Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/fMdi68TQurOCXseFZWG62gsTOpY.roa
File: fMdi68TQurOCXseFZWG62gsTOpY.roa (raw, json)
Hash identifier: ZN/74Ttoof7rxXpIAnFvO01xI+/QqZJW+blrUVPhOZg=
Subject key identifier: 7C:C7:62:EB:C4:D0:BA:B3:82:5E:C7:85:65:61:BA:DA:0B:13:3A:96
Certificate issuer: /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Certificate serial: 01843CAF92B3035B2C0A867D7BEA114E1F27
Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/fMdi68TQurOCXseFZWG62gsTOpY.roa
Signing time: Thu 03 Nov 2022 08:50:50 +0000
ROA not before: Thu 03 Nov 2022 08:50:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25144
IP address blocks: 31.223.128.0/19 maxlen: 19
31.223.128.0/21 maxlen: 21
31.223.136.0/21 maxlen: 21
31.223.144.0/21 maxlen: 21
217.24.128.0/20 maxlen: 20
94.250.64.0/18 maxlen: 18
46.239.0.0/18 maxlen: 18
31.223.152.0/21 maxlen: 21
185.35.156.0/22 maxlen: 22
81.93.66.0/24 maxlen: 24
81.93.67.0/24 maxlen: 24
81.93.69.0/24 maxlen: 24
81.93.73.0/24 maxlen: 24
81.93.84.0/24 maxlen: 24
89.111.225.0/24 maxlen: 24
89.111.224.0/19 maxlen: 19
89.111.226.0/24 maxlen: 24
81.93.86.0/24 maxlen: 24
81.93.91.0/24 maxlen: 24
89.111.227.0/24 maxlen: 24
94.250.0.0/18 maxlen: 18
89.111.231.0/24 maxlen: 24
81.93.92.0/24 maxlen: 24
89.111.235.0/24 maxlen: 24
89.111.236.0/24 maxlen: 24
89.111.240.0/24 maxlen: 24
89.111.244.0/22 maxlen: 22
89.111.248.0/22 maxlen: 22
109.165.128.0/17 maxlen: 17
62.101.144.0/20 maxlen: 20
89.111.192.0/24 maxlen: 24
89.111.192.0/19 maxlen: 19
81.93.64.0/19 maxlen: 19
89.111.192.0/18 maxlen: 18
2a00:cb00::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3c:af:92:b3:03:5b:2c:0a:86:7d:7b:ea:11:4e:1f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Validity
Not Before: Nov 3 08:50:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7cc762ebc4d0bab3825ec7856561bada0b133a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:39:f0:b3:a3:11:f6:23:61:f4:ae:f7:26:8f:
2e:eb:1c:7b:16:04:5c:03:d9:25:3a:02:be:0b:cc:
f8:d1:14:e9:b6:71:77:97:0d:a7:39:93:84:19:61:
7e:c9:9d:f0:f3:53:70:7d:15:c7:2b:ba:8b:05:13:
f4:5e:b9:b3:c4:79:c7:47:47:37:48:13:44:2a:b9:
fc:e3:50:d7:19:a9:68:8a:a9:10:9a:c2:3b:dc:ea:
99:c9:2d:c3:07:9d:21:31:3d:96:c8:f1:34:0c:c3:
1b:cd:a3:73:01:ad:89:a7:3c:53:45:4b:66:79:df:
1e:5a:0a:3b:e6:7f:1c:56:e6:b9:70:55:de:59:ff:
cb:e6:31:be:b9:6a:2c:44:7e:d7:2b:1e:e2:e4:9c:
87:a1:8d:eb:69:1b:32:81:76:aa:74:32:dc:9e:46:
57:c8:31:a2:b5:02:6a:0a:c8:e4:d2:e6:4a:16:05:
e3:ad:6d:ad:d3:d1:7e:46:81:07:ec:12:a3:1f:62:
bc:06:d9:a2:7c:77:74:4f:e8:6e:da:3a:8c:f3:43:
ee:83:24:de:81:ba:f7:4a:2c:ec:c4:c2:a1:c9:a2:
92:49:8c:d5:ed:f5:40:9c:67:00:05:c4:06:ef:16:
8c:01:14:c4:de:6f:4e:cd:d1:d4:4d:05:18:28:7c:
69:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C7:62:EB:C4:D0:BA:B3:82:5E:C7:85:65:61:BA:DA:0B:13:3A:96
X509v3 Authority Key Identifier:
keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/fMdi68TQurOCXseFZWG62gsTOpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.223.128.0/19
46.239.0.0/18
62.101.144.0/20
81.93.64.0/19
89.111.192.0/18
94.250.0.0/17
109.165.128.0/17
185.35.156.0/22
217.24.128.0/20
IPv6:
2a00:cb00::/32
Signature Algorithm: sha256WithRSAEncryption
b1:e4:39:63:18:6b:61:b6:47:78:dc:19:cd:ae:fc:21:da:79:
e6:6c:49:8c:13:c4:d2:2a:41:54:e1:a5:e9:65:a9:53:ca:3a:
34:2e:68:c4:5a:c6:bf:1a:77:cd:40:5b:2f:36:16:06:4c:be:
48:0a:81:11:26:f7:ee:aa:27:b5:ab:7e:65:de:36:34:49:29:
b0:91:dc:17:d2:b4:ad:03:5d:df:25:f6:49:f9:5c:1c:c6:16:
20:4d:8a:ce:9a:b6:b9:7d:33:c4:90:dd:ed:98:1d:a4:90:79:
db:32:24:a9:4e:35:82:27:55:40:fd:d8:40:c8:4a:0d:bb:a8:
69:b4:5e:8d:04:a9:69:e4:53:1d:c9:76:85:dc:87:22:fc:f6:
79:3d:18:c4:f3:85:63:57:5b:f7:00:6a:e6:96:6f:98:09:39:
84:e7:03:cf:3c:c9:6d:4a:c7:dd:ae:68:9e:7f:9a:10:87:48:
92:76:1d:4f:de:0c:46:fd:fb:ef:26:e4:0e:d4:03:0c:30:3f:
b3:84:17:5b:6d:60:ec:96:06:fa:81:dc:fe:81:2f:69:c6:69:
61:94:92:8c:88:2e:1e:8b:11:2f:ca:68:23:5c:f4:2b:c4:9f:
e0:a6:15:e8:94:e7:96:3b:4e:76:34:c6:72:72:b1:ca:ba:30:
d2:4d:5e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:28 2024 by rpki-client on console-ams.rpki-client.org