Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/f6PQmRRomdjAHy6siPynT52JGB4.roa
File: f6PQmRRomdjAHy6siPynT52JGB4.roa (raw, json)
Hash identifier: pVcxCNXevGKptRI9QImPo+MUm/9NpQtQNpuETFGkswQ=
Subject key identifier: 7F:A3:D0:99:14:68:99:D8:C0:1F:2E:AC:88:FC:A7:4F:9D:89:18:1E
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 0181D7C48177A50B4AB30676F16EC2E2105F
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/f6PQmRRomdjAHy6siPynT52JGB4.roa
Signing time: Thu 07 Jul 2022 08:26:28 +0000
ROA not before: Thu 07 Jul 2022 08:26:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 31.133.82.0/24 maxlen: 24
31.133.83.0/24 maxlen: 24
31.133.80.0/24 maxlen: 24
31.133.81.0/24 maxlen: 24
31.133.91.0/24 maxlen: 24
31.133.89.0/24 maxlen: 24
31.133.90.0/24 maxlen: 24
31.133.88.0/24 maxlen: 24
176.103.233.0/24 maxlen: 24
176.103.232.0/24 maxlen: 24
176.103.234.0/24 maxlen: 24
176.103.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d7:c4:81:77:a5:0b:4a:b3:06:76:f1:6e:c2:e2:10:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: Jul 7 08:26:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7fa3d099146899d8c01f2eac88fca74f9d89181e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cc:e1:46:5d:52:a8:d5:9e:48:fa:d0:bf:0c:
8b:2e:fe:0d:33:71:0a:79:7d:79:89:04:dc:0e:1b:
25:49:d2:03:4e:1f:de:a0:66:b0:f3:17:73:18:1f:
ae:0a:0d:70:25:06:d8:61:97:4e:3b:e3:e1:59:3c:
24:88:4e:82:2d:bc:84:ff:ae:62:d4:48:62:14:26:
d0:b9:76:e9:6e:bc:2c:39:19:51:e3:39:2b:ee:ff:
3c:22:c6:91:c9:6f:85:a7:a0:27:3d:6f:6e:84:8f:
6c:29:3d:8d:f8:71:02:bb:79:13:ed:39:da:05:95:
06:86:94:d1:a3:68:11:29:9b:b9:2c:6d:19:01:df:
87:56:6e:3c:37:8b:fa:3a:4c:46:2d:51:e6:02:40:
5f:77:54:36:e7:74:b6:62:d7:75:b6:46:ad:58:f0:
eb:aa:14:bd:e9:f9:55:20:da:bc:6f:21:25:e2:c8:
62:96:1a:5e:fb:bd:f0:04:d3:62:31:5e:83:5a:25:
a6:de:11:4f:1f:45:0d:11:b9:c0:6e:21:1a:26:40:
a3:d3:97:ec:b7:0e:ec:cf:29:6a:a2:e5:0b:e9:b4:
5f:eb:88:2a:96:2b:9a:cd:65:21:06:3c:6f:df:35:
a7:3c:43:48:d1:0e:59:17:6d:60:39:07:ad:17:5c:
9d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A3:D0:99:14:68:99:D8:C0:1F:2E:AC:88:FC:A7:4F:9D:89:18:1E
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/f6PQmRRomdjAHy6siPynT52JGB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.80.0/22
31.133.88.0/22
176.103.232.0/22
Signature Algorithm: sha256WithRSAEncryption
06:aa:08:12:00:cc:b9:bd:03:0f:17:91:20:af:28:27:95:4b:
53:27:8f:8e:e2:82:ba:1b:31:af:67:c5:7f:e1:6a:27:66:1f:
aa:ff:6f:6d:31:4c:88:17:eb:62:a8:a5:8c:bd:9e:d4:2c:b4:
8b:a8:eb:14:8c:56:e1:c3:e0:ca:aa:68:af:fd:e8:c4:93:79:
55:07:37:fa:31:77:0c:c0:7f:7c:62:ff:3f:de:63:45:d3:30:
63:0d:32:30:49:25:18:44:5f:d9:fe:96:1c:eb:db:bc:3f:f2:
20:ee:8b:a3:84:21:4e:5f:54:81:51:b8:89:4e:c7:66:03:13:
9c:fc:5e:8f:df:43:bc:7e:7b:c6:0e:41:c3:bc:36:42:a0:84:
5e:49:49:c7:af:03:12:3d:cc:ce:3c:dc:b1:25:0c:38:53:b3:
bb:55:59:9d:12:a5:60:e9:1e:c8:bf:e3:fb:58:ff:1a:78:3f:
ea:e0:79:99:92:f6:6f:c7:5f:0b:79:b4:2f:2e:0f:e9:d4:dc:
09:62:1e:d3:8e:f9:c6:61:f6:c9:d0:c5:1a:bc:f7:32:dc:16:
98:a3:e9:9a:d7:f1:be:04:de:43:50:94:e0:44:cf:2e:e7:8c:
6e:2a:df:c1:51:87:73:f1:f0:fd:54:03:fe:4f:10:e3:84:20:
a6:cb:45:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:03 2023 by rpki-client on console-fra.rpki-client.org