Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/iUXMSW-5q0-IUlraD5OlQNw0kto.roa
File: iUXMSW-5q0-IUlraD5OlQNw0kto.roa (raw, json)
Hash identifier: 1AXbeO5FCm+huIDCFR3N0Cr05E4l62egCq7OU5S6m0I=
Subject key identifier: 89:45:CC:49:6F:B9:AB:4F:88:52:5A:DA:0F:93:A5:40:DC:34:92:DA
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 0181D24F699C173B511DDB815D39504556CB
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/iUXMSW-5q0-IUlraD5OlQNw0kto.roa
Signing time: Wed 06 Jul 2022 07:00:28 +0000
ROA not before: Wed 06 Jul 2022 07:00:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43395
IP address blocks: 151.238.136.0/21 maxlen: 21
151.238.144.0/23 maxlen: 23
31.58.238.0/24 maxlen: 24
31.58.240.0/24 maxlen: 24
31.58.236.0/24 maxlen: 24
31.58.239.0/24 maxlen: 24
31.58.237.0/24 maxlen: 24
94.182.57.0/24 maxlen: 24
151.247.232.0/22 maxlen: 22
94.182.56.0/22 maxlen: 22
151.247.228.0/22 maxlen: 22
94.182.56.0/24 maxlen: 24
94.182.58.0/24 maxlen: 24
94.182.59.0/24 maxlen: 24
94.182.61.0/24 maxlen: 24
94.182.63.0/24 maxlen: 24
151.247.236.0/22 maxlen: 22
94.182.60.0/22 maxlen: 22
151.247.240.0/24 maxlen: 24
94.182.60.0/24 maxlen: 24
94.182.62.0/24 maxlen: 24
151.247.241.0/24 maxlen: 24
31.58.246.0/24 maxlen: 24
31.58.242.0/24 maxlen: 24
31.58.244.0/24 maxlen: 24
31.58.245.0/24 maxlen: 24
31.58.241.0/24 maxlen: 24
31.58.243.0/24 maxlen: 24
31.58.252.0/24 maxlen: 24
31.58.248.0/24 maxlen: 24
31.58.250.0/24 maxlen: 24
31.58.247.0/24 maxlen: 24
31.58.253.0/24 maxlen: 24
31.58.249.0/24 maxlen: 24
31.58.251.0/24 maxlen: 24
31.59.3.0/24 maxlen: 24
31.58.255.0/24 maxlen: 24
31.59.0.0/23 maxlen: 23
31.58.254.0/24 maxlen: 24
31.59.4.0/24 maxlen: 24
31.59.5.0/24 maxlen: 24
31.59.9.0/24 maxlen: 24
31.59.8.0/24 maxlen: 24
31.59.13.0/24 maxlen: 24
31.59.15.0/24 maxlen: 24
31.59.14.0/24 maxlen: 24
31.59.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d2:4f:69:9c:17:3b:51:1d:db:81:5d:39:50:45:56:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jul 6 07:00:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8945cc496fb9ab4f88525ada0f93a540dc3492da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2e:d5:35:1f:e3:cb:ca:fb:5b:c9:94:ca:a4:
17:05:78:ed:aa:f6:91:15:ec:9c:54:b9:e2:5f:78:
90:37:78:27:ff:fe:f5:7d:fa:2b:54:9d:3c:f8:c7:
0f:cb:4e:0b:b9:a9:54:78:9f:7c:58:1d:a7:54:f4:
c8:bd:24:5b:24:02:fd:b0:2e:fc:33:a0:81:76:c2:
0a:ef:27:6d:88:5d:5a:e5:dc:07:1c:69:cb:cd:9c:
02:e6:73:06:d1:59:92:c7:e4:39:1b:21:e2:c4:2c:
ff:ec:24:bc:04:3f:c7:e5:99:be:79:81:bd:89:c8:
70:61:fa:78:aa:62:31:b6:6a:4b:4d:59:e6:fc:d0:
49:76:3e:8b:ce:2f:1c:71:75:16:2a:93:96:42:49:
64:1c:61:ac:90:0c:12:90:83:f2:c5:d9:8c:7c:cf:
1b:a0:da:e8:9e:eb:23:fd:0f:5f:76:b3:23:97:18:
42:0b:55:06:24:9a:71:31:1a:66:bb:e9:eb:2d:81:
9f:82:75:d1:f8:86:80:9b:a6:78:f4:53:8e:c9:f3:
e8:99:62:95:5b:93:eb:c8:a9:c1:21:d8:d5:46:b4:
2c:16:00:e9:ac:07:e8:23:3b:15:6d:1a:96:f5:35:
46:7a:8e:0e:c8:d4:50:4f:f9:c5:e8:04:22:95:7c:
c5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:45:CC:49:6F:B9:AB:4F:88:52:5A:DA:0F:93:A5:40:DC:34:92:DA
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/iUXMSW-5q0-IUlraD5OlQNw0kto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.236.0-31.59.1.255
31.59.3.0-31.59.5.255
31.59.8.0/23
31.59.12.0/22
94.182.56.0/21
151.238.136.0-151.238.145.255
151.247.228.0-151.247.241.255
Signature Algorithm: sha256WithRSAEncryption
74:40:cb:7a:67:b2:df:cc:e9:f8:d6:c2:7b:ca:a1:80:e4:c9:
d2:f5:2a:09:f6:72:a1:98:72:1f:00:ff:0c:95:1c:ac:c1:31:
bf:8d:82:a8:76:8b:54:38:8e:49:03:1a:af:21:cd:7d:4a:0a:
4f:d3:5c:c1:73:24:cf:3a:8b:35:3c:92:b5:42:4e:db:cb:c7:
8e:a6:14:a9:4a:6d:f8:c5:35:09:56:10:7c:55:c6:ac:22:ca:
4b:62:25:34:0a:79:31:b6:b7:a0:cc:88:f3:d4:39:65:c7:e8:
4a:0a:f5:2a:ab:db:12:1c:94:4f:5c:ff:b0:95:02:ba:e5:3b:
70:58:a2:0f:f6:e1:fe:95:de:7a:bf:91:2e:22:24:a8:6a:74:
27:00:92:28:15:37:1b:ef:8d:be:d4:5d:2b:c2:04:3e:1a:fb:
5b:dc:da:df:85:29:53:71:1b:f1:2c:04:e1:25:93:b9:7e:01:
23:56:5f:9b:5a:5d:66:3f:69:5b:10:f6:49:b2:28:14:8a:b8:
2f:83:e4:17:63:d2:22:ac:0b:2f:b2:4c:b0:37:ea:19:9b:ac:
01:ee:0b:c9:9f:14:cf:6d:04:c6:cd:fe:77:7a:ff:04:c6:f7:
0c:29:5d:8c:75:f5:e5:0d:80:60:ed:4f:b2:01:f4:71:84:b0:
c4:51:4d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:31 2023 by rpki-client on console-ams.rpki-client.org