Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/QYrZ0SNHtzVcn4Ua0OseJi0rsBk.roa
File: QYrZ0SNHtzVcn4Ua0OseJi0rsBk.roa (raw, json)
Hash identifier: YNMk+O4Jd7K29sL4i3Mf+XJhdecP1ZeGUJhBXH0BA/M=
Subject key identifier: 41:8A:D9:D1:23:47:B7:35:5C:9F:85:1A:D0:EB:1E:26:2D:2B:B0:19
Certificate issuer: /CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Certificate serial: 164AFEEC
Authority key identifier: 0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/QYrZ0SNHtzVcn4Ua0OseJi0rsBk.roa
Signing time: Sat 01 Jan 2022 13:07:14 +0000
ROA not before: Sat 01 Jan 2022 13:07:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29518
IP address blocks: 94.255.128.0/17 maxlen: 17
91.191.128.0/20 maxlen: 20
62.220.160.0/19 maxlen: 19
89.160.0.0/17 maxlen: 17
31.208.0.0/16 maxlen: 16
217.118.208.0/20 maxlen: 20
31.209.0.0/18 maxlen: 18
217.78.32.0/20 maxlen: 20
82.209.128.0/18 maxlen: 18
195.238.255.0/24 maxlen: 24
83.219.192.0/19 maxlen: 19
87.251.192.0/19 maxlen: 19
193.23.57.0/24 maxlen: 24
89.233.192.0/18 maxlen: 18
185.113.96.0/22 maxlen: 22
217.76.80.0/20 maxlen: 20
46.162.64.0/18 maxlen: 18
83.233.0.0/16 maxlen: 16
217.115.32.0/19 maxlen: 19
2001:9c8::/29 maxlen: 29
2a00:1598::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 374013676 (0x164afeec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Validity
Not Before: Jan 1 13:07:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=418ad9d12347b7355c9f851ad0eb1e262d2bb019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:18:41:04:cb:0f:ef:21:7a:dc:f0:90:1f:ee:
27:11:09:c2:98:60:a8:e2:66:c7:6e:b8:da:9d:4d:
d3:b8:72:f6:9a:93:5e:49:fe:93:48:1d:ad:94:6f:
b7:65:73:39:45:bb:e8:73:40:16:f5:82:8e:37:e0:
f2:1f:d9:e8:9e:e9:50:dc:a4:31:68:44:1c:5c:20:
33:cc:67:da:8d:e0:5d:8d:1b:86:30:b8:49:70:8e:
9a:ad:c4:18:b8:fa:f3:16:1f:30:89:c2:ab:4d:cf:
2a:ad:19:fd:87:d8:6b:9a:73:41:87:7f:c1:aa:5a:
53:69:bf:f4:4f:19:b0:72:7c:23:a4:1b:9f:c0:89:
9c:0d:9c:b2:18:b4:aa:1f:5b:43:76:71:16:db:23:
a4:6c:1a:2d:77:29:6d:47:32:91:75:d1:13:28:a0:
a8:33:ee:bd:cd:1b:1e:8b:2f:2b:29:7a:ef:b1:0f:
d6:5f:1b:2a:a9:b5:56:bd:f8:83:dd:6d:7e:73:7a:
b3:de:c8:86:e7:44:18:86:b4:9e:c6:4d:f4:82:17:
d0:8c:6f:f7:6c:b4:98:6b:ad:42:04:53:4c:c4:b1:
eb:ec:f2:8e:2b:c3:6b:dd:a5:26:66:7a:16:32:bf:
da:2b:03:0a:c2:0c:7a:ba:c8:e5:4c:7e:9b:7e:74:
b1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8A:D9:D1:23:47:B7:35:5C:9F:85:1A:D0:EB:1E:26:2D:2B:B0:19
X509v3 Authority Key Identifier:
keyid:0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/QYrZ0SNHtzVcn4Ua0OseJi0rsBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.208.0.0-31.209.63.255
46.162.64.0/18
62.220.160.0/19
82.209.128.0/18
83.219.192.0/19
83.233.0.0/16
87.251.192.0/19
89.160.0.0/17
89.233.192.0/18
91.191.128.0/20
94.255.128.0/17
185.113.96.0/22
193.23.57.0/24
195.238.255.0/24
217.76.80.0/20
217.78.32.0/20
217.115.32.0/19
217.118.208.0/20
IPv6:
2001:9c8::/29
2a00:1598::/29
Signature Algorithm: sha256WithRSAEncryption
19:70:51:e7:4e:1e:9d:bc:4c:22:a8:64:ec:06:87:68:46:31:
e6:af:67:ca:c7:b6:66:dc:f7:a6:09:52:33:6a:ee:8c:ee:e4:
8b:0f:fc:b6:ec:2a:8f:e4:68:5e:49:30:02:f4:81:cf:7c:06:
4d:bb:54:ef:ff:4d:8d:70:32:a1:d6:f6:6b:b9:cd:e8:f7:86:
f8:11:8e:ab:8b:d0:ed:24:cf:69:be:d8:32:f6:ad:19:35:2c:
ec:d9:55:0a:34:ef:6f:c6:bb:70:3c:da:80:ee:b9:cc:4c:83:
d5:77:ec:0c:d0:d0:04:c5:ca:77:62:66:79:8a:4a:b3:ce:71:
93:d7:2d:75:fe:a3:4d:3d:f9:f4:01:26:28:4e:16:d8:0e:4e:
e1:38:43:17:fe:fa:47:02:9f:96:84:21:85:c1:82:b2:2a:76:
4b:64:1e:f3:eb:2a:f1:42:20:7a:24:f9:ef:60:ef:42:19:16:
63:a5:99:44:d2:40:1e:aa:d4:b1:fc:86:da:74:e7:e4:9a:6c:
e8:98:71:73:55:64:b2:f9:db:16:1a:6a:28:3b:88:f1:68:0d:
a9:0b:7f:51:5e:b3:b2:85:2d:58:49:ab:2f:39:cb:49:fc:7e:
80:15:13:2f:6f:9c:fb:db:c0:57:c2:99:81:1a:54:8f:25:55:
61:db:5c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:06 2023 by rpki-client on console-fra.rpki-client.org