Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/QwSSwiMmjRpYsYz3zpbW_vZOhf8.roa
File: QwSSwiMmjRpYsYz3zpbW_vZOhf8.roa (raw, json)
Hash identifier: JHodjoZVdiO7pWxc1+QJVJqxd1ND91xMnzXkbbTcVHw=
Subject key identifier: 43:04:92:C2:23:26:8D:1A:58:B1:8C:F7:CE:96:D6:FE:F6:4E:85:FF
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 09218CC4
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/QwSSwiMmjRpYsYz3zpbW_vZOhf8.roa
Signing time: Sat 01 Jan 2022 11:54:30 +0000
ROA not before: Sat 01 Jan 2022 11:54:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34471
IP address blocks: 185.5.84.0/22 maxlen: 24
89.40.84.0/22 maxlen: 24
185.176.104.0/22 maxlen: 24
185.176.107.0/24 maxlen: 24
31.25.176.0/21 maxlen: 24
91.242.148.0/22 maxlen: 24
109.235.16.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153193668 (0x9218cc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Jan 1 11:54:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=430492c223268d1a58b18cf7ce96d6fef64e85ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fb:a0:84:54:64:4a:79:cf:a0:e6:45:1c:05:
75:57:23:f6:39:12:ea:1b:45:b3:16:c1:51:e7:a7:
bf:f3:5b:04:6c:cb:f3:ab:f3:b3:c2:3d:fd:1c:99:
33:9b:f9:8c:b5:e4:45:ad:f0:9b:5c:18:39:3a:4d:
3c:51:5c:8b:57:3c:52:09:47:46:f9:4a:1b:5e:3a:
1b:84:a3:87:14:16:1e:be:f1:aa:7f:d2:23:93:af:
85:1a:e0:e6:8e:82:f0:4c:94:f2:0d:6c:31:cd:54:
87:87:17:e8:73:ed:30:38:da:96:7a:ab:7c:4b:03:
aa:df:c2:a9:bf:a4:eb:f7:30:38:b0:e5:01:fd:72:
50:60:08:9b:52:8a:42:02:4a:fe:59:43:34:31:f3:
62:62:f5:21:b9:f3:9f:ce:84:d2:de:e8:aa:81:29:
83:ee:fa:84:d8:91:da:8c:dc:c7:18:79:07:bb:a6:
17:13:6c:37:92:e5:3d:7b:03:37:5c:94:51:96:15:
ec:ef:59:1a:93:12:58:ad:52:89:d7:9a:5a:9e:50:
04:22:18:2a:a5:44:b9:49:5e:9a:32:f0:2c:ec:3a:
58:a0:39:bb:cd:b4:5c:99:5d:7f:87:69:8a:fc:2b:
9d:52:9f:d6:80:88:32:3e:e9:52:56:cc:09:e3:d7:
2e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:04:92:C2:23:26:8D:1A:58:B1:8C:F7:CE:96:D6:FE:F6:4E:85:FF
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/QwSSwiMmjRpYsYz3zpbW_vZOhf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.176.0/21
89.40.84.0/22
91.242.148.0/22
109.235.16.0/21
185.5.84.0/22
185.176.104.0/22
Signature Algorithm: sha256WithRSAEncryption
85:d0:40:36:ab:1d:0c:63:c6:e8:50:e6:c6:e0:34:41:a8:90:
6f:ec:be:11:73:bb:0f:6d:24:4d:fc:89:c7:78:83:f1:52:7e:
4c:ac:7c:c0:55:fb:a2:71:bd:2f:6c:c5:09:96:f0:f7:05:db:
e8:54:7b:26:da:91:59:c9:35:57:2d:43:05:e1:fd:bc:74:87:
4b:c2:ff:c1:65:89:62:09:e6:86:9c:4f:13:8c:39:b0:4f:e3:
65:5f:cb:82:be:e3:69:81:0a:23:c0:38:e4:a4:11:36:0c:bd:
31:92:e9:98:79:9e:b1:c7:1d:31:e0:47:6c:c7:6e:37:a8:49:
d0:8d:70:08:7c:0f:ee:3d:09:95:dd:2e:09:5e:25:f2:87:53:
a3:9b:e3:58:5e:ae:53:a4:cd:93:37:70:18:c6:61:87:d2:e4:
36:1a:5c:50:68:3d:77:13:39:47:96:31:c8:a4:00:2a:10:11:
ee:40:06:a6:9e:44:92:8a:56:a1:dd:90:cd:11:ac:52:b5:52:
71:08:55:83:41:1e:29:64:06:b8:e3:8b:a7:dd:9f:bf:e4:63:
29:82:bf:3a:66:71:48:37:1c:e4:8e:36:c9:67:88:81:09:f1:
9e:ac:7b:5e:10:56:6a:fb:05:32:ba:44:02:24:a7:5f:7e:c2:
4f:92:38:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:11 2023 by rpki-client on console-fra.rpki-client.org