Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/r0UvCYJ3JzNljmAYLNj775wk7sQ.roa
File: r0UvCYJ3JzNljmAYLNj775wk7sQ.roa (raw, json)
Hash identifier: QDFStX2XIDy74GPkmcrPEbPZvhgP3wiuNOEUoegGgXs=
Subject key identifier: AF:45:2F:09:82:77:27:33:65:8E:60:18:2C:D8:FB:EF:9C:24:EE:C4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1C75EB20
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/r0UvCYJ3JzNljmAYLNj775wk7sQ.roa
Signing time: Sat 01 Jan 2022 01:02:40 +0000
ROA not before: Sat 01 Jan 2022 01:02:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60230
IP address blocks: 31.13.244.0/24 maxlen: 24
87.120.236.0/24 maxlen: 24
94.156.191.0/24 maxlen: 24
31.13.244.99/32 maxlen: 32
2a00:1728:a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 477489952 (0x1c75eb20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 01:02:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af452f0982772733658e60182cd8fbef9c24eec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:15:36:b0:a3:7f:ca:f8:6b:c3:5d:d9:41:5c:
36:8b:04:65:fb:70:ca:0a:64:24:c1:53:40:84:fc:
2d:c3:9a:51:bf:0e:0d:34:57:07:63:71:c1:fa:dd:
02:8d:02:02:78:e5:90:05:13:8b:8e:4b:01:53:88:
6e:c1:45:2f:bb:7a:a9:fa:78:28:c9:90:99:c4:96:
38:0f:61:ac:82:e7:8a:d6:90:3b:f7:be:c4:02:f3:
0a:ee:95:6a:05:30:97:cf:0c:48:81:27:c1:03:9a:
e0:59:68:47:5d:1c:52:09:06:da:dc:05:7f:63:a7:
c1:e2:6e:9a:66:6e:b7:fe:9b:01:db:d4:24:74:f5:
fd:dd:91:cb:50:d7:48:94:d5:65:b0:d8:86:48:53:
ed:f7:7b:e6:f8:5a:76:e5:8f:d5:bb:d1:15:85:97:
4e:48:01:a6:2e:53:bb:d6:12:a7:aa:ab:f5:3f:c9:
d3:b1:9c:d0:9c:af:80:60:28:57:59:f7:b5:f9:16:
20:65:96:ea:fa:eb:8d:35:37:6c:6d:37:ca:04:79:
ff:85:d6:8b:ee:cc:ae:9e:23:6d:54:48:9a:73:77:
9e:37:98:10:63:08:d3:8e:4f:ad:0d:11:05:59:63:
b0:62:10:88:66:94:bf:95:b1:0d:75:0d:ac:ae:b0:
31:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:45:2F:09:82:77:27:33:65:8E:60:18:2C:D8:FB:EF:9C:24:EE:C4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/r0UvCYJ3JzNljmAYLNj775wk7sQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.244.0/24
87.120.236.0/24
94.156.191.0/24
IPv6:
2a00:1728:a::/48
Signature Algorithm: sha256WithRSAEncryption
5f:b8:fe:3d:f5:7d:e6:72:e6:9a:3c:d5:d7:87:76:4e:63:28:
7b:ff:79:a2:7c:13:63:b3:4e:f5:9d:66:8f:75:54:12:e9:72:
a3:07:c8:f6:37:d5:7f:22:43:d4:50:16:89:fc:e2:a7:02:d6:
6f:11:bf:d0:72:73:ab:84:cd:2b:c2:3a:49:55:69:90:1c:d2:
ce:8f:f9:c1:29:6d:37:bb:1b:68:fa:70:01:a9:c2:1f:8e:04:
ef:ae:43:2b:4c:19:3b:f9:f2:8f:8a:86:11:ba:04:a4:55:b0:
32:3c:28:26:15:dd:8c:3d:80:9c:cc:e9:b9:96:a6:f5:ba:e2:
c6:dd:0c:ac:c9:95:e9:69:4f:84:07:b0:19:bb:d0:db:93:ef:
73:3e:0d:cf:e6:08:bf:90:95:d6:27:9b:c3:0e:c9:fb:28:4b:
a9:c4:07:7b:fe:ff:69:11:80:15:a0:54:11:34:1b:d4:25:0e:
20:1f:96:3a:4a:f0:c4:c4:10:46:e4:2c:9b:9b:e4:6b:75:2f:
1f:29:7c:b3:24:6e:fc:eb:bb:1a:92:0f:00:b5:23:89:09:9f:
0c:16:5e:41:ef:65:57:12:7c:6d:52:a1:18:11:f4:1c:79:b2:
2c:8c:5d:db:20:65:b3:df:9b:98:51:e5:4e:1b:71:79:f9:ea:
c7:6a:e8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:42 2023 by rpki-client on console-ams.rpki-client.org