Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/3D1WF56kukDH2HxHKXOZBJGJTwI.roa
File: 3D1WF56kukDH2HxHKXOZBJGJTwI.roa (raw, json)
Hash identifier: NMfBmAM/GCGmmTWhDTFSIIKvDKrFaLBISqGSRauRApU=
Subject key identifier: DC:3D:56:17:9E:A4:BA:40:C7:D8:7C:47:29:73:99:04:91:89:4F:02
Certificate issuer: /CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Certificate serial: 0182981B9A15049581303FDC60BCB7C0B717
Authority key identifier: 5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/3D1WF56kukDH2HxHKXOZBJGJTwI.roa
Signing time: Sat 13 Aug 2022 16:48:41 +0000
ROA not before: Sat 13 Aug 2022 16:48:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61400
IP address blocks: 77.220.216.0/21 maxlen: 21
62.76.24.0/22 maxlen: 22
91.107.85.0/24 maxlen: 24
91.107.84.0/24 maxlen: 24
91.107.86.0/23 maxlen: 24
91.107.86.0/24 maxlen: 24
185.126.92.0/22 maxlen: 24
185.62.103.0/24 maxlen: 24
46.21.252.0/22 maxlen: 24
62.76.112.0/22 maxlen: 32
185.111.216.0/23 maxlen: 23
185.111.219.0/24 maxlen: 24
185.111.218.0/24 maxlen: 24
212.8.232.0/22 maxlen: 22
89.248.236.0/24 maxlen: 24
185.40.28.0/22 maxlen: 22
31.200.248.0/21 maxlen: 21
62.76.88.0/22 maxlen: 22
91.227.34.0/23 maxlen: 23
62.76.100.0/22 maxlen: 22
2a03:220::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:98:1b:9a:15:04:95:81:30:3f:dc:60:bc:b7:c0:b7:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Validity
Not Before: Aug 13 16:48:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc3d56179ea4ba40c7d87c472973990491894f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:62:61:1b:b5:88:bc:bc:78:6e:eb:b7:c4:62:
d3:71:45:00:7f:82:d3:0d:72:08:18:87:59:d7:18:
6e:60:29:76:9b:ea:f7:22:0c:a0:b8:38:22:a3:24:
b4:9c:c7:58:c6:10:52:78:00:35:3e:3d:5f:21:4e:
ce:8d:7f:77:67:03:75:fa:61:71:86:55:bd:af:df:
2d:ff:3d:40:04:80:4d:6c:78:17:98:ce:f1:06:e6:
4e:43:0c:37:90:5b:49:7e:d8:28:b5:18:18:3e:fa:
ed:ea:ae:6b:ee:7f:e2:10:4d:ab:bc:5f:82:48:30:
8d:94:6f:98:b4:9b:04:35:54:c2:59:af:ae:62:7d:
2c:8a:39:88:82:91:44:b7:af:c7:09:9d:31:43:7d:
43:a8:41:b4:e1:32:e7:4a:1f:ea:d0:44:e8:1c:e0:
2e:af:1d:ad:17:7c:d5:de:8b:78:ad:95:76:c4:a9:
73:43:41:37:dc:3a:52:bc:ae:e7:b8:e8:6b:99:ee:
22:e3:76:4c:2b:95:b8:b5:d3:1b:c4:be:2b:88:99:
26:bd:af:56:97:df:ae:04:51:35:74:18:dd:64:4a:
97:9e:1b:99:de:91:c8:c6:09:48:10:33:da:a6:80:
2e:87:1f:c7:79:b7:f3:5e:1e:08:f8:59:69:14:bd:
dc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:3D:56:17:9E:A4:BA:40:C7:D8:7C:47:29:73:99:04:91:89:4F:02
X509v3 Authority Key Identifier:
keyid:5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/3D1WF56kukDH2HxHKXOZBJGJTwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.200.248.0/21
46.21.252.0/22
62.76.24.0/22
62.76.88.0/22
62.76.100.0/22
62.76.112.0/22
77.220.216.0/21
89.248.236.0/24
91.107.84.0/22
91.227.34.0/23
185.40.28.0/22
185.62.103.0/24
185.111.216.0/22
185.126.92.0/22
212.8.232.0/22
IPv6:
2a03:220::/32
Signature Algorithm: sha256WithRSAEncryption
17:5d:16:54:cb:71:cc:46:0f:ff:a4:fb:58:ba:30:56:dc:c6:
e2:66:1a:7d:91:56:9c:2d:ea:83:f2:b2:ab:d5:8f:dc:e4:e9:
52:23:03:22:b3:78:88:ad:3a:bd:a7:64:23:ee:2c:c3:4b:08:
f0:a4:99:fb:76:3d:87:ca:4b:7b:d3:8e:b4:38:5b:eb:3f:6a:
b2:70:7b:47:1c:7b:d0:bc:e0:96:af:b4:e1:2b:73:e3:c5:3a:
4b:a1:c2:ed:11:4a:3e:4a:a8:31:04:af:af:3c:bc:87:a4:1d:
2e:eb:e9:15:da:66:15:ab:a3:a7:93:69:2d:11:45:29:b2:e1:
79:58:a6:96:d3:e9:a4:63:45:51:0e:cc:b5:6c:c1:36:0a:63:
e0:9e:9a:2b:1f:93:af:32:12:ac:49:66:c5:a1:70:53:e6:8d:
cd:03:32:f3:bb:ce:fa:89:f9:7a:54:34:1d:7c:28:51:26:5b:
1b:54:f5:e8:5d:d0:8a:cd:94:4b:b7:9a:ad:ec:b4:5c:02:3f:
5e:b6:0a:eb:94:90:86:e0:71:e4:73:0c:99:fc:f8:62:25:f3:
32:b0:2b:0f:c8:11:aa:30:ad:2e:62:74:55:84:fc:c9:e7:d8:
b7:4c:b0:a4:2e:8a:26:39:ef:1a:15:57:ff:02:89:74:48:9b:
a4:40:ac:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:22 2024 by rpki-client on console-fra.rpki-client.org