Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/xc-ErQ9VhudXL21FhniQCqOZyt4.roa
File: xc-ErQ9VhudXL21FhniQCqOZyt4.roa (raw, json)
Hash identifier: bNRJeTCWDwZltX3Bg7wQcwf2HPETNOjJ8pj8JEjNMY8=
Subject key identifier: C5:CF:84:AD:0F:55:86:E7:57:2F:6D:45:86:78:90:0A:A3:99:CA:DE
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 3955F323
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/xc-ErQ9VhudXL21FhniQCqOZyt4.roa
Signing time: Sun 03 Jul 2022 11:36:26 +0000
ROA not before: Sun 03 Jul 2022 11:36:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43395
IP address blocks: 151.238.136.0/21 maxlen: 21
151.238.144.0/23 maxlen: 23
151.247.232.0/22 maxlen: 22
151.247.228.0/22 maxlen: 22
151.247.236.0/22 maxlen: 22
151.247.240.0/24 maxlen: 24
151.247.241.0/24 maxlen: 24
151.247.248.0/22 maxlen: 22
31.58.246.0/24 maxlen: 24
31.58.242.0/24 maxlen: 24
31.58.244.0/24 maxlen: 24
31.58.245.0/24 maxlen: 24
31.58.241.0/24 maxlen: 24
31.58.243.0/24 maxlen: 24
31.58.252.0/24 maxlen: 24
31.58.248.0/24 maxlen: 24
31.58.250.0/24 maxlen: 24
31.58.247.0/24 maxlen: 24
31.58.253.0/24 maxlen: 24
31.58.249.0/24 maxlen: 24
31.58.251.0/24 maxlen: 24
31.59.3.0/24 maxlen: 24
31.58.255.0/24 maxlen: 24
31.59.0.0/23 maxlen: 23
31.58.254.0/24 maxlen: 24
31.59.4.0/24 maxlen: 24
31.59.5.0/24 maxlen: 24
31.59.9.0/24 maxlen: 24
31.59.8.0/24 maxlen: 24
31.59.13.0/24 maxlen: 24
31.59.15.0/24 maxlen: 24
31.59.14.0/24 maxlen: 24
31.59.12.0/24 maxlen: 24
31.59.12.0/22 maxlen: 22
31.58.238.0/24 maxlen: 24
31.58.240.0/24 maxlen: 24
31.58.236.0/24 maxlen: 24
31.58.239.0/24 maxlen: 24
31.58.237.0/24 maxlen: 24
94.182.57.0/24 maxlen: 24
94.182.56.0/22 maxlen: 22
94.182.56.0/24 maxlen: 24
94.182.58.0/24 maxlen: 24
94.182.59.0/24 maxlen: 24
94.182.61.0/24 maxlen: 24
94.182.63.0/24 maxlen: 24
94.182.60.0/22 maxlen: 22
94.182.60.0/24 maxlen: 24
94.182.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 961934115 (0x3955f323)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jul 3 11:36:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5cf84ad0f5586e7572f6d458678900aa399cade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:65:2c:d3:6b:d7:ef:98:53:9c:2b:ee:1e:0d:
5c:fd:27:ca:d5:07:53:31:d8:5d:ba:ef:c1:91:eb:
11:2b:bd:b9:39:2a:a4:4c:ce:73:08:db:ec:62:71:
dc:6c:e6:0f:94:e1:f9:a9:d0:4b:25:60:f5:ea:e5:
f7:4a:d8:ec:44:c3:27:07:fe:08:38:a8:74:d1:8f:
f1:9b:02:cd:c3:a2:2e:97:36:b7:f9:a9:ab:16:75:
5f:1c:f5:01:4a:47:3c:40:8d:56:c3:1c:04:18:75:
c1:e1:65:ac:78:03:14:6b:fc:dd:3e:11:6a:a2:c2:
2c:50:4c:50:6b:79:1e:73:83:69:24:fa:d1:a4:2e:
c3:4b:3a:68:e6:37:81:14:14:98:c1:38:fb:68:01:
54:61:a4:d4:55:51:04:f1:52:58:90:69:6b:e0:62:
1b:e2:e4:a5:b3:83:79:9a:f4:e7:e2:3e:4a:92:bf:
1d:cd:78:80:ad:15:38:52:a0:8f:f7:16:11:03:18:
2e:da:74:e9:32:8f:de:2b:7e:2f:a9:f2:2e:23:34:
40:d9:7c:28:a5:45:0c:8e:3a:82:b4:ce:a8:ae:27:
94:fe:c8:dc:b9:89:fb:52:4f:f8:b6:12:1d:91:d0:
95:1c:59:1e:42:0e:da:07:92:be:87:8c:10:cf:d1:
06:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CF:84:AD:0F:55:86:E7:57:2F:6D:45:86:78:90:0A:A3:99:CA:DE
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/xc-ErQ9VhudXL21FhniQCqOZyt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.236.0-31.59.1.255
31.59.3.0-31.59.5.255
31.59.8.0/23
31.59.12.0/22
94.182.56.0/21
151.238.136.0-151.238.145.255
151.247.228.0-151.247.241.255
151.247.248.0/22
Signature Algorithm: sha256WithRSAEncryption
56:8e:4c:98:c2:90:46:de:02:f1:e5:23:72:c8:82:6e:d5:4e:
29:c7:c9:e6:7a:ba:d2:4f:d2:b6:33:6c:5a:59:4e:9e:1f:ab:
e0:02:b6:60:1a:81:a5:3c:ea:8a:28:ae:df:73:de:10:59:e7:
0d:d6:49:7c:77:e8:b8:90:88:cf:b9:ad:34:69:6e:72:97:39:
eb:c0:ae:41:1a:4e:0d:88:5b:f2:28:27:77:c1:61:83:9d:93:
20:2d:e0:f5:46:f8:57:b9:bd:a5:74:28:40:9a:dd:9b:c9:ef:
cd:d3:75:43:dd:1a:9b:4a:2e:e5:7c:e0:9e:89:22:1b:ad:48:
c1:49:01:ed:0c:d6:54:4a:e8:1e:bc:e2:82:90:ac:35:cf:71:
79:58:f7:9d:4d:ef:47:c1:81:04:ec:f3:ad:2c:e9:79:6d:27:
84:54:9c:7d:cb:40:b6:7b:05:19:76:d6:78:e3:cc:05:0d:a3:
0d:7d:12:61:69:f2:65:75:6e:5a:d5:77:dc:49:b3:ca:22:3a:
b0:0d:d5:06:b4:2d:3e:2a:9a:54:9f:ee:b4:80:0a:13:66:3c:
08:db:64:a4:ea:b5:40:b4:e8:31:45:7f:2c:87:50:63:15:9b:
88:e1:e0:e2:51:94:08:68:fb:5e:cf:ac:a6:2f:4d:72:cd:80:
9d:0e:2a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:52 2023 by rpki-client on console-fra.rpki-client.org