Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/c-m4iefqEs_L45wNIyaA_phy3Sg.roa
File: c-m4iefqEs_L45wNIyaA_phy3Sg.roa (raw, json)
Hash identifier: 7/F7oiOpcQvQ2lhnd/RcDIRVwsZdeExCUYCfOe35UQs=
Subject key identifier: 73:E9:B8:89:E7:EA:12:CF:CB:E3:9C:0D:23:26:80:FE:98:72:DD:28
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 0B77DE81
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/c-m4iefqEs_L45wNIyaA_phy3Sg.roa
Signing time: Tue 14 Jun 2022 19:40:45 +0000
ROA not before: Tue 14 Jun 2022 19:40:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 171.22.147.0/24 maxlen: 24
171.22.146.0/24 maxlen: 24
31.43.174.0/23 maxlen: 24
185.235.71.0/24 maxlen: 24
185.149.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192405121 (0xb77de81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Jun 14 19:40:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=73e9b889e7ea12cfcbe39c0d232680fe9872dd28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f1:0b:c9:db:ce:75:23:e0:d5:07:bc:fa:16:
49:3b:a4:68:0f:b2:89:fe:ed:5c:77:b2:91:a2:33:
5c:ef:af:54:41:dc:a4:60:05:e6:bf:75:f5:5e:2d:
85:13:ea:dd:1f:d2:fb:07:17:ba:2a:5d:4f:79:a6:
77:bb:bc:a9:65:f8:bf:a7:06:03:b0:ca:4a:fb:9e:
a7:8b:a6:16:b6:ce:0f:27:a1:af:61:d7:17:ce:6f:
9d:86:17:80:a8:b1:ca:59:b2:07:12:f2:f5:8e:c7:
30:06:16:e4:d9:1d:cc:7e:7a:a3:65:4f:87:cc:5e:
f2:8e:af:ce:8b:84:c2:82:34:c9:51:06:c3:93:38:
08:35:2f:7f:c3:4b:1d:fd:aa:48:30:9a:77:34:45:
b9:2b:ac:44:fb:96:81:86:75:3e:cb:6b:72:0f:41:
16:c9:b0:f4:dc:75:38:d3:38:a0:f1:3a:7d:f8:54:
f9:1a:30:79:78:43:b6:65:34:22:a0:8b:f6:8d:7f:
36:4f:8d:82:39:dc:bf:7d:9d:36:3d:55:ae:7e:b0:
4e:ae:46:d2:73:63:a8:99:23:58:c1:e2:57:68:e8:
f2:71:04:bb:bc:3c:ab:97:d9:ed:b5:06:54:fc:7a:
72:b5:42:0f:66:33:b8:e9:7f:ac:22:d6:83:59:b7:
52:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E9:B8:89:E7:EA:12:CF:CB:E3:9C:0D:23:26:80:FE:98:72:DD:28
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/c-m4iefqEs_L45wNIyaA_phy3Sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.174.0/23
171.22.146.0/23
185.149.15.0/24
185.235.71.0/24
Signature Algorithm: sha256WithRSAEncryption
81:71:34:9f:32:42:7b:db:5e:a6:4c:ba:04:b0:7a:30:48:72:
a3:44:92:e9:6e:de:6c:c8:06:c5:5b:01:90:5c:1b:cf:1a:8a:
80:a3:c7:1f:0b:a4:54:d8:44:6a:de:c7:bf:7e:d9:ed:1a:a2:
32:e2:20:3a:bd:c3:30:3a:5c:d1:cc:11:27:d4:d9:78:d7:ca:
f5:74:e8:36:69:d2:04:f4:d5:93:5e:20:96:4d:ef:a7:26:9a:
28:5b:a7:fe:45:c9:f2:07:7a:8a:bf:9d:a6:76:61:ce:7d:6f:
36:bd:30:25:31:be:ae:c4:9b:c9:b0:09:df:10:a6:98:37:3b:
a8:4c:ef:06:c5:e9:bc:20:f6:36:ef:e5:5e:c2:31:15:e7:47:
e3:c5:f8:d5:5e:f1:ce:d4:38:1b:88:fb:60:84:70:4f:e3:bf:
6e:5e:a1:f9:7f:be:3c:cb:42:2a:0f:1b:f5:2e:94:0f:5a:be:
c1:0c:88:ce:76:21:2c:18:2a:56:39:1f:ab:27:ed:ed:4a:fa:
cf:be:37:be:63:7a:ff:26:00:01:2e:d8:80:11:7e:ea:e5:60:
59:a8:5d:90:d4:26:52:db:7b:30:78:5b:b9:95:4d:aa:85:30:
11:9a:bf:35:be:ca:e2:49:e9:df:20:2c:49:eb:96:f6:6c:cf:
2d:b1:1b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:42 2023 by rpki-client on console-ams.rpki-client.org