Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/FXYmugHty5srGksbyu9gVIg_21c.roa
File: FXYmugHty5srGksbyu9gVIg_21c.roa (raw, json)
Hash identifier: OnbqzDhd1Rz94tLKXa7ITM5jPa/CRYnsRfZ+xkoq26o=
Subject key identifier: 15:76:26:BA:01:ED:CB:9B:2B:1A:4B:1B:CA:EF:60:54:88:3F:DB:57
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 01852531704BFD4D2FCF40073329A65E478C
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/FXYmugHty5srGksbyu9gVIg_21c.roa
Signing time: Sun 18 Dec 2022 12:24:35 +0000
ROA not before: Sun 18 Dec 2022 12:24:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205647
IP address blocks: 151.240.80.0/21 maxlen: 21
31.56.116.0/24 maxlen: 24
94.182.206.0/24 maxlen: 24
94.182.204.0/24 maxlen: 24
94.182.204.0/22 maxlen: 22
94.182.205.0/24 maxlen: 24
94.182.207.0/24 maxlen: 24
94.182.217.0/24 maxlen: 24
94.182.226.0/24 maxlen: 24
94.182.228.0/22 maxlen: 22
151.241.224.0/21 maxlen: 21
151.240.168.0/22 maxlen: 22
151.240.192.0/21 maxlen: 21
151.247.216.0/21 maxlen: 21
94.182.41.0/24 maxlen: 24
151.247.214.0/23 maxlen: 23
151.247.224.0/22 maxlen: 22
94.182.72.0/21 maxlen: 21
151.247.248.0/22 maxlen: 22
85.15.49.0/24 maxlen: 24
85.15.48.0/24 maxlen: 24
151.240.240.0/21 maxlen: 21
31.59.12.0/22 maxlen: 22
94.182.8.0/23 maxlen: 23
94.182.12.0/23 maxlen: 23
31.56.64.0/19 maxlen: 19
31.56.96.0/20 maxlen: 20
31.56.0.0/18 maxlen: 18
94.182.116.0/22 maxlen: 22
94.182.114.0/23 maxlen: 23
94.182.120.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:25:31:70:4b:fd:4d:2f:cf:40:07:33:29:a6:5e:47:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Dec 18 12:24:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=157626ba01edcb9b2b1a4b1bcaef6054883fdb57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:93:27:ab:4d:04:73:d7:db:8c:df:76:25:af:
3f:96:64:d7:4a:bb:b7:dd:57:ed:a3:85:c0:7b:fd:
13:c8:83:2d:85:0c:fd:0c:2f:ab:2e:15:7e:03:b9:
a8:7e:92:a0:d5:fd:87:10:8e:4b:89:57:8a:16:5e:
6b:33:d7:5d:b8:47:0a:0e:28:16:a2:5e:1b:d0:89:
ca:c1:fd:85:70:c2:cc:70:ce:07:09:c1:6a:b8:33:
f7:5a:84:3c:f9:30:99:78:4e:e9:ae:b7:76:b1:5d:
0b:d0:37:e2:26:ab:bb:99:69:27:d6:66:d2:5a:e1:
23:44:e6:d0:0f:8b:1e:6a:72:a6:69:0a:44:62:23:
c3:43:d3:5d:fd:93:b5:84:3e:82:85:2c:60:5a:0d:
9c:cf:9a:b0:25:48:51:27:82:79:7f:09:e6:da:84:
13:76:1f:fc:32:8d:a7:40:89:7c:5b:a9:89:2e:85:
cc:8c:80:00:99:4c:f5:4f:d4:0f:93:d6:38:0e:4a:
97:94:4a:6c:d4:65:3f:d1:92:12:52:08:b2:ab:f3:
eb:c6:c6:f8:e4:ac:14:13:9f:36:4b:cf:fd:93:a3:
15:34:ac:93:cc:53:cc:3f:be:1e:10:a2:c2:82:b5:
af:39:27:ab:54:e3:86:88:6b:7b:8d:e9:d9:81:20:
b8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:76:26:BA:01:ED:CB:9B:2B:1A:4B:1B:CA:EF:60:54:88:3F:DB:57
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/FXYmugHty5srGksbyu9gVIg_21c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.0.0-31.56.111.255
31.56.116.0/24
31.59.12.0/22
85.15.48.0/23
94.182.8.0/23
94.182.12.0/23
94.182.41.0/24
94.182.72.0/21
94.182.114.0-94.182.127.255
94.182.204.0/22
94.182.217.0/24
94.182.226.0/24
94.182.228.0/22
151.240.80.0/21
151.240.168.0/22
151.240.192.0/21
151.240.240.0/21
151.241.224.0/21
151.247.214.0-151.247.227.255
151.247.248.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:c8:1c:c2:6d:72:65:85:f9:e0:b8:d7:77:65:a9:f3:0c:61:
b2:66:1f:60:06:c0:c9:5b:25:4f:a4:6b:75:7c:d8:29:81:3b:
86:d6:3f:14:fe:2d:2a:1c:9d:42:a5:49:e3:2a:58:dc:7f:21:
aa:05:d2:e5:9e:87:8a:b1:d5:4f:e7:65:0a:dd:2d:e5:93:1b:
b5:0c:a0:8f:d5:f9:c5:ef:f1:1c:0e:38:ed:2d:3b:da:31:80:
0e:7d:d9:c7:4e:45:9a:f7:73:bb:69:cc:a7:c6:44:8a:a4:a7:
e6:f3:25:e2:04:a9:12:8c:b9:42:f6:27:46:48:6a:ff:64:ba:
dd:8c:ca:eb:d2:96:ef:10:5f:5f:d4:c8:1e:11:bc:3c:a6:47:
d7:41:4e:1f:fc:65:c4:cd:56:57:82:34:99:f5:3b:02:19:18:
da:59:25:7e:62:ae:d2:7b:4b:35:87:3f:d4:1f:35:e8:d4:57:
c3:6b:a6:62:7a:51:ba:5a:25:19:bf:a4:04:d6:38:32:50:38:
73:09:a8:d8:da:59:15:8f:70:40:a7:19:6f:ac:6f:de:05:9d:
78:ee:90:0b:7e:ac:dd:45:47:55:79:66:4d:7e:8f:0b:c8:7b:
da:15:8f:29:fe:d6:92:8f:41:e1:7e:08:ef:14:c4:2f:dc:15:
6f:b2:79:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:52 2023 by rpki-client on console-fra.rpki-client.org