Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/nIM6kDS4gdDcQHN2TOhdZ66Qlfs.roa
File: nIM6kDS4gdDcQHN2TOhdZ66Qlfs.roa (raw, json)
Hash identifier: fhMdrr5ZAJb5xHI/6pWDmCLORNcvmSpDsMiLjepWfHc=
Subject key identifier: 9C:83:3A:90:34:B8:81:D0:DC:40:73:76:4C:E8:5D:67:AE:90:95:FB
Certificate issuer: /CN=5a376c8008d6abd962341563dd2a4dccaf153cba
Certificate serial: 01845BB2EE8479319CC61D3EA3F98C507E35
Authority key identifier: 5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/nIM6kDS4gdDcQHN2TOhdZ66Qlfs.roa
Signing time: Wed 09 Nov 2022 09:22:43 +0000
ROA not before: Wed 09 Nov 2022 09:22:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 31.214.246.0/24 maxlen: 24
31.214.245.0/24 maxlen: 24
31.214.247.0/24 maxlen: 24
31.214.141.0/24 maxlen: 24
95.156.227.0/24 maxlen: 24
134.255.225.0/24 maxlen: 24
134.255.227.0/24 maxlen: 24
134.255.252.0/24 maxlen: 24
109.230.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5b:b2:ee:84:79:31:9c:c6:1d:3e:a3:f9:8c:50:7e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a376c8008d6abd962341563dd2a4dccaf153cba
Validity
Not Before: Nov 9 09:22:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c833a9034b881d0dc4073764ce85d67ae9095fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:45:43:c2:53:88:35:08:20:71:da:dd:3a:0e:
c7:ec:a9:e5:6a:3b:2e:ba:02:6d:a2:d6:4f:92:a3:
d9:15:e7:67:c2:f4:c6:65:9b:a0:b1:99:9b:8c:25:
f8:c2:19:d7:bf:f7:88:dd:a3:de:4f:1c:5d:40:8f:
ad:8b:e0:b2:14:d4:53:07:ba:0d:10:35:33:92:ed:
fb:9d:00:a6:36:b7:5d:67:e5:ec:3d:99:0f:b3:d6:
14:a6:38:83:49:a9:c9:b0:80:f7:e5:dd:6e:8b:b5:
a8:a8:d6:e5:72:54:96:2e:e3:b3:36:69:b3:7b:80:
b6:99:50:e1:73:ce:57:07:5e:3d:bf:4d:f0:79:7e:
bc:23:fa:33:9d:f6:e6:83:16:e2:95:4f:05:f9:63:
f4:da:e1:3a:95:61:9e:6c:f2:e0:39:39:95:64:fe:
5f:4d:48:65:79:e9:73:f2:98:0f:01:0c:90:d4:87:
66:64:1f:fe:9a:dc:9a:bb:fe:94:0c:a7:b1:21:17:
93:af:ae:e1:fa:ca:70:24:4d:a3:7f:ff:17:73:33:
d8:f0:d6:fc:e4:91:8a:39:ad:70:cf:5b:30:bd:34:
85:5c:d6:1d:27:4e:1c:da:23:55:97:f3:e1:c5:64:
35:f7:36:fd:b6:b3:5a:89:4c:94:67:c8:88:53:a8:
78:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:83:3A:90:34:B8:81:D0:DC:40:73:76:4C:E8:5D:67:AE:90:95:FB
X509v3 Authority Key Identifier:
keyid:5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/nIM6kDS4gdDcQHN2TOhdZ66Qlfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.214.141.0/24
31.214.245.0-31.214.247.255
95.156.227.0/24
109.230.238.0/24
134.255.225.0/24
134.255.227.0/24
134.255.252.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:d1:ec:c3:69:d0:e0:15:77:e0:de:81:12:5f:4d:05:e0:13:
72:37:b7:63:02:aa:50:db:55:2f:af:9e:5c:72:a9:cf:67:9e:
f2:6a:48:2c:52:63:b9:14:0b:56:0f:7a:c3:11:81:b3:d3:3f:
8b:e1:57:47:f0:87:e9:5b:9d:e1:86:09:06:25:aa:f7:40:07:
57:d0:d3:7c:26:27:02:12:54:5a:47:39:30:17:5b:e7:47:94:
81:04:a1:e7:98:8c:ec:93:a5:3b:77:01:a1:06:24:8e:db:6a:
08:79:42:2e:4e:96:9d:06:24:9f:17:c2:ce:a2:b1:6a:76:d6:
72:e2:32:d5:c5:35:fc:c9:61:78:ba:14:8a:5e:5c:ee:85:14:
a0:74:f2:db:4d:3b:98:17:a6:fb:4a:58:7c:c6:f2:3e:3c:b5:
2a:2f:25:6c:5b:b7:21:13:f7:58:6c:a1:46:04:02:b5:4b:46:
de:92:87:01:19:9f:f9:9f:40:58:7d:59:4a:29:c1:1f:10:ac:
c0:98:58:61:c4:23:55:40:c1:b5:40:1f:1b:0c:85:58:f4:70:
74:fc:2f:58:a1:54:42:83:85:d0:8f:aa:8b:83:1c:bc:8f:08:
f3:d7:13:e3:00:2e:de:ff:03:6a:1a:b2:8b:fd:28:31:ea:9f:
59:dd:f1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:28 2024 by rpki-client on console-ams.rpki-client.org