Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/n1L9SJa6w4h_XgUqyfIiZ0FyRIY.roa
File: n1L9SJa6w4h_XgUqyfIiZ0FyRIY.roa (raw, json)
Hash identifier: h3Eqp+3wvF1Y/cIla9cdlcMOugxBdAUXXs/rpft8TzM=
Subject key identifier: 9F:52:FD:48:96:BA:C3:88:7F:5E:05:2A:C9:F2:22:67:41:72:44:86
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 0182A650E2F36CFABD370CB11AA108986993
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/n1L9SJa6w4h_XgUqyfIiZ0FyRIY.roa
Signing time: Tue 16 Aug 2022 11:01:35 +0000
ROA not before: Tue 16 Aug 2022 11:01:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43395
IP address blocks: 151.238.136.0/21 maxlen: 21
151.238.144.0/23 maxlen: 23
151.247.232.0/22 maxlen: 22
151.247.228.0/22 maxlen: 22
151.247.237.0/24 maxlen: 24
151.247.239.0/24 maxlen: 24
151.247.236.0/22 maxlen: 22
151.247.240.0/24 maxlen: 24
151.247.236.0/24 maxlen: 24
151.247.238.0/24 maxlen: 24
151.247.241.0/24 maxlen: 24
31.58.246.0/24 maxlen: 24
31.58.242.0/24 maxlen: 24
31.58.244.0/24 maxlen: 24
31.58.245.0/24 maxlen: 24
31.58.241.0/24 maxlen: 24
31.58.243.0/24 maxlen: 24
31.58.252.0/24 maxlen: 24
31.58.248.0/24 maxlen: 24
31.58.250.0/24 maxlen: 24
31.58.247.0/24 maxlen: 24
31.58.253.0/24 maxlen: 24
31.58.249.0/24 maxlen: 24
31.58.251.0/24 maxlen: 24
31.59.3.0/24 maxlen: 24
31.58.255.0/24 maxlen: 24
31.59.0.0/23 maxlen: 23
31.58.254.0/24 maxlen: 24
31.59.4.0/24 maxlen: 24
31.59.5.0/24 maxlen: 24
31.59.9.0/24 maxlen: 24
31.59.8.0/24 maxlen: 24
31.59.13.0/24 maxlen: 24
31.59.15.0/24 maxlen: 24
31.59.14.0/24 maxlen: 24
31.59.12.0/24 maxlen: 24
31.58.238.0/24 maxlen: 24
31.58.240.0/24 maxlen: 24
31.58.236.0/24 maxlen: 24
31.58.239.0/24 maxlen: 24
31.58.237.0/24 maxlen: 24
94.182.57.0/24 maxlen: 24
94.182.56.0/22 maxlen: 22
94.182.56.0/24 maxlen: 24
94.182.58.0/24 maxlen: 24
94.182.59.0/24 maxlen: 24
94.182.61.0/24 maxlen: 24
94.182.63.0/24 maxlen: 24
94.182.62.0/24 maxlen: 24
94.182.60.0/22 maxlen: 22
94.182.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a6:50:e2:f3:6c:fa:bd:37:0c:b1:1a:a1:08:98:69:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Aug 16 11:01:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f52fd4896bac3887f5e052ac9f2226741724486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9f:77:2c:57:2e:83:39:67:54:66:7f:86:06:
4f:60:af:0a:1e:17:5e:05:57:f3:1c:80:42:6a:8b:
86:54:37:de:21:73:d7:da:b3:df:5d:a9:7b:72:37:
27:21:7b:4f:31:b0:7a:92:46:0a:18:f6:d3:fb:84:
34:3c:60:79:de:46:ea:3a:1c:42:8d:82:76:c1:00:
a6:0c:83:a7:f3:5c:22:17:60:64:3b:50:c1:6f:26:
6c:2f:5e:dc:b6:05:9f:8f:eb:61:70:4b:29:17:70:
f2:79:1a:a6:b5:b9:fb:bb:9c:13:7d:30:8c:e0:79:
a3:7b:04:21:f7:e1:74:28:00:24:33:df:57:d3:30:
82:6a:5a:6e:82:91:33:ff:cc:27:13:20:af:1e:91:
52:03:12:83:e6:04:16:d0:2f:62:21:64:31:ff:8f:
a7:f3:b3:d1:76:66:c4:21:f1:cc:fb:e7:79:a8:4b:
35:2b:0f:a4:09:61:14:1e:73:7d:5e:10:5f:12:9d:
68:04:ec:e3:09:8f:e4:fe:c5:9e:eb:9e:86:86:81:
43:70:8c:78:6a:bf:e2:0b:fa:0d:7b:f2:21:50:56:
2d:97:78:2d:95:b6:1f:3e:4a:d7:58:20:29:22:27:
55:ae:5e:7c:f0:d4:f9:46:40:5c:a4:ae:b2:73:1c:
d3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:52:FD:48:96:BA:C3:88:7F:5E:05:2A:C9:F2:22:67:41:72:44:86
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/n1L9SJa6w4h_XgUqyfIiZ0FyRIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.236.0-31.59.1.255
31.59.3.0-31.59.5.255
31.59.8.0/23
31.59.12.0/22
94.182.56.0/21
151.238.136.0-151.238.145.255
151.247.228.0-151.247.241.255
Signature Algorithm: sha256WithRSAEncryption
2a:1e:ed:80:91:3f:06:8f:ae:49:79:70:7b:04:3a:b2:7f:b6:
74:8b:1a:50:3b:25:d7:26:ac:45:45:e8:35:b2:08:c5:e1:6f:
83:79:38:87:42:66:51:30:fb:a0:4a:a3:d2:1a:74:9c:48:34:
b4:76:85:64:33:3c:fd:d3:44:b5:ca:17:ca:a0:a8:43:13:03:
57:e4:f5:be:3b:98:65:0b:ef:91:20:9b:f8:af:fd:7e:aa:88:
b2:58:a2:56:db:b3:67:23:61:f0:03:a1:3b:2a:f2:54:39:b1:
2d:50:52:69:51:34:c3:41:e5:55:5d:2e:61:7c:46:bf:09:f3:
b8:7c:10:33:41:31:72:32:34:76:1a:52:06:f3:b9:34:38:75:
c9:0f:38:99:55:6b:55:83:36:8e:3f:f5:51:ef:f1:40:bd:35:
03:ed:f1:b2:c2:ff:ac:68:be:b0:35:a1:17:cb:15:38:9c:5a:
e3:b8:fc:df:d5:a9:29:2b:eb:ee:ab:8b:38:16:c9:57:21:54:
61:5a:5c:45:4f:b5:71:9b:ee:49:5c:3f:3b:4f:ec:c2:59:1c:
21:f8:15:f3:45:3a:63:75:db:99:d1:04:8c:f4:d6:e2:72:93:
7a:b5:ef:6e:7e:a9:77:c6:4e:71:80:b6:ee:48:cf:e5:44:a7:
e2:d6:07:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:52 2023 by rpki-client on console-fra.rpki-client.org