b9:77:0d:d7:b2:
bd:60:98:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:42 2023 by rpki-client on console-ams.rpki-client.org