Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/m_ninswqpcTWha6gUrqH1joRl9I.roa
File: m_ninswqpcTWha6gUrqH1joRl9I.roa (raw, json)
Hash identifier: KaB1XWyDNl5aapn99Tdoq0/27gzcea4QK4RQ3HtGHmo=
Subject key identifier: 9B:F9:E2:9E:CC:2A:A5:C4:D6:85:AE:A0:52:BA:87:D6:3A:11:97:D2
Certificate issuer: /CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e
Certificate serial: 028A533B
Authority key identifier: 83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/m_ninswqpcTWha6gUrqH1joRl9I.roa
Signing time: Sat 05 Feb 2022 04:05:06 +0000
ROA not before: Sat 05 Feb 2022 04:05:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25591
IP address blocks: 80.242.96.0/22 maxlen: 22
80.242.104.0/22 maxlen: 22
80.242.100.0/22 maxlen: 22
80.242.108.0/22 maxlen: 22
31.3.24.0/22 maxlen: 22
185.14.16.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42619707 (0x28a533b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e
Validity
Not Before: Feb 5 04:05:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9bf9e29ecc2aa5c4d685aea052ba87d63a1197d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9a:c7:da:29:1d:a0:08:fd:e9:68:2a:01:eb:
26:8e:ea:92:56:ad:b5:a6:0a:52:1c:a7:fc:ab:54:
16:03:ae:0c:9f:c8:72:7a:2c:5a:e0:4a:9b:2a:41:
95:1c:ee:85:34:92:4b:5d:86:36:ed:0c:a9:08:98:
f0:12:56:1f:7e:2c:57:c7:78:1e:f2:a0:18:80:f9:
33:a3:a0:af:ee:a9:18:dd:c7:c4:4d:2d:04:63:b4:
d8:6c:23:2f:0f:f9:a7:bb:27:08:b3:3a:b5:bd:a3:
5d:65:ff:1f:a2:0e:a1:1c:d3:35:58:7c:74:7c:e5:
71:20:c5:d2:87:d4:b3:fc:c5:7a:3c:d1:5d:6f:c1:
7c:98:46:83:b5:66:26:0f:f9:16:33:ee:e8:c0:84:
c0:80:0f:37:5f:c2:b9:fa:ae:b7:ea:02:25:02:10:
5a:cb:79:e3:5c:88:b2:46:80:00:db:17:8b:52:de:
85:e8:2a:9e:dd:ae:da:24:a1:ba:c8:f8:96:45:a4:
7f:18:55:57:b3:fd:e9:02:75:5a:1f:42:15:d0:ec:
67:1e:c6:0d:b5:cb:f1:3a:da:d1:7e:00:5f:45:f4:
25:c9:70:f9:c6:30:fc:37:c5:a6:13:92:1c:96:dd:
60:9a:70:6e:95:37:45:10:55:a2:d8:5e:a4:03:b4:
d1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F9:E2:9E:CC:2A:A5:C4:D6:85:AE:A0:52:BA:87:D6:3A:11:97:D2
X509v3 Authority Key Identifier:
keyid:83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/m_ninswqpcTWha6gUrqH1joRl9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.24.0/22
80.242.96.0/20
185.14.16.0/22
Signature Algorithm: sha256WithRSAEncryption
44:da:44:b6:69:1a:95:37:3e:da:37:81:08:e2:df:01:5b:d1:
7c:2a:fa:71:fd:39:fa:08:43:7c:32:5f:4b:79:d9:d0:98:64:
cb:96:9a:94:16:e7:1f:ce:76:54:60:3b:94:32:1a:51:80:3e:
eb:8c:05:ed:ad:da:72:52:bc:d5:5a:b0:5d:1e:ca:dc:5f:85:
e8:82:52:70:d7:58:01:bd:d6:51:39:93:19:00:a4:04:83:b4:
be:fe:a2:fe:0e:19:21:0b:24:9e:7f:f9:2a:80:ba:c6:de:66:
61:a0:75:b6:99:6f:22:58:ad:59:1c:db:a3:86:58:29:b7:36:
33:13:fb:7e:8c:ec:ae:4c:c1:83:e3:34:6b:e6:e5:36:2a:70:
63:46:e4:a8:69:a3:e6:43:08:e1:e6:cf:66:e6:29:e8:d3:ce:
ec:8e:2f:ec:7d:8d:2f:23:a8:e8:93:eb:64:bc:37:94:69:62:
8b:0e:dc:2e:0e:10:19:1f:4f:66:56:80:27:ee:fe:75:70:1d:
6a:71:a3:a3:8f:55:a5:c5:0e:9c:68:83:87:25:f4:85:44:a2:
f9:8c:a2:ce:f9:ba:ee:63:17:1b:82:3d:d4:d2:25:48:d6:d1:
02:3c:12:3b:af:31:4e:e9:0e:fd:18:6d:fd:c0:9f:26:00:b3:
7b:e8:92:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:46 2024 by rpki-client on console-fra.rpki-client.org