Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/ID7qs_W_fePTlg2GRQIjKPjtRCo.roa
File: ID7qs_W_fePTlg2GRQIjKPjtRCo.roa (raw, json)
Hash identifier: yQyhkA6+v1Am8Jrf483STRPMTxogIJjuMkQQ5ImWZUs=
Subject key identifier: 20:3E:EA:B3:F5:BF:7D:E3:D3:96:0D:86:45:02:23:28:F8:ED:44:2A
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 09B451D2
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/ID7qs_W_fePTlg2GRQIjKPjtRCo.roa
Signing time: Wed 11 May 2022 10:11:25 +0000
ROA not before: Wed 11 May 2022 10:11:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201776
IP address blocks: 31.40.162.0/23 maxlen: 23
31.40.167.0/24 maxlen: 24
31.40.172.0/23 maxlen: 23
31.40.178.0/23 maxlen: 23
31.40.132.0/24 maxlen: 24
31.40.138.0/24 maxlen: 24
31.40.137.0/24 maxlen: 24
31.40.135.0/24 maxlen: 24
31.40.134.0/24 maxlen: 24
31.40.143.0/24 maxlen: 24
31.40.142.0/24 maxlen: 24
31.40.140.0/24 maxlen: 24
31.40.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162812370 (0x9b451d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: May 11 10:11:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=203eeab3f5bf7de3d3960d8645022328f8ed442a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d1:dd:01:f8:f1:2c:5d:ea:e8:bb:38:e4:3f:
44:cd:f0:da:fe:68:e8:c0:ff:15:7d:f9:3a:95:35:
c1:75:f1:df:ba:da:a4:d0:8d:3f:7c:89:8d:c8:bb:
d5:fe:cd:80:29:08:8b:f6:47:49:80:62:5c:a9:e2:
46:f7:cc:31:38:9c:83:8f:f4:60:14:a4:3a:5e:20:
8a:9e:12:9e:24:dc:1f:e9:f6:b6:ae:9b:c9:b2:b4:
35:96:c0:2f:8b:f6:65:af:d8:d6:b8:0e:cb:c8:e1:
ee:73:bf:cd:2a:c2:cb:89:82:d0:df:36:4c:f5:6e:
9c:64:8f:92:f7:92:44:de:b4:25:2f:25:14:42:62:
5f:00:47:78:ca:c9:51:dc:0a:64:38:ea:93:93:18:
a8:01:47:38:4b:4a:db:48:d7:e8:2a:bf:ea:56:e8:
6f:e4:f7:c2:51:67:49:10:90:26:60:5c:b6:a9:a7:
93:8a:23:f1:da:40:dc:f6:12:1c:ee:60:e5:29:48:
4e:2c:93:7a:7a:c1:58:be:46:1c:53:dc:4d:86:ec:
f2:11:f8:c1:7f:a0:10:21:de:9f:03:be:2c:e1:af:
9f:1c:03:76:9a:d4:f7:0f:a9:f3:19:91:04:19:22:
ad:e3:ff:a1:91:10:a8:0d:19:de:bd:55:4e:c0:75:
13:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3E:EA:B3:F5:BF:7D:E3:D3:96:0D:86:45:02:23:28:F8:ED:44:2A
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/ID7qs_W_fePTlg2GRQIjKPjtRCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.132.0/24
31.40.134.0/23
31.40.137.0-31.40.138.255
31.40.140.0/24
31.40.142.0/23
31.40.151.0/24
31.40.162.0/23
31.40.167.0/24
31.40.172.0/23
31.40.178.0/23
Signature Algorithm: sha256WithRSAEncryption
69:38:c6:e7:e9:3c:65:cf:d4:f9:aa:ec:6e:60:09:8b:a1:c2:
8e:02:4c:12:df:bd:28:f8:77:19:44:68:39:5e:c9:49:f9:70:
f5:5c:03:fe:fb:f6:68:dc:6a:d0:2a:a5:fc:b9:db:ca:f4:21:
78:0e:39:9f:d1:3c:ad:71:3b:e4:2d:c9:6a:04:b5:75:86:62:
46:64:c6:cf:4f:4e:d1:7d:08:f4:1f:fa:7e:b8:35:ef:27:b7:
60:4c:fd:dd:a7:56:a8:7a:95:4d:f7:92:2c:2a:ef:7b:f0:c6:
84:30:1e:c2:77:ea:2b:f2:74:56:6d:9d:4e:ca:f9:f0:a5:56:
48:3c:90:e7:43:a4:01:0e:b1:51:f8:41:2d:ae:21:7c:41:15:
ad:fb:c0:6c:1c:a3:55:e7:b3:d6:9c:ac:17:d8:0c:96:05:f5:
c7:10:77:20:d6:92:9c:2d:e8:b3:b3:7f:63:c0:3b:c1:c1:75:
bd:c2:24:19:db:fc:5b:bf:8b:81:38:ed:f3:8e:65:fb:94:a5:
a3:d3:60:82:04:e5:52:4c:78:58:d2:92:56:96:a5:6c:85:82:
9e:f2:76:7c:1e:50:c3:90:ed:54:ff:e2:3d:0f:e1:33:4f:d2:
ea:58:7a:2c:b5:db:40:5d:41:9d:1c:24:41:9e:e8:e1:ef:dc:
b0:2d:f4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:04 2023 by rpki-client on console-fra.rpki-client.org