Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/vqd2oAQfihptitXN-dJRgmxXE3U.roa
File: vqd2oAQfihptitXN-dJRgmxXE3U.roa (raw, json)
Hash identifier: +tUXZEdiAgNjIgMZwg/WwUYeBxRuvJKT7JiKauliTlI=
Subject key identifier: BE:A7:76:A0:04:1F:8A:1A:6D:8A:D5:CD:F9:D2:51:82:6C:57:13:75
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 13331C81
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/vqd2oAQfihptitXN-dJRgmxXE3U.roa
Signing time: Sat 01 Jan 2022 04:03:01 +0000
ROA not before: Sat 01 Jan 2022 04:03:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59598
IP address blocks: 185.215.247.0/24 maxlen: 24
91.132.56.0/24 maxlen: 24
185.212.60.0/22 maxlen: 24
31.25.88.0/23 maxlen: 24
185.217.108.0/22 maxlen: 24
212.107.28.0/22 maxlen: 24
185.129.111.0/24 maxlen: 24
185.129.110.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 322116737 (0x13331c81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 1 04:03:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bea776a0041f8a1a6d8ad5cdf9d251826c571375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e4:97:41:e2:84:24:59:c9:12:79:aa:95:0e:
76:11:47:dd:8f:d9:42:55:7d:e4:da:f8:1f:f8:c1:
7e:d5:0d:b4:5b:bc:48:ce:bc:2c:76:41:31:dc:c8:
86:21:14:bc:5d:79:d3:3b:b8:be:ad:87:45:63:5c:
99:c2:b2:cb:d2:31:f7:d9:f1:36:70:8e:0c:d2:65:
5a:2a:9d:45:43:76:08:a9:bb:b5:4a:11:ce:78:f0:
da:63:30:7f:58:f7:6b:93:c8:52:a9:de:84:65:03:
cf:46:a6:24:9b:e9:df:68:46:8c:3c:4a:3f:5b:14:
1d:8d:39:8a:34:81:a2:3e:97:a4:cb:0e:c5:87:57:
4a:b4:56:49:8a:44:d6:dc:07:52:d3:8b:89:5c:53:
53:7e:f1:c9:71:ad:ce:38:00:3c:4f:ef:42:80:ab:
44:33:72:0b:37:d7:c3:1b:d9:3b:79:5b:a5:36:c7:
85:15:23:04:c3:33:a5:6c:11:9c:06:13:e5:f0:de:
10:a4:03:0f:3b:82:77:86:4e:f0:ac:1f:3b:8c:c7:
24:3a:98:51:bc:e9:21:fd:22:2a:a2:cf:9d:58:66:
b2:2f:93:60:52:24:bd:fa:6e:05:36:b8:87:35:4e:
49:9c:73:ce:d2:a1:a4:29:69:ce:8b:ac:89:bf:1d:
62:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A7:76:A0:04:1F:8A:1A:6D:8A:D5:CD:F9:D2:51:82:6C:57:13:75
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/vqd2oAQfihptitXN-dJRgmxXE3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.88.0/23
91.132.56.0/24
185.129.110.0/23
185.212.60.0/22
185.215.247.0/24
185.217.108.0/22
212.107.28.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:9f:6c:42:27:ed:7b:00:d5:d0:55:39:48:08:e1:f5:58:c4:
1b:c4:b2:e9:ce:7f:dc:1f:df:d5:2f:57:5a:c2:b2:f2:c7:d0:
d6:35:18:2f:e8:6a:e4:f1:da:b5:1c:64:4f:34:4e:09:ab:04:
72:f8:60:9a:8c:a8:e9:b2:8d:92:99:7d:f0:60:70:f5:3c:7e:
ea:6e:27:2c:71:f2:f3:4d:d3:bb:40:da:d1:b0:48:84:16:05:
fd:b7:6b:3a:99:b9:ea:fe:a0:2e:28:68:b4:54:ed:ee:3c:13:
1f:81:9b:87:1a:3c:28:a2:52:cf:67:df:47:75:6e:1c:f4:d4:
0b:b5:bd:33:26:c8:dd:c0:90:eb:9e:49:ed:96:57:8c:23:e7:
2b:7d:2e:90:52:27:c0:6f:94:56:b8:5d:43:57:c6:0b:95:aa:
19:19:dc:e1:65:52:82:a5:19:41:68:99:a6:64:db:8b:a9:05:
8b:2f:c5:4d:a5:9a:9e:1c:ff:70:40:8c:5a:0a:0e:cd:37:f7:
7e:2b:14:56:54:5c:34:f3:cb:c7:0c:8b:f5:6b:1a:93:48:df:
99:ce:df:e2:4a:4b:94:bc:6a:69:15:ba:a3:ba:aa:66:1b:c2:
e7:bc:e3:48:5d:3d:fb:95:9b:2d:59:19:2a:33:8f:11:75:2c:
31:6d:60:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:25 2023 by rpki-client on console-ams.rpki-client.org