Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/rPeftxreGkaRLxi8RhcNnBf_NnI.roa
File: rPeftxreGkaRLxi8RhcNnBf_NnI.roa (raw, json)
Hash identifier: mB0p7ccpZu4OW6CxbduwygHuz2CjK4/pQeK4rr7bLbI=
Subject key identifier: AC:F7:9F:B7:1A:DE:1A:46:91:2F:18:BC:46:17:0D:9C:17:FF:36:72
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 13F66011
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/rPeftxreGkaRLxi8RhcNnBf_NnI.roa
Signing time: Mon 28 Feb 2022 13:34:25 +0000
ROA not before: Mon 28 Feb 2022 13:34:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9516
IP address blocks: 185.215.247.0/24 maxlen: 24
185.212.60.0/22 maxlen: 24
31.25.88.0/23 maxlen: 24
185.129.110.0/24 maxlen: 24
185.217.108.0/22 maxlen: 24
212.107.28.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334913553 (0x13f66011)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Feb 28 13:34:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=acf79fb71ade1a46912f18bc46170d9c17ff3672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a8:4a:08:f6:7c:b8:eb:5b:d4:35:d9:9a:c8:
7a:f1:bd:d4:14:c3:b6:68:5d:a2:49:e5:7e:97:01:
7a:58:00:61:a2:89:ec:64:b8:f2:51:12:ad:a8:77:
f1:6a:7b:79:77:34:82:f1:cf:85:09:69:9b:01:55:
a5:5e:fc:9f:68:c9:51:f9:f2:52:9e:4d:58:8e:27:
3f:a8:61:50:ac:35:4c:40:61:52:4b:dc:c2:37:55:
89:e8:45:bf:87:7d:b4:ee:14:ca:59:a5:9a:c8:9f:
16:75:dd:cd:b6:5a:e3:62:77:7b:12:7a:9c:5f:8c:
47:fd:7c:2e:b6:31:c5:70:da:7f:fc:39:56:b6:eb:
b8:dc:d7:c5:dd:8c:2d:83:c9:24:e8:01:c2:6b:43:
11:d2:ef:21:0d:a2:14:de:21:3f:1f:5f:89:ef:ad:
c1:3f:22:0b:30:23:0a:bb:d5:92:96:3f:97:57:c3:
7e:84:ac:b0:c7:c4:65:1c:d8:91:83:48:55:fc:80:
4f:2d:93:7f:a2:a5:0b:d8:cd:53:35:e1:1f:fd:fa:
19:09:5c:a8:c8:c4:cc:1f:09:56:5a:5d:ae:97:d3:
77:b2:62:6f:51:eb:a3:33:20:e2:4b:71:6a:0d:9c:
e5:1f:76:20:4b:cf:66:e0:c3:bf:dc:f0:3b:17:66:
b8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F7:9F:B7:1A:DE:1A:46:91:2F:18:BC:46:17:0D:9C:17:FF:36:72
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/rPeftxreGkaRLxi8RhcNnBf_NnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.88.0/23
185.129.110.0/24
185.212.60.0/22
185.215.247.0/24
185.217.108.0/22
212.107.28.0/22
Signature Algorithm: sha256WithRSAEncryption
c5:f5:4b:f8:09:ba:30:20:c1:c3:40:10:25:61:47:d9:ff:29:
ad:73:a9:23:fd:7b:3d:f2:db:a2:3b:a8:07:54:ed:09:b6:08:
f6:fc:8a:31:81:94:23:b8:73:1a:2b:b4:8b:02:67:7d:47:81:
e5:33:01:86:a1:f7:a2:b5:f0:92:92:cc:8c:71:75:22:65:23:
d5:ed:26:a8:64:33:3b:be:e2:8e:1b:dc:c9:50:c0:b5:82:e4:
b7:07:5f:78:81:8f:d0:c0:b2:ee:12:a9:ec:9d:48:10:b2:c6:
0c:90:9f:e6:36:78:4d:5f:44:56:0e:25:f4:93:b0:8b:1a:ff:
8e:2e:9a:86:e8:5c:40:e2:52:f2:11:64:58:40:91:d9:ca:a4:
72:1f:8b:0b:2c:33:b2:8c:0f:2a:79:5e:06:42:0e:f4:cb:a3:
1c:d4:6c:67:ed:fd:49:bb:d4:e4:ba:c2:a9:9d:0d:f1:7d:4a:
48:a0:9f:11:92:1e:97:18:15:f6:b4:b3:c5:e4:fa:fd:07:ef:
1d:83:d4:ee:5e:31:13:7b:4d:6f:04:17:82:fc:b5:fd:17:19:
6f:45:48:f7:c5:a9:ba:aa:82:71:16:66:d2:c0:7e:76:4f:94:
65:87:5c:a8:d7:2d:e9:c3:e1:80:f4:98:02:3c:09:37:bd:e9:
3f:bd:67:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:25 2023 by rpki-client on console-ams.rpki-client.org