Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/DFDwT803dVBqHizgozVJnR8Psss.roa
File: DFDwT803dVBqHizgozVJnR8Psss.roa (raw, json)
Hash identifier: q6V6pZF/Bmz6ncBP9HQl87k6xnnVA2MW5KX+W1RZ8LA=
Subject key identifier: 0C:50:F0:4F:CD:37:75:50:6A:1E:2C:E0:A3:35:49:9D:1F:0F:B2:CB
Certificate issuer: /CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Certificate serial: 08296E15
Authority key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/DFDwT803dVBqHizgozVJnR8Psss.roa
Signing time: Fri 11 Mar 2022 09:45:29 +0000
ROA not before: Fri 11 Mar 2022 09:45:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15924
IP address blocks: 31.177.191.0/24 maxlen: 24
149.0.76.0/24 maxlen: 24
46.221.0.0/18 maxlen: 18
46.221.4.0/24 maxlen: 24
46.221.2.0/24 maxlen: 24
46.221.7.0/24 maxlen: 24
46.221.6.0/24 maxlen: 24
46.221.9.0/24 maxlen: 24
46.221.12.0/24 maxlen: 24
46.221.16.0/24 maxlen: 24
46.221.15.0/24 maxlen: 24
46.221.14.0/24 maxlen: 24
46.221.24.0/24 maxlen: 24
46.221.19.0/24 maxlen: 24
46.221.18.0/24 maxlen: 24
46.221.28.0/24 maxlen: 24
46.221.27.0/24 maxlen: 24
46.221.31.0/24 maxlen: 24
46.221.26.0/24 maxlen: 24
46.221.30.0/24 maxlen: 24
46.221.25.0/24 maxlen: 24
46.221.29.0/24 maxlen: 24
46.221.36.0/24 maxlen: 24
46.221.32.0/24 maxlen: 24
46.221.35.0/24 maxlen: 24
46.221.34.0/24 maxlen: 24
46.221.38.0/24 maxlen: 24
46.221.37.0/24 maxlen: 24
46.221.33.0/24 maxlen: 24
46.221.40.0/24 maxlen: 24
46.221.39.0/24 maxlen: 24
46.221.48.0/24 maxlen: 24
46.221.51.0/24 maxlen: 24
46.221.47.0/24 maxlen: 24
46.221.49.0/24 maxlen: 24
46.221.45.0/24 maxlen: 24
46.221.56.0/24 maxlen: 24
46.221.57.0/24 maxlen: 24
46.221.60.0/24 maxlen: 24
46.221.59.0/24 maxlen: 24
46.221.63.0/24 maxlen: 24
46.221.62.0/24 maxlen: 24
46.221.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136932885 (0x8296e15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Validity
Not Before: Mar 11 09:45:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c50f04fcd3775506a1e2ce0a335499d1f0fb2cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8c:34:22:10:ac:98:0a:9f:d3:8b:16:68:58:
63:ac:d3:27:63:44:f0:14:52:b3:19:2e:43:6d:03:
f7:06:5d:43:00:7e:cd:bc:71:16:1b:70:5d:a3:dd:
de:43:b1:24:4d:c6:f7:fe:1b:96:c9:68:84:22:f6:
f0:a6:dd:c5:6c:64:c2:f1:b3:b4:6f:d0:bc:bb:8c:
aa:e2:83:c4:6a:c0:45:f7:6a:33:f6:ba:cd:19:e9:
c5:49:54:ae:e0:aa:c0:4e:4d:22:23:c3:ce:2e:6a:
f4:11:0d:ed:ff:51:e8:57:a7:14:34:55:f7:3c:5c:
3e:4a:25:d9:24:19:34:65:66:e8:0c:6e:ee:70:ab:
6a:89:b1:83:ff:f8:fd:ef:5c:18:ae:51:91:02:19:
e5:f1:52:3e:cd:2d:17:7b:f9:c0:5f:50:b6:bd:6f:
b2:83:c3:06:1e:32:3f:5b:87:d9:b5:49:18:17:82:
1f:17:22:34:77:29:65:1c:f4:fc:69:f4:7f:7e:c0:
2a:04:b5:5b:fc:80:79:7e:94:2e:81:bd:30:a5:7c:
81:d3:f0:cb:4b:c6:ef:99:20:41:5f:83:16:aa:fb:
e5:60:2d:71:f2:87:3c:7c:63:22:b1:68:85:fd:5e:
1b:8c:28:6b:64:c8:fe:b1:6f:3f:76:7d:0f:c4:77:
d6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:50:F0:4F:CD:37:75:50:6A:1E:2C:E0:A3:35:49:9D:1F:0F:B2:CB
X509v3 Authority Key Identifier:
keyid:EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/DFDwT803dVBqHizgozVJnR8Psss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.177.191.0/24
46.221.0.0/18
149.0.76.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:53:78:3c:43:5a:fd:82:c3:2f:74:e4:99:a8:a8:44:04:f4:
2b:ef:e8:58:71:89:0e:54:58:77:46:31:6b:ee:84:51:c1:e1:
62:68:c9:14:62:61:99:44:24:c8:f1:98:37:fd:cb:94:1e:6a:
8e:93:fd:1b:72:6e:ba:1c:91:0b:e4:fb:db:bf:e7:62:e9:6b:
cd:0e:0e:f7:68:f7:77:85:e2:dd:e4:b7:e2:c4:ae:b5:63:ea:
42:1c:95:e3:a2:50:96:2d:33:86:9f:ab:e3:2a:c5:53:96:4f:
ed:dd:7d:bb:ff:c4:60:83:68:44:8c:e3:35:fb:6d:3c:8f:7d:
8f:bb:ef:c5:8d:94:03:c9:a4:a4:5b:06:36:63:24:73:0f:15:
f4:ff:76:18:d0:c4:d4:6a:6f:e1:99:9f:b8:de:ff:c6:14:67:
97:09:fb:7a:36:d0:0f:24:b6:e8:1c:50:12:71:45:81:3d:59:
25:24:86:fe:1e:3b:31:6b:14:29:6a:c8:a3:f1:62:be:9f:dd:
44:f1:2a:1a:79:64:f2:b9:97:22:fd:a2:1b:e7:85:4b:55:89:
e1:f5:e2:4d:c0:ed:fa:63:ac:d1:2e:3d:9a:eb:f8:e4:eb:07:
0e:ff:9a:53:1c:bb:6c:67:42:98:35:4b:ba:71:9d:84:43:04:
66:3b:c7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:25 2023 by rpki-client on console-fra.rpki-client.org