Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/W8ejWDMwR9VJWZrP3_VtVBAkOas.roa
File: W8ejWDMwR9VJWZrP3_VtVBAkOas.roa (raw, json)
Hash identifier: w1QTyMzQgxd/efg8Tx7EzvUYKVpDJ6rdNMYyMDLEr8Y=
Subject key identifier: 5B:C7:A3:58:33:30:47:D5:49:59:9A:CF:DF:F5:6D:54:10:24:39:AB
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 0AA91E97
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/W8ejWDMwR9VJWZrP3_VtVBAkOas.roa
Signing time: Sat 01 Jan 2022 08:57:43 +0000
ROA not before: Sat 01 Jan 2022 08:57:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28769
IP address blocks: 31.216.166.0/24 maxlen: 24
31.216.160.0/22 maxlen: 24
31.216.164.0/23 maxlen: 23
31.216.171.0/24 maxlen: 24
31.216.168.0/23 maxlen: 23
31.216.167.0/24 maxlen: 24
31.216.172.0/22 maxlen: 22
46.166.65.0/24 maxlen: 24
46.166.66.0/24 maxlen: 24
46.166.67.0/24 maxlen: 24
46.166.78.0/24 maxlen: 24
80.240.35.0/24 maxlen: 24
80.240.32.0/24 maxlen: 24
80.240.36.0/23 maxlen: 23
80.240.33.0/24 maxlen: 24
80.240.34.0/24 maxlen: 24
80.240.44.0/24 maxlen: 24
80.240.47.0/24 maxlen: 24
46.166.79.0/24 maxlen: 24
46.166.84.0/23 maxlen: 23
46.166.91.0/24 maxlen: 24
46.166.88.0/23 maxlen: 24
46.166.86.0/24 maxlen: 24
46.166.87.0/24 maxlen: 24
46.166.92.0/24 maxlen: 24
46.166.93.0/24 maxlen: 24
46.166.94.0/24 maxlen: 24
46.166.98.0/24 maxlen: 24
46.166.104.0/22 maxlen: 22
46.166.99.0/24 maxlen: 24
46.166.112.0/23 maxlen: 23
46.166.116.0/22 maxlen: 22
46.166.114.0/24 maxlen: 24
46.166.120.0/21 maxlen: 21
93.188.215.0/24 maxlen: 24
93.188.208.0/23 maxlen: 23
93.188.210.0/24 maxlen: 24
46.182.132.0/22 maxlen: 22
46.182.131.0/24 maxlen: 24
46.182.128.0/22 maxlen: 22
2a06:e0c3::/32 maxlen: 32
2a06:e0c1::/32 maxlen: 32
2a06:e0c0::/32 maxlen: 32
2a06:e0c2::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178855575 (0xaa91e97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Jan 1 08:57:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5bc7a358333047d549599acfdff56d54102439ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cb:1f:67:a5:a9:32:d5:c7:e1:a2:5d:e4:fd:
59:24:d5:8d:66:77:00:7d:3c:19:31:64:49:3a:92:
58:45:f3:96:5e:51:62:7d:a7:41:e0:56:6a:54:ab:
6c:a0:9f:32:62:93:03:51:a1:e3:35:5a:7c:3c:af:
e3:8e:c0:f4:28:d7:9a:60:a1:f5:4e:57:69:96:ce:
52:49:b2:6d:8f:b8:53:77:6c:2b:0c:dc:6f:6d:b1:
42:6d:ae:f6:cd:2a:45:0a:93:2c:86:5e:ee:02:49:
97:b8:55:9a:27:bb:64:f6:01:1e:2c:ac:3b:36:3f:
41:55:96:ad:c3:dd:77:5e:c9:5f:7f:c7:98:64:7e:
4f:17:60:5c:4e:10:f3:8c:ea:fa:f1:82:6b:77:e7:
9a:6a:33:d2:61:81:d5:5f:3a:89:88:df:7c:f7:85:
69:49:4c:21:bd:0d:05:0b:29:ea:6b:c8:a2:f2:c6:
b3:69:2e:dc:90:d7:24:45:7a:ba:ec:6e:d6:7d:e5:
aa:b8:7f:ff:af:f3:92:8b:94:a2:9b:0e:fc:2c:0d:
cc:19:85:5f:0b:dc:03:06:e7:52:74:a1:96:c8:b1:
24:64:78:98:22:0b:1a:0c:05:63:1e:cf:b5:52:b9:
23:b4:a7:0e:17:df:f8:b5:7b:7f:93:48:6e:b9:6d:
36:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C7:A3:58:33:30:47:D5:49:59:9A:CF:DF:F5:6D:54:10:24:39:AB
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/W8ejWDMwR9VJWZrP3_VtVBAkOas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.160.0-31.216.169.255
31.216.171.0-31.216.175.255
46.166.65.0-46.166.67.255
46.166.78.0/23
46.166.84.0-46.166.89.255
46.166.91.0-46.166.94.255
46.166.98.0/23
46.166.104.0/22
46.166.112.0-46.166.114.255
46.166.116.0-46.166.127.255
46.182.128.0/21
80.240.32.0-80.240.37.255
80.240.44.0/24
80.240.47.0/24
93.188.208.0-93.188.210.255
93.188.215.0/24
IPv6:
2a06:e0c0::/30
Signature Algorithm: sha256WithRSAEncryption
e0:72:c6:8f:4c:81:51:7e:53:9f:34:cf:ff:45:20:59:3d:a4:
a8:e2:f2:f6:f6:2f:85:ac:76:f2:14:1c:47:61:f4:e6:e4:da:
6f:14:57:bb:86:16:69:b3:c8:be:42:3f:1d:ee:8e:90:0b:fb:
a9:71:06:51:52:a2:a3:f3:e2:2a:00:3c:69:86:ea:81:68:a4:
0a:4f:86:49:7c:b9:b9:68:fe:1a:86:5c:e2:47:a4:1f:9d:dd:
30:cf:f6:ff:d6:39:ef:3e:c5:91:05:cb:51:53:d3:45:f6:18:
8d:95:bb:2f:08:7d:59:58:ee:71:38:c3:85:89:b9:91:f1:2d:
2d:78:af:11:11:1f:ce:3a:76:18:7d:cf:d6:68:41:22:87:b3:
2e:d4:26:e1:a3:5c:7b:08:35:92:36:88:2f:ad:c0:c2:3b:3b:
aa:87:50:1e:d3:87:2d:53:6c:71:80:70:7c:4c:70:b5:17:57:
a3:94:5e:b3:a6:75:0c:57:cd:11:e4:07:de:41:e4:57:18:aa:
3c:ba:f0:92:e8:ba:69:fa:3f:af:ce:71:a2:db:8f:3a:6b:ff:
3e:72:37:f1:65:f6:88:0c:34:aa:b4:ba:67:a4:81:b5:3e:3a:
fa:9e:3e:7a:90:56:99:e3:51:96:c8:79:d8:48:15:75:b7:31:
77:a6:7a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:51 2024 by rpki-client on console-ams.rpki-client.org