Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/S-DL4U7Ng4mZUQPJGlM_jzNgQpY.roa
File: S-DL4U7Ng4mZUQPJGlM_jzNgQpY.roa (raw, json)
Hash identifier: wRjJdAdZzutwtwEZkOLVcau/tPOGaGQBDGDKbpVjTBI=
Subject key identifier: 4B:E0:CB:E1:4E:CD:83:89:99:51:03:C9:1A:53:3F:8F:33:60:42:96
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 018570CBE3528FEEC756D34662968C8B1F30
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/S-DL4U7Ng4mZUQPJGlM_jzNgQpY.roa
Signing time: Mon 02 Jan 2023 04:44:48 +0000
ROA not before: Mon 02 Jan 2023 04:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15899
IP address blocks: 31.42.91.0/24 maxlen: 24
31.42.94.0/24 maxlen: 24
31.42.95.0/24 maxlen: 24
31.42.92.0/24 maxlen: 24
31.42.93.0/24 maxlen: 24
176.106.96.0/21 maxlen: 24
91.90.241.0/24 maxlen: 24
91.90.242.0/24 maxlen: 24
91.90.245.0/24 maxlen: 24
176.103.187.0/24 maxlen: 24
185.47.9.0/24 maxlen: 24
91.90.228.0/23 maxlen: 23
91.90.228.0/24 maxlen: 24
91.90.229.0/24 maxlen: 24
91.90.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:e3:52:8f:ee:c7:56:d3:46:62:96:8c:8b:1f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Jan 2 04:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4be0cbe14ecd8389995103c91a533f8f33604296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:89:e6:f9:79:43:4f:c5:b2:e0:0e:d1:ca:80:
7a:eb:4b:d8:4c:08:1a:2f:3e:80:00:77:d4:ed:0e:
c9:34:73:32:bf:12:f9:c3:44:e3:cc:59:85:19:59:
66:16:a2:5a:15:89:04:22:4f:05:b7:6b:15:97:a2:
21:3b:60:c0:51:ea:a9:d3:73:cd:31:b0:6a:8d:60:
1b:5f:d6:59:02:16:4e:75:51:40:07:9c:81:90:95:
0f:46:62:76:04:bb:1b:f7:3e:c2:5a:d3:90:b3:65:
8c:30:a3:ca:d6:95:93:88:5f:73:b3:6c:e9:55:48:
88:20:38:f2:7d:86:58:cf:d3:f6:72:2e:15:a7:53:
59:13:66:fa:93:8b:82:0d:18:96:89:62:36:f0:54:
7c:f1:08:55:35:e2:74:e8:0f:41:0e:0c:22:97:89:
11:b6:38:5e:06:36:86:cb:e6:25:4e:99:64:33:e2:
5f:82:45:3f:e7:ff:95:bd:c9:33:b5:f9:ce:ed:a2:
d1:a0:6a:ea:f3:9a:11:e7:59:0b:38:85:bf:28:20:
98:d3:74:e0:1c:7e:37:ab:36:34:6d:2d:83:aa:68:
1f:18:c9:a5:a2:66:50:19:23:70:65:1b:40:1a:0b:
13:aa:95:e5:61:c1:8d:66:7d:8d:8a:f0:f4:e1:76:
a5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E0:CB:E1:4E:CD:83:89:99:51:03:C9:1A:53:3F:8F:33:60:42:96
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/S-DL4U7Ng4mZUQPJGlM_jzNgQpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.91.0-31.42.95.255
91.90.228.0/23
91.90.240.0-91.90.242.255
91.90.245.0/24
176.103.187.0/24
176.106.96.0/21
185.47.9.0/24
Signature Algorithm: sha256WithRSAEncryption
90:8f:8f:6c:99:29:ad:9f:2f:f0:0c:ea:54:c9:81:04:af:ab:
64:92:37:ea:91:78:2c:ea:b1:9b:d4:a3:0b:6a:e3:a7:d0:c6:
03:6f:4e:3a:f2:8b:6b:37:fc:d8:35:13:35:6a:4b:cc:28:76:
0e:35:9f:95:56:1c:1d:79:79:29:3a:65:af:68:55:33:4b:d2:
70:34:39:ec:b5:a1:14:91:ef:1d:4c:89:75:2c:2f:7c:f1:49:
3e:6c:d8:9e:00:68:e1:13:6a:aa:51:66:1a:27:16:57:fb:9a:
c8:a2:3f:fa:c9:e5:0e:3b:d7:2f:c3:35:69:68:23:02:93:ba:
a3:eb:3a:e7:73:68:37:6e:87:0f:14:60:68:b9:e3:a2:f7:56:
7a:ae:e9:48:d7:87:6d:f5:c7:06:2d:12:05:81:a3:95:14:4e:
3a:f8:a6:6e:7c:d4:e1:34:ce:f5:ab:c5:3a:0d:d0:45:8b:61:
3d:ea:57:24:67:8a:87:3d:2c:56:3d:fa:ac:84:8b:92:04:39:
8d:b6:34:93:f3:42:30:24:d4:aa:ff:f2:4e:4c:2f:fc:dc:60:
22:de:7c:16:89:27:db:07:9b:e4:8f:35:5d:1e:d5:a2:c5:00:
47:9c:14:83:af:86:e0:09:8c:08:88:c2:0d:bf:c6:5a:7a:73:
75:2f:b5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:17 2025 by rpki-client