Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rSwRGAeo23OAeJhires8VyYa1Ho.roa
File: rSwRGAeo23OAeJhires8VyYa1Ho.roa (raw, json)
Hash identifier: a0M8PHnhOc9Mh+HCr8V2HctbRo3rb1oNTUa2yzFd7pE=
Subject key identifier: AD:2C:11:18:07:A8:DB:73:80:78:98:62:AD:EB:3C:57:26:1A:D4:7A
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 01852DFB0F6B1BC30FD234C06399F217B848
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rSwRGAeo23OAeJhires8VyYa1Ho.roa
Signing time: Tue 20 Dec 2022 05:21:46 +0000
ROA not before: Tue 20 Dec 2022 05:21:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205647
IP address blocks: 151.240.80.0/21 maxlen: 21
31.56.116.0/24 maxlen: 24
94.182.206.0/24 maxlen: 24
94.182.204.0/24 maxlen: 24
94.182.204.0/22 maxlen: 22
94.182.205.0/24 maxlen: 24
94.182.207.0/24 maxlen: 24
94.182.217.0/24 maxlen: 24
94.182.226.0/24 maxlen: 24
94.182.228.0/22 maxlen: 22
151.241.224.0/21 maxlen: 21
151.240.168.0/22 maxlen: 22
151.240.192.0/21 maxlen: 21
151.247.216.0/21 maxlen: 21
94.182.41.0/24 maxlen: 24
151.247.214.0/23 maxlen: 23
151.247.224.0/22 maxlen: 22
94.182.72.0/21 maxlen: 21
151.247.248.0/22 maxlen: 22
85.15.49.0/24 maxlen: 24
85.15.48.0/24 maxlen: 24
94.182.97.192/28 maxlen: 28
151.240.240.0/21 maxlen: 21
31.59.12.0/22 maxlen: 22
94.182.8.0/23 maxlen: 23
94.182.12.0/23 maxlen: 23
31.56.64.0/19 maxlen: 19
31.56.96.0/20 maxlen: 20
31.56.0.0/18 maxlen: 18
94.182.116.0/22 maxlen: 22
94.182.114.0/23 maxlen: 23
94.182.120.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2d:fb:0f:6b:1b:c3:0f:d2:34:c0:63:99:f2:17:b8:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Dec 20 05:21:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad2c111807a8db7380789862adeb3c57261ad47a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b1:98:b8:3f:91:52:f8:cf:26:e6:72:16:05:
65:d5:01:3f:cb:7f:36:a4:04:35:a6:fb:f7:39:6e:
d1:78:8d:bb:7e:7a:e1:3f:ae:1b:1f:d3:c1:65:b8:
2c:db:1c:9c:e8:00:16:8e:82:8d:ee:aa:2e:d0:d8:
ec:1a:10:ab:94:c0:b1:9c:46:b0:b7:50:2a:1c:07:
30:c9:d8:c5:ee:c6:ec:b1:4c:d3:25:24:82:65:99:
48:c5:2a:c4:2c:88:2d:15:0d:83:4e:99:a1:ad:db:
5d:a9:86:f2:1e:1c:4a:d6:17:f0:d8:32:53:71:cf:
90:82:ba:91:66:0b:63:d6:09:ac:9a:ba:f2:5e:ec:
7a:bd:d0:b6:82:36:f5:9f:1b:11:8f:37:bf:a1:19:
87:93:01:92:ff:69:ef:1a:b9:9b:ff:01:e4:68:1a:
57:ca:54:1f:b4:90:30:bc:68:45:7c:27:46:d9:6d:
e0:40:66:db:3d:a4:c8:0c:f5:71:f1:43:4e:ab:89:
a1:08:45:69:ff:33:9f:f0:15:01:6f:f2:b5:85:3d:
e3:4f:0c:4b:e0:c7:59:5b:50:dc:34:68:94:ed:16:
ac:26:cb:dc:4a:3c:4e:df:b4:8e:4d:a9:cf:79:37:
8e:5e:44:e6:47:6a:94:67:ec:d6:53:30:c1:5d:b3:
d8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:2C:11:18:07:A8:DB:73:80:78:98:62:AD:EB:3C:57:26:1A:D4:7A
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rSwRGAeo23OAeJhires8VyYa1Ho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.0.0-31.56.111.255
31.56.116.0/24
31.59.12.0/22
85.15.48.0/23
94.182.8.0/23
94.182.12.0/23
94.182.41.0/24
94.182.72.0/21
94.182.97.192/28
94.182.114.0-94.182.127.255
94.182.204.0/22
94.182.217.0/24
94.182.226.0/24
94.182.228.0/22
151.240.80.0/21
151.240.168.0/22
151.240.192.0/21
151.240.240.0/21
151.241.224.0/21
151.247.214.0-151.247.227.255
151.247.248.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:08:d3:5b:f5:b6:01:fa:84:ca:00:fc:bc:ba:16:1b:dd:1b:
c8:91:32:1d:80:90:cb:26:cd:01:6a:f6:6d:3a:9c:c8:09:a4:
25:a7:da:a5:95:b4:4f:11:be:b6:c8:51:64:56:e1:75:96:78:
c6:c3:ae:73:5a:4f:e8:1e:e2:15:47:11:dd:43:af:c4:cf:ec:
94:7f:50:80:36:cc:7e:d3:c7:85:d3:c1:9d:9a:6e:98:66:45:
64:83:e1:6f:26:7f:26:1f:89:74:04:b4:32:3b:70:d8:34:ba:
7c:2a:1c:17:de:66:a0:d8:32:34:0f:68:3d:0b:aa:42:6c:7f:
62:e4:7c:3e:bd:2e:8c:08:5c:e9:84:60:8d:39:5c:8d:5b:3a:
69:6b:39:80:01:fa:95:8d:ec:64:c5:c0:f6:98:18:e0:bc:d9:
08:cf:e3:01:0e:92:c7:6b:04:ac:6f:60:e0:99:7a:58:d2:94:
73:c1:2d:78:22:92:5e:0b:1e:16:70:bb:3d:67:98:a2:b5:4c:
b1:4e:30:de:b5:1c:f9:11:b8:6b:61:76:e6:52:a3:84:d0:5a:
02:95:60:f1:56:85:1c:fe:d5:65:8d:73:fb:a2:25:a7:60:05:
1c:20:0a:7e:29:59:d7:61:34:fd:34:3b:74:8a:2c:f4:45:cb:
ac:b1:e8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:31 2023 by rpki-client on console-ams.rpki-client.org