Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/afqkw8dtZMP6-4BcYyfPnrlLFsw.roa
File: afqkw8dtZMP6-4BcYyfPnrlLFsw.roa (raw, json)
Hash identifier: rzlDnQ6L9L+3BO4WBpn4r/UO0sZk86gcRyEj9uN/yrE=
Subject key identifier: 69:FA:A4:C3:C7:6D:64:C3:FA:FB:80:5C:63:27:CF:9E:B9:4B:16:CC
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 04A26082
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/afqkw8dtZMP6-4BcYyfPnrlLFsw.roa
Signing time: Sun 20 Mar 2022 10:21:55 +0000
ROA not before: Sun 20 Mar 2022 10:21:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.28.51.0/24 maxlen: 24
185.231.186.0/24 maxlen: 24
185.231.187.0/24 maxlen: 24
31.15.7.0/24 maxlen: 24
31.15.6.0/24 maxlen: 24
31.15.5.0/24 maxlen: 24
89.190.152.0/24 maxlen: 24
89.190.152.0/22 maxlen: 22
185.225.244.0/22 maxlen: 22
89.190.154.0/24 maxlen: 24
89.190.153.0/24 maxlen: 24
89.190.155.0/24 maxlen: 24
185.246.15.0/24 maxlen: 24
185.246.14.0/24 maxlen: 24
185.246.13.0/24 maxlen: 24
185.246.12.0/24 maxlen: 24
185.244.231.0/24 maxlen: 24
185.244.230.0/24 maxlen: 24
185.244.229.0/24 maxlen: 24
185.244.228.0/24 maxlen: 24
80.66.122.0/24 maxlen: 24
194.32.112.0/24 maxlen: 24
194.32.115.0/24 maxlen: 24
194.32.114.0/24 maxlen: 24
194.32.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77750402 (0x4a26082)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Mar 20 10:21:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69faa4c3c76d64c3fafb805c6327cf9eb94b16cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a5:92:9a:d1:1a:59:48:3c:1b:0c:85:ec:07:
af:5c:e8:09:40:f1:a2:6c:5e:a7:d0:db:36:8f:c1:
dc:20:8c:df:0c:ab:d9:18:88:94:00:43:b1:86:cf:
b4:12:c1:a4:7c:92:28:0a:0c:38:57:9d:65:5a:63:
32:3b:6a:5a:44:f7:dd:ff:e6:76:9c:19:bf:44:85:
e2:b3:8a:ea:43:a7:01:ae:eb:fe:db:39:62:f5:fa:
f7:33:7b:a5:80:c4:d2:33:df:3e:47:21:e6:c8:69:
91:ba:ae:ae:bc:84:fd:7c:e4:29:56:84:df:20:8c:
dd:9b:69:45:5c:8f:2c:01:fe:c0:f5:47:fb:9b:e5:
5d:de:19:3e:4d:48:6b:a2:f3:0a:13:fb:d2:5c:9c:
a3:c5:a7:eb:d8:f1:4e:44:af:aa:b3:b7:d5:47:a8:
b8:3d:97:75:c2:b0:40:1e:a9:e2:d9:0e:af:ff:35:
0e:82:9c:9b:e2:b8:4e:3d:a7:c3:77:bc:d0:d8:64:
3d:10:8f:01:6a:2f:b5:a2:41:fc:7b:4c:d7:c5:5a:
87:2f:98:a6:9f:ff:2a:34:43:1f:a1:b5:ff:f5:22:
d2:ee:26:75:d1:7b:c8:a4:ad:88:08:6d:bc:65:e5:
99:84:2d:53:2b:b7:cb:fb:a9:ac:af:a9:24:ab:5d:
33:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:FA:A4:C3:C7:6D:64:C3:FA:FB:80:5C:63:27:CF:9E:B9:4B:16:CC
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/afqkw8dtZMP6-4BcYyfPnrlLFsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.5.0-31.15.7.255
80.66.122.0/24
89.190.152.0/22
185.28.51.0/24
185.225.244.0/22
185.231.186.0/23
185.244.228.0/22
185.246.12.0/22
194.32.112.0/22
Signature Algorithm: sha256WithRSAEncryption
11:ca:b5:67:cd:d4:49:b9:41:42:7e:f2:5a:06:e8:e3:65:7a:
a1:12:8b:93:c3:64:99:08:72:1e:8d:2a:ac:2b:99:27:38:44:
d9:56:51:9f:4e:94:e8:c2:af:88:b5:5d:c0:43:62:99:55:08:
ce:cd:90:8a:66:a9:6f:58:af:2b:87:28:46:d2:05:43:6d:de:
d6:fc:45:59:16:f0:69:fb:5d:ab:ec:51:85:06:2d:cd:11:b7:
2d:47:51:be:a5:c1:cd:58:79:9c:b5:c4:5b:7b:ef:0c:c0:47:
02:ec:41:e1:c7:20:32:74:a0:ea:f5:85:9c:5d:40:cc:3d:7c:
dd:21:74:4e:bd:c4:d0:bf:ac:24:d5:26:f1:64:0b:cd:3c:20:
f9:73:f1:a1:bd:8b:b8:52:c7:79:5c:f0:4d:20:ea:42:79:d8:
78:63:aa:47:98:2d:6b:5a:ab:1d:86:9d:f9:07:1d:c6:21:27:
4a:45:76:c5:2f:7b:64:97:2f:d2:fe:08:5d:74:35:8b:0e:7f:
b0:ed:98:cb:80:02:66:11:03:98:65:33:c2:2f:32:84:ab:90:
9c:56:ae:5d:ad:b3:6c:b7:49:5e:48:35:6b:13:a0:f9:02:fe:
a3:eb:0b:21:f8:ef:d1:00:a2:7f:af:75:b5:42:ed:3e:16:e4:
84:5a:96:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:35 2023 by rpki-client on console-ams.rpki-client.org