Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/vAu4AmHBUTVY3gWWaCecOSGe8i8.roa
File: vAu4AmHBUTVY3gWWaCecOSGe8i8.roa (raw, json)
Hash identifier: rntiT5WUsXVCnKMp99dXQYphxnueQK7YNMg0xuD7U6E=
Subject key identifier: BC:0B:B8:02:61:C1:51:35:58:DE:05:96:68:27:9C:39:21:9E:F2:2F
Certificate issuer: /CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Certificate serial: 01838928FE363E579F8E7FB79AC12B04E9B1
Authority key identifier: 29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/vAu4AmHBUTVY3gWWaCecOSGe8i8.roa
Signing time: Thu 29 Sep 2022 12:11:48 +0000
ROA not before: Thu 29 Sep 2022 12:11:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50673
IP address blocks: 31.186.170.0/23 maxlen: 23
185.56.144.0/22 maxlen: 24
31.186.174.0/23 maxlen: 23
2a02:40c0:1000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:89:28:fe:36:3e:57:9f:8e:7f:b7:9a:c1:2b:04:e9:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Validity
Not Before: Sep 29 12:11:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc0bb80261c1513558de059668279c39219ef22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d8:dc:9b:62:36:e5:cb:ff:bc:49:8a:fe:7d:
60:32:de:79:ac:df:b9:d7:ab:e3:c6:d1:70:44:a0:
5e:79:7c:89:ea:4d:03:00:26:37:fc:d2:8e:23:a6:
8e:8e:4d:51:77:71:01:e2:5d:ba:9d:17:43:4f:22:
37:75:c3:e2:39:7c:8a:61:20:08:ff:5e:ce:e9:06:
bb:d6:71:4f:8c:19:11:28:14:53:cc:32:99:29:14:
3a:94:21:ea:33:71:ef:b8:18:29:58:d2:7c:5e:f5:
db:f0:1e:e4:99:24:76:44:56:47:d1:0f:b1:8b:99:
77:ae:c6:d4:8a:65:6e:0b:b0:d6:d6:8a:33:92:e8:
73:3d:61:17:29:24:eb:86:75:f1:c7:4e:4a:8a:95:
a7:f0:b9:77:0d:84:33:48:3e:ba:b5:d9:cb:8d:40:
35:2d:f1:5b:72:cc:1d:1b:46:eb:06:db:2d:ef:88:
d7:9c:77:9c:5c:fd:4a:8d:99:5f:6d:3c:a9:73:5e:
a1:49:cd:48:d5:54:2f:c4:cf:04:42:45:e0:56:c0:
be:5e:10:82:06:c3:19:5a:4f:44:10:7c:eb:81:d0:
fa:f9:8f:2b:36:71:1a:7d:68:96:ba:65:9a:54:28:
cc:5b:9d:03:25:36:5e:1d:bf:96:b4:63:10:cd:23:
ee:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:0B:B8:02:61:C1:51:35:58:DE:05:96:68:27:9C:39:21:9E:F2:2F
X509v3 Authority Key Identifier:
keyid:29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/vAu4AmHBUTVY3gWWaCecOSGe8i8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.170.0/23
31.186.174.0/23
185.56.144.0/22
IPv6:
2a02:40c0:1000::/48
Signature Algorithm: sha256WithRSAEncryption
29:09:71:a8:ae:0a:f8:ff:70:b5:eb:1b:cc:4e:73:6b:d7:3e:
a0:33:87:a4:e6:62:68:cd:40:86:d8:8a:84:48:36:36:87:a3:
6b:76:ab:c9:c7:4b:68:8f:2a:0c:a1:39:b8:74:e8:c1:4d:bb:
d0:75:a3:c8:22:ed:14:b6:0a:75:16:ad:ac:65:eb:eb:cd:cf:
92:9b:8c:99:59:42:d7:18:9f:f1:5b:eb:d2:55:f1:a2:bd:f4:
31:74:28:9b:f0:09:1f:2a:4f:45:e4:54:74:0a:5e:6f:bb:58:
38:52:f2:49:3e:a0:6a:1b:ae:54:25:96:28:bc:ae:ed:c8:7c:
6f:01:4f:69:9f:97:b3:ab:cb:95:0c:6d:2d:44:48:f6:0b:49:
4d:81:3c:d9:fc:01:28:aa:7f:b9:e9:12:9c:0c:fa:29:ab:34:
7f:fb:bc:14:0e:06:d6:07:94:60:19:d7:db:b8:91:46:3f:2f:
6c:3a:b7:36:b4:e2:f3:18:f3:31:5e:00:96:76:55:00:94:6b:
1f:77:3f:49:cd:48:30:ef:8d:1b:bf:30:30:5d:e0:5e:ec:58:
4c:d6:36:78:cf:28:9a:df:a5:a3:d1:76:64:57:df:8f:92:f6:
c9:71:ad:73:82:c5:a1:35:2c:9f:d9:3e:ed:45:4a:83:89:98:
fb:50:cb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:15 2024 by rpki-client on console-fra.rpki-client.org