Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/f2r89xOJBCUCCnHiZEHppXbENwM.roa
File: f2r89xOJBCUCCnHiZEHppXbENwM.roa (raw, json)
Hash identifier: AM65BbrdQvzkom4NlfR02Vd+jNSkYaMGXty7hSccKGA=
Subject key identifier: 7F:6A:FC:F7:13:89:04:25:02:0A:71:E2:64:41:E9:A5:76:C4:37:03
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 01843271820543EC83CEB267A30713B2D544
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/f2r89xOJBCUCCnHiZEHppXbENwM.roa
Signing time: Tue 01 Nov 2022 09:06:50 +0000
ROA not before: Tue 01 Nov 2022 09:06:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12679
IP address blocks: 31.170.55.0/24 maxlen: 24
94.74.191.0/24 maxlen: 24
94.74.187.0/24 maxlen: 24
109.203.160.0/22 maxlen: 24
94.74.137.0/24 maxlen: 24
94.74.140.0/24 maxlen: 24
94.74.145.0/24 maxlen: 24
94.74.147.0/24 maxlen: 24
94.74.156.0/24 maxlen: 24
94.74.157.0/24 maxlen: 24
94.74.159.0/24 maxlen: 24
94.74.158.0/24 maxlen: 24
94.74.164.0/24 maxlen: 24
94.74.171.0/24 maxlen: 24
94.74.173.0/24 maxlen: 24
94.74.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:32:71:82:05:43:ec:83:ce:b2:67:a3:07:13:b2:d5:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Nov 1 09:06:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f6afcf713890425020a71e26441e9a576c43703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c5:09:36:49:59:52:63:5c:99:4b:9d:34:e9:
60:bb:fd:39:79:59:f7:d2:83:64:62:f6:9c:0f:72:
b4:6c:bf:f9:f1:96:4c:03:ec:6b:72:2e:0d:86:c4:
88:5e:29:dd:19:a4:4d:d4:b1:2c:fe:0a:3b:f6:9a:
72:17:af:d5:d8:bf:e4:4e:32:03:35:3e:11:5e:42:
c0:8f:a3:b5:ba:94:af:29:8e:3a:bf:ae:e9:20:29:
98:41:af:6b:ef:dc:e5:6e:96:24:13:56:b6:cd:1e:
66:30:e7:29:ec:a7:32:3e:a5:a5:75:c5:2c:0d:77:
99:ef:ec:85:eb:2f:6f:b5:59:c1:0a:4c:3e:cc:3c:
62:e2:ab:16:e4:c7:ed:15:75:68:2c:5a:04:a5:0f:
c9:89:44:66:31:a0:55:a2:65:8e:89:dc:8d:61:af:
0d:0f:ed:91:84:e4:89:e3:78:95:d3:1b:88:31:cd:
56:46:3e:3d:2e:34:39:0b:52:fa:cd:c2:7f:b1:69:
f0:5f:37:ea:7e:80:c3:90:0d:c3:5f:88:93:f6:bf:
74:b6:04:2f:cd:8c:ad:68:4e:ea:d1:02:d5:b4:78:
45:33:bc:2a:ab:75:d9:34:39:a6:fe:8f:cc:ac:64:
06:e2:94:a2:15:34:c6:f2:8b:82:49:bf:e1:04:be:
14:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6A:FC:F7:13:89:04:25:02:0A:71:E2:64:41:E9:A5:76:C4:37:03
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/f2r89xOJBCUCCnHiZEHppXbENwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.55.0/24
94.74.137.0/24
94.74.140.0/24
94.74.145.0/24
94.74.147.0/24
94.74.156.0/22
94.74.164.0/24
94.74.171.0/24
94.74.173.0/24
94.74.182.0/24
94.74.187.0/24
94.74.191.0/24
109.203.160.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:f9:00:5c:af:b3:5d:24:03:39:09:6c:cb:46:50:05:3b:6c:
ab:15:53:48:fb:b0:4f:bf:bc:2c:9f:96:84:20:b0:af:ca:bc:
1f:3d:ec:51:28:54:16:91:f8:4e:7c:86:5c:5d:91:81:0d:22:
91:14:be:f5:7a:b3:db:0a:00:89:80:38:57:39:a7:0a:9e:e9:
c4:7f:b4:b2:9e:cd:a2:14:de:02:75:c2:38:ea:df:8e:f4:11:
c8:3a:1f:32:86:c0:08:53:cb:25:6a:b4:0b:88:d2:ae:60:5b:
e3:a6:9b:7c:0e:32:22:1f:c1:6e:35:72:ea:3a:57:3f:af:75:
b1:d9:5a:eb:c3:da:79:76:96:02:cc:a4:ed:bf:0d:47:b0:c7:
3c:f6:4f:a8:84:42:29:cb:d8:86:cc:7b:9d:28:12:39:53:85:
8a:3a:3d:af:0e:17:88:a4:69:11:c2:07:92:5e:50:39:6f:c1:
a8:91:12:db:f7:b8:10:3f:4a:b9:04:74:30:7b:84:43:38:b5:
e2:4e:02:ad:c7:c4:6c:44:1e:e2:c4:66:07:f5:de:a1:9d:e2:
de:cf:7e:9c:c0:78:f7:fb:3f:5a:16:00:e1:1b:23:37:19:88:
dc:7a:b6:aa:a0:a5:18:27:57:2c:7b:71:5f:d2:31:bf:ca:7c:
1d:59:eb:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:31 2025 by rpki-client