Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/0WrFqusMY7-poobWHJI41ixE7Rs.roa
File: 0WrFqusMY7-poobWHJI41ixE7Rs.roa (raw, json)
Hash identifier: 9b6h28LyHElKvVT6RpOGbIzCVPo6pNq5t0A5VNTF1RE=
Subject key identifier: D1:6A:C5:AA:EB:0C:63:BF:A9:A2:86:D6:1C:92:38:D6:2C:44:ED:1B
Certificate issuer: /CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
Certificate serial: 36AF0CDB
Authority key identifier: E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/0WrFqusMY7-poobWHJI41ixE7Rs.roa
Signing time: Sat 01 Jan 2022 04:56:54 +0000
ROA not before: Sat 01 Jan 2022 04:56:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12301
IP address blocks: 77.243.208.0/20 maxlen: 20
46.31.176.0/22 maxlen: 22
46.31.182.0/24 maxlen: 24
46.31.180.0/23 maxlen: 23
185.91.143.0/24 maxlen: 24
185.91.142.0/24 maxlen: 24
185.91.141.0/24 maxlen: 24
185.91.140.0/24 maxlen: 24
2a00:df80:1::/48 maxlen: 48
2a00:df80::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 917441755 (0x36af0cdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
Validity
Not Before: Jan 1 04:56:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d16ac5aaeb0c63bfa9a286d61c9238d62c44ed1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:85:21:44:ef:de:91:b7:55:a6:38:80:99:0d:
9a:e6:b5:dc:f3:33:ad:fb:f3:06:bb:fa:96:b2:06:
98:05:15:5f:7f:4b:85:b4:92:56:e1:8c:eb:0e:66:
c0:64:4f:9e:56:5e:12:89:1c:70:30:2f:a1:07:e7:
71:c6:db:6b:89:1f:9e:11:58:86:d6:29:db:00:ad:
a0:86:5d:d9:e2:15:53:4f:2a:4b:d5:a4:81:ad:39:
0d:aa:24:36:0d:ed:84:25:f9:e3:05:e5:89:4e:b2:
8c:77:3b:a2:69:6a:61:af:af:73:1a:6e:5f:e6:a3:
33:d3:e9:8a:92:31:7d:54:a7:31:36:0a:8b:44:8f:
05:2d:28:6f:f0:72:c1:bd:61:ba:76:18:cc:d3:07:
ed:13:a4:6a:bb:db:f6:f6:fa:e1:b6:45:4c:fb:16:
a1:4b:89:26:bb:8c:5b:bf:15:80:37:88:c4:c5:ec:
b2:94:14:1a:dd:c7:a3:4c:c9:4b:67:a9:f4:8d:87:
69:c0:dc:2a:e8:6e:b4:0f:81:d4:cc:fd:ed:e6:ae:
b2:0d:d8:34:20:7e:29:26:24:c0:20:da:11:f4:0b:
03:83:95:75:84:f5:5b:b3:8b:93:94:ee:5e:4f:4e:
9c:2d:db:cd:23:ef:3d:2c:e3:5a:f9:66:4d:55:d6:
b4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6A:C5:AA:EB:0C:63:BF:A9:A2:86:D6:1C:92:38:D6:2C:44:ED:1B
X509v3 Authority Key Identifier:
keyid:E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/0WrFqusMY7-poobWHJI41ixE7Rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.176.0-46.31.182.255
77.243.208.0/20
185.91.140.0/22
IPv6:
2a00:df80::/47
Signature Algorithm: sha256WithRSAEncryption
7e:32:07:2f:92:84:de:9e:85:dd:07:f0:22:80:f3:fd:17:f6:
65:fc:13:1b:4e:9e:11:80:82:91:2f:0f:1e:11:68:60:f8:e7:
5e:07:35:41:10:e8:72:fb:18:ff:e2:56:57:c9:0b:e1:09:3b:
3f:5a:d2:78:78:52:50:86:24:97:7f:0c:d9:27:f8:31:ff:5c:
b1:11:3f:ec:77:08:77:f9:81:13:b4:6a:c3:d6:e7:f2:8f:9d:
71:fd:76:74:04:38:3a:7e:83:e3:21:b2:a7:ea:47:3a:68:2e:
e7:1d:ee:45:5b:e7:f2:6c:1d:7d:2f:7e:dd:e7:a8:c1:ab:3a:
fc:7c:4e:80:74:5d:ad:dd:e1:c6:b8:fd:2a:bf:87:c1:54:f6:
59:ed:29:38:3a:7f:00:a3:9a:52:ea:8d:72:d4:49:b8:be:fa:
b6:de:2d:7b:d0:ac:d1:76:d0:5d:b1:aa:5d:14:65:b2:af:c5:
9e:40:a2:5c:c6:b4:5e:2c:e3:52:f8:7b:82:1e:f5:53:fa:1f:
81:4e:37:93:4e:c7:e6:f3:6b:49:15:a9:a0:18:84:d2:6c:11:
cb:d1:ba:11:89:b2:80:44:90:e3:fa:22:df:6f:f8:7c:8d:24:
48:88:51:0b:a0:b4:64:8a:29:95:75:19:07:db:a4:d4:9b:08:
06:54:a8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:21 2023 by rpki-client on console-fra.rpki-client.org