Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/1-TqkF8Z2HOYEKzSMPVgyPNDObjY.roa
File: 1-TqkF8Z2HOYEKzSMPVgyPNDObjY.roa (raw, json)
Hash identifier: 1pl58zewsIIoQZue7n9iXcRZQmTvmVWI5EitiwaOcuk=
Subject key identifier: F9:3A:A4:17:C6:76:1C:E6:04:2B:34:8C:3D:58:32:3C:D0:CE:6E:36
Certificate issuer: /CN=3b230442feae9fc26b8bd887faa0ed0275827a58
Certificate serial: 0185164F020A63072CA20287D5442338F41E
Authority key identifier: 3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/1-TqkF8Z2HOYEKzSMPVgyPNDObjY.roa
Signing time: Thu 15 Dec 2022 15:02:34 +0000
ROA not before: Thu 15 Dec 2022 15:02:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 109.237.176.0/20 maxlen: 20
80.187.160.0/20 maxlen: 20
193.254.160.0/20 maxlen: 20
31.224.0.0/11 maxlen: 11
193.254.128.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:16:4f:02:0a:63:07:2c:a2:02:87:d5:44:23:38:f4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b230442feae9fc26b8bd887faa0ed0275827a58
Validity
Not Before: Dec 15 15:02:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f93aa417c6761ce6042b348c3d58323cd0ce6e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f3:24:4a:ae:cf:81:50:e8:a8:7e:88:0c:27:
6d:c4:1a:f0:12:12:d1:b2:c4:27:77:18:d0:aa:ac:
7e:83:ca:b3:6c:cc:9d:61:54:97:a6:7d:11:d8:9c:
03:ae:5b:76:17:77:32:68:f5:96:08:ff:75:c4:3a:
5c:56:3d:a4:a7:e4:ce:f6:b2:5b:c4:0f:e7:a7:47:
c0:15:d4:c8:4d:51:e8:11:73:cb:42:5b:59:73:b1:
82:4c:66:6f:59:c2:84:28:10:15:b8:db:b0:9a:42:
87:14:00:11:30:5e:47:5c:1d:c7:95:f5:39:c4:3c:
c8:40:af:60:77:37:fc:af:c4:b9:dd:c5:3a:a4:31:
07:25:4f:9b:a4:88:c4:55:f8:10:38:ef:55:a3:67:
b1:3a:e8:08:39:6a:66:34:6c:66:5c:94:1c:39:68:
c7:ef:f6:4f:23:3b:37:53:60:bd:95:ac:8f:4e:85:
a5:1d:3c:3b:b3:b7:f7:c8:3c:86:69:b0:79:62:59:
71:75:14:89:0b:76:23:87:fb:d5:20:24:d1:2d:fe:
af:63:83:bc:61:7e:8f:92:c9:4d:79:61:64:3d:3e:
ef:dc:2f:aa:b3:83:41:10:ed:4e:81:5b:c3:ca:a2:
88:a0:07:9e:b0:21:43:5b:d0:7c:b1:10:2e:cb:da:
23:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3A:A4:17:C6:76:1C:E6:04:2B:34:8C:3D:58:32:3C:D0:CE:6E:36
X509v3 Authority Key Identifier:
keyid:3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/1-TqkF8Z2HOYEKzSMPVgyPNDObjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.224.0.0/11
80.187.160.0/20
109.237.176.0/20
193.254.128.0-193.254.175.255
Signature Algorithm: sha256WithRSAEncryption
54:d6:68:68:18:01:a7:83:de:92:f0:71:ce:c8:ee:98:d1:6d:
e1:56:20:9a:8b:de:dd:42:48:f5:4d:4e:35:18:08:0c:7e:4f:
0f:b5:0e:18:7e:85:b7:f2:95:4b:20:b0:59:b6:a5:55:14:99:
9c:4c:31:64:9f:b4:87:a0:10:75:13:15:9d:a3:0c:96:9b:02:
1f:cc:6e:76:59:1d:1b:a6:57:e0:2c:70:ca:7e:6f:45:4a:39:
49:59:20:dd:ae:06:84:a2:29:e6:83:3c:1d:bf:fa:3d:96:b7:
74:7e:6c:1e:2a:3d:d8:cd:17:71:08:56:28:cd:64:c5:74:b3:
56:33:22:1f:59:47:32:fa:5f:93:fb:12:6b:65:75:c5:e1:1c:
d8:0d:85:d0:21:b0:07:e7:90:1a:2c:49:39:4b:1f:ed:9a:58:
a6:23:f9:49:fb:21:b9:c1:42:ec:05:fa:e5:9b:4a:10:53:51:
d4:8d:ac:ba:ee:d4:26:8b:84:8f:8d:e8:05:d3:e8:3e:f7:fe:
0a:23:51:f0:06:09:43:62:4c:db:4a:a3:79:ea:56:f9:db:0f:
c0:30:c6:41:10:cc:75:99:2f:8a:90:95:03:af:d8:c9:e0:4a:
e1:2a:bb:70:f7:2d:6d:08:98:3e:5b:85:ed:36:76:3f:52:35:
4f:79:d7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:00 2024 by rpki-client on console-fra.rpki-client.org