Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/rkMDMw0g4EQzHb4BDVIjoj0IW0Q.roa
File: rkMDMw0g4EQzHb4BDVIjoj0IW0Q.roa (raw, json)
Hash identifier: vu5vOkskAC1zu0t+E5V4L2dmJLREDtf7S7ZF1YW/CPg=
Subject key identifier: AE:43:03:33:0D:20:E0:44:33:1D:BE:01:0D:52:23:A2:3D:08:5B:44
Certificate issuer: /CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Certificate serial: 06A8C630
Authority key identifier: 14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/rkMDMw0g4EQzHb4BDVIjoj0IW0Q.roa
Signing time: Sat 01 Jan 2022 10:03:40 +0000
ROA not before: Sat 01 Jan 2022 10:03:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207728
IP address blocks: 93.88.74.0/24 maxlen: 24
185.162.9.0/24 maxlen: 24
31.10.5.0/24 maxlen: 24
185.162.11.0/24 maxlen: 24
31.210.170.0/23 maxlen: 24
31.210.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111724080 (0x6a8c630)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Validity
Not Before: Jan 1 10:03:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae4303330d20e044331dbe010d5223a23d085b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c2:0b:17:c1:73:d9:b5:e2:23:aa:66:37:af:
4a:cb:90:ce:de:ff:78:5c:be:fd:d6:47:57:92:fa:
01:47:85:4c:61:b2:5f:77:2e:67:50:7d:4e:b4:19:
b7:59:13:3e:d0:09:d5:da:f4:81:e2:11:83:df:13:
e3:67:ae:f7:cb:d0:de:b3:eb:d2:8e:4a:74:a7:b7:
23:39:90:90:99:20:58:ca:49:4e:4a:10:a3:54:91:
8a:96:71:40:56:3d:9c:48:92:4f:05:6d:15:48:38:
b0:d6:a1:47:af:0f:76:21:8b:80:1d:ad:ee:81:79:
32:56:4f:81:af:4d:27:bc:1a:cf:2f:05:61:51:81:
e3:b7:1a:bd:7a:fa:c7:3d:45:c0:c2:f3:fc:20:4c:
16:9a:22:49:1f:5c:26:a8:7e:59:d5:47:58:da:b6:
cc:c5:6c:7c:5d:24:e4:34:08:8b:52:2c:c0:a7:c5:
ff:cf:37:9b:5c:3f:fd:cf:a5:83:b9:9d:60:f5:3e:
49:c9:92:a2:f5:73:3f:eb:28:70:17:f6:64:2f:b3:
bd:d5:14:80:81:20:ae:64:e6:f8:bf:d0:1e:8e:0c:
f6:d1:39:ef:d0:85:c7:d6:b0:a3:fe:b8:ae:85:ef:
ff:47:e5:99:d6:17:e3:ca:5c:78:68:d0:88:b1:23:
34:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:43:03:33:0D:20:E0:44:33:1D:BE:01:0D:52:23:A2:3D:08:5B:44
X509v3 Authority Key Identifier:
keyid:14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/rkMDMw0g4EQzHb4BDVIjoj0IW0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.10.5.0/24
31.210.170.0/23
31.210.173.0/24
93.88.74.0/24
185.162.9.0/24
185.162.11.0/24
Signature Algorithm: sha256WithRSAEncryption
46:2b:0f:18:67:dd:2f:02:c6:42:4f:c2:72:03:3e:ce:8a:e0:
bb:be:1b:c5:f9:9b:38:5a:ad:87:1f:4a:e4:5d:20:8c:90:8c:
3e:90:91:63:ea:34:b6:9c:9a:22:3e:b3:aa:75:17:cf:08:a5:
2b:70:69:37:c5:c6:a9:f0:dd:52:ab:a2:35:b2:41:b1:7d:13:
8d:8d:ee:56:70:a8:ff:ec:07:f9:af:5d:20:f8:54:d7:ca:d7:
3e:fd:b9:e7:7d:7e:a3:69:76:1b:6e:bf:05:76:c0:f6:49:4b:
fe:8f:fa:e1:85:fe:86:65:7b:bc:15:00:48:fd:d3:cb:63:c9:
aa:1b:e8:1f:37:e2:e6:21:59:b1:b8:15:8d:6d:ba:e1:f9:10:
c3:49:e5:7e:33:86:35:0a:31:d5:e1:60:43:78:d3:24:f5:5c:
29:43:29:41:a7:cb:bd:ab:09:a4:35:f0:8e:f9:66:78:b2:d8:
67:dc:e6:05:cd:7c:d6:6a:df:1e:a3:69:b8:ad:d2:59:f9:48:
74:18:cc:f2:16:92:0e:bb:f5:82:7f:fe:62:24:cb:07:aa:82:
5c:c4:bb:11:4f:0e:50:eb:c3:6c:34:9b:d3:56:32:a5:ef:84:
9a:9b:f2:33:06:76:ad:c5:f2:89:30:70:4e:d7:e5:f4:55:47:
21:88:a9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:28 2025 by rpki-client