Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/u29U90T2bVOi4qwy4qR2mZfasHE.roa
File: u29U90T2bVOi4qwy4qR2mZfasHE.roa (raw, json)
Hash identifier: 2rsMZ8VI8JF6nlYYdKfSLxf1/UWwRX73pjvrThMWh+0=
Subject key identifier: BB:6F:54:F7:44:F6:6D:53:A2:E2:AC:32:E2:A4:76:99:97:DA:B0:71
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 088ABD9E
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/u29U90T2bVOi4qwy4qR2mZfasHE.roa
Signing time: Sat 01 Jan 2022 15:00:03 +0000
ROA not before: Sat 01 Jan 2022 15:00:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213191
IP address blocks: 31.40.160.0/23 maxlen: 23
31.40.168.0/22 maxlen: 22
31.40.174.0/23 maxlen: 23
31.40.176.0/23 maxlen: 23
31.40.180.0/22 maxlen: 22
31.40.184.0/22 maxlen: 22
91.214.80.0/24 maxlen: 24
31.40.131.0/24 maxlen: 24
31.40.139.0/24 maxlen: 24
31.40.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143310238 (0x88abd9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Jan 1 15:00:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bb6f54f744f66d53a2e2ac32e2a4769997dab071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:90:c9:59:93:8f:85:bd:96:b9:35:f9:f6:3a:
32:26:bd:52:19:e5:7c:8e:44:27:41:05:6f:1f:0f:
fc:11:1d:d9:e7:06:e9:25:8c:0a:36:09:7b:bf:73:
de:6a:56:b9:50:53:e8:a7:97:d4:13:eb:b1:ea:5c:
4f:ea:40:9f:73:aa:e1:76:1b:a8:4a:2c:6f:59:be:
62:af:ed:20:e2:e5:39:4c:8f:25:5a:e8:6a:32:d2:
2f:d6:26:38:94:31:d8:52:de:03:bf:5d:5a:96:46:
1c:03:22:4f:fe:91:2a:2c:85:ed:4a:80:7e:b9:e0:
bf:23:2b:5d:b1:e6:8c:92:59:6a:04:ad:e7:ea:76:
44:50:39:fe:bf:c9:29:db:fd:5d:d0:9d:31:4e:29:
03:7e:81:e5:82:58:a4:47:76:9c:ea:56:54:87:4c:
76:d0:d5:07:ea:6f:06:76:ff:c2:9c:94:ba:c8:74:
54:8b:fb:32:d6:8d:09:c8:37:1b:39:b8:d0:1f:2b:
b4:d5:e8:de:ee:f4:f0:26:56:20:a3:ea:54:11:96:
40:de:e5:17:16:37:b4:de:05:bf:9b:de:94:a9:c0:
3b:17:20:d3:12:f6:66:58:b7:e5:b8:d2:5f:c0:51:
08:c4:45:b8:0a:8a:a5:f4:1f:e1:3e:65:8f:b2:90:
f0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6F:54:F7:44:F6:6D:53:A2:E2:AC:32:E2:A4:76:99:97:DA:B0:71
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/u29U90T2bVOi4qwy4qR2mZfasHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.131.0/24
31.40.139.0/24
31.40.141.0/24
31.40.160.0/23
31.40.168.0/22
31.40.174.0-31.40.177.255
31.40.180.0-31.40.187.255
91.214.80.0/24
Signature Algorithm: sha256WithRSAEncryption
46:2a:75:50:db:51:ae:3e:81:63:ee:0b:4c:17:2e:eb:9c:8f:
39:05:e0:7c:3f:74:29:1a:39:41:0d:bd:fb:e6:74:1d:36:cb:
ef:12:a5:8c:0c:db:f6:6c:5b:a7:7f:96:6d:97:4f:d5:a5:52:
f8:bc:6e:18:e0:57:12:5b:fd:fc:9a:3e:eb:45:25:09:e3:64:
b7:c2:3a:65:62:e3:f3:66:53:59:cb:37:3c:d5:7a:39:96:34:
b8:cb:a8:7c:80:dc:ae:94:e3:e2:a9:2c:3a:b6:aa:60:ad:06:
48:9c:fc:ff:91:00:0c:a9:d3:11:fd:68:5a:47:9f:61:7f:56:
9d:bf:5a:5d:54:cc:a7:b6:d1:b9:a9:88:6f:1a:9a:fb:b8:e5:
3e:8d:36:8c:5e:29:25:74:e6:74:95:a0:62:c9:5c:69:57:c9:
7d:e3:86:16:91:2b:f4:ff:89:75:35:d2:db:61:e1:57:5f:24:
b3:d9:3d:ed:46:2b:d3:56:7b:8e:80:c5:56:e0:08:e4:30:3c:
58:61:47:a4:68:b8:2c:2a:6a:94:87:dd:b3:89:6d:48:63:00:
1d:2f:a0:05:33:53:35:07:92:af:3b:af:b7:79:a4:a9:c5:3b:
41:d7:c3:94:cf:db:3d:b7:13:76:68:55:bc:6a:99:8c:ab:35:
bd:9c:97:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:04 2023 by rpki-client on console-fra.rpki-client.org