Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/3nKmpXgr7fOtyXW9CBtfil-wSvY.roa
File: 3nKmpXgr7fOtyXW9CBtfil-wSvY.roa (raw, json)
Hash identifier: KMwGMuG2ODnoRH0J+bZGHJBO/Xx71BVITTS2T9Bef8Y=
Subject key identifier: DE:72:A6:A5:78:2B:ED:F3:AD:C9:75:BD:08:1B:5F:8A:5F:B0:4A:F6
Certificate issuer: /CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Certificate serial: 04E162C9
Authority key identifier: C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/3nKmpXgr7fOtyXW9CBtfil-wSvY.roa
Signing time: Sat 01 Jan 2022 03:53:27 +0000
ROA not before: Sat 01 Jan 2022 03:53:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209924
IP address blocks: 31.222.53.0/24 maxlen: 24
31.222.54.0/24 maxlen: 24
31.222.52.0/24 maxlen: 24
31.222.52.0/23 maxlen: 23
93.191.194.0/24 maxlen: 24
93.191.195.0/24 maxlen: 24
93.191.197.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81879753 (0x4e162c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Validity
Not Before: Jan 1 03:53:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de72a6a5782bedf3adc975bd081b5f8a5fb04af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0f:4c:d5:69:f4:a6:42:7f:17:fc:5f:44:9a:
68:14:7e:9e:64:30:bd:b1:ba:6f:e2:c5:bf:14:15:
b7:b8:11:02:ef:c8:2b:3c:d2:a3:fa:9a:8a:de:0b:
a8:e1:b8:74:ec:f9:58:d3:a5:a7:1c:48:a0:52:c8:
00:91:7a:c7:cb:bd:86:30:f2:21:49:23:0a:09:fa:
ed:17:a3:58:64:62:db:b2:c8:f6:93:22:75:d6:7f:
72:c9:51:2b:e1:30:20:b7:a2:bc:57:d0:bb:a8:a6:
f7:8c:8e:07:bc:c0:a9:7d:cb:94:7e:8b:5e:e3:0b:
f6:a6:b8:9a:74:87:c0:eb:4c:bc:3c:5e:c5:b9:3c:
3e:7f:b2:fc:54:a9:c1:15:3c:ae:b9:2d:54:fb:eb:
ac:52:4c:74:8e:0f:3c:af:70:5f:4c:0e:2f:5c:c9:
22:e8:d3:b6:cf:b4:2a:d1:e9:30:96:54:9b:ec:9a:
29:34:d6:28:a5:4d:48:0e:b9:72:24:66:ce:f7:84:
97:d8:0a:c4:6b:72:22:e4:a4:13:b1:4d:e4:6e:dc:
08:5f:5d:03:dd:8d:e9:66:94:e5:36:0c:90:46:d0:
00:10:75:a7:b1:5a:21:eb:5c:4a:3d:92:cc:20:4e:
30:66:3c:eb:4e:fe:b5:72:6d:63:3b:42:a8:58:23:
0d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:72:A6:A5:78:2B:ED:F3:AD:C9:75:BD:08:1B:5F:8A:5F:B0:4A:F6
X509v3 Authority Key Identifier:
keyid:C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/3nKmpXgr7fOtyXW9CBtfil-wSvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.52.0-31.222.54.255
93.191.194.0/23
93.191.197.0/24
Signature Algorithm: sha256WithRSAEncryption
94:c8:cc:c5:74:ff:33:24:3e:b7:02:5d:cf:e1:0f:9a:cf:44:
f6:9f:ae:80:42:77:09:7a:9f:af:83:9d:3e:e8:40:29:cc:37:
05:3b:ac:08:54:2e:d3:e3:e3:da:51:af:a8:f5:a0:fe:fa:88:
5d:f3:7a:21:d7:8f:f1:2b:64:d0:60:8a:5d:c2:b5:32:1f:16:
f3:91:5f:51:c3:d4:34:5c:1e:22:4e:f5:b5:76:44:26:0c:98:
27:0d:88:f0:b0:3e:42:b9:54:39:cf:50:71:a9:b9:5b:32:44:
a6:fc:71:a1:bb:4b:95:0a:3d:57:d2:3b:a1:e3:b9:6d:73:78:
ea:e2:82:0d:7e:75:64:12:18:e3:79:2b:9d:de:bc:85:ff:fe:
22:cf:41:d8:1c:89:59:a4:ef:1b:38:fe:c3:1a:a9:8a:87:3a:
f6:c6:6d:fd:87:d1:f6:86:88:77:b6:ec:63:60:9c:9d:b3:8d:
17:58:69:cb:e0:93:1b:00:b4:c1:f8:e8:5f:94:f3:c9:62:a5:
c8:6d:fa:76:32:0b:96:2e:fe:9f:3d:16:27:ba:b6:b1:11:e1:
52:04:75:5c:83:1c:83:5d:84:08:fc:b5:6b:c7:9e:66:a5:19:
54:a1:02:f6:62:ba:d1:20:e9:73:bb:16:69:7f:eb:92:0f:8c:
37:89:55:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:22 2023 by rpki-client on console-ams.rpki-client.org