Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/Gt658n6DfKHwbMC-6LnsbIx68-k.roa
File: Gt658n6DfKHwbMC-6LnsbIx68-k.roa (raw, json)
Hash identifier: mEL/r68kgzQaCQJKksbAziGb1Ow/YmikKRay2iFVh9c=
Subject key identifier: 1A:DE:B9:F2:7E:83:7C:A1:F0:6C:C0:BE:E8:B9:EC:6C:8C:7A:F3:E9
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 0E6C39CE
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/Gt658n6DfKHwbMC-6LnsbIx68-k.roa
Signing time: Fri 06 May 2022 11:24:51 +0000
ROA not before: Fri 06 May 2022 11:24:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34549
IP address blocks: 31.133.84.0/22 maxlen: 22
176.103.228.0/22 maxlen: 22
31.133.92.0/22 maxlen: 22
176.103.236.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 241973710 (0xe6c39ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: May 6 11:24:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1adeb9f27e837ca1f06cc0bee8b9ec6c8c7af3e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ee:45:af:20:e3:13:7a:b3:ff:a2:23:bd:05:
24:34:56:05:46:7e:e2:8c:6a:c9:9a:46:cc:71:1a:
ae:20:39:d3:fe:1f:f7:38:de:78:16:a0:fa:c8:06:
7c:07:cb:5d:21:bf:83:48:09:46:aa:c7:95:3c:3d:
28:a7:5c:88:71:69:04:da:14:2d:63:a5:e3:d6:d8:
0d:5e:ac:88:64:16:36:47:56:15:80:0b:ec:4a:d8:
4f:82:46:1f:26:45:e6:da:de:6b:6b:20:f5:8e:43:
11:8b:70:c6:17:3a:07:a7:e3:1d:4e:3f:8d:da:b4:
58:80:c5:59:23:9d:8c:f8:4e:68:e1:d7:73:1d:b8:
37:f6:81:9d:7f:80:a9:ea:c7:72:69:77:64:d1:64:
58:87:d5:e2:5e:7d:1c:4c:12:0e:33:07:3a:97:45:
aa:6a:80:ce:57:f4:bf:d4:1d:e4:ba:3f:7a:10:95:
92:91:0a:73:e5:54:48:0f:1d:19:16:da:7a:32:23:
50:7f:b2:0d:6a:91:6a:53:b5:57:97:d4:ec:cc:a9:
67:b2:4b:c5:6f:f7:61:1d:bc:fe:bc:bf:4f:7f:33:
a0:91:61:b9:41:71:47:e0:c3:1c:36:7a:10:b3:8e:
0e:76:1a:e6:08:8f:27:57:a3:d7:39:7e:bc:45:e9:
52:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DE:B9:F2:7E:83:7C:A1:F0:6C:C0:BE:E8:B9:EC:6C:8C:7A:F3:E9
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/Gt658n6DfKHwbMC-6LnsbIx68-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.84.0/22
31.133.92.0/22
176.103.228.0/22
176.103.236.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:62:84:16:be:54:56:53:fd:c4:27:5d:c2:88:ed:c2:e1:91:
9a:b8:cb:85:e7:32:ef:1d:68:f4:c9:83:2f:0b:fe:a1:a0:a3:
71:29:8a:54:11:04:59:d2:d9:ce:9a:7d:40:24:77:96:90:b9:
00:fd:e9:08:2f:23:f1:bd:7a:18:fa:33:b8:48:29:bc:16:55:
3d:e1:6e:62:44:7e:ae:b6:01:d0:9f:59:05:ba:58:ba:a4:b5:
92:08:73:a5:d5:07:07:7a:9c:35:ea:54:d2:96:b2:ee:a2:bd:
91:53:ba:63:84:69:3d:7e:a4:24:c1:84:9b:7e:89:b4:1c:29:
34:f1:02:e3:30:93:c2:df:f9:10:fe:9d:d5:2f:a0:54:2c:3a:
96:12:f3:cc:ce:04:27:e4:61:65:d6:2f:3d:cf:c1:a1:ac:b9:
e7:b9:47:c2:76:50:cd:be:00:c3:49:25:80:f0:ac:01:e6:f1:
4c:bb:e1:70:7b:5d:09:1b:c8:a8:2e:cc:ee:8e:5b:c7:35:59:
ac:a3:74:38:46:70:49:51:4c:e5:f8:84:f9:f3:b3:30:78:08:
d3:57:f6:0b:1f:32:97:90:29:72:a2:1a:fc:49:17:3d:03:1c:
4d:ae:34:4f:e6:44:3a:2a:d4:09:33:d6:26:f5:eb:96:c7:ff:
9c:8e:59:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:45 2023 by rpki-client on console-ams.rpki-client.org