Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/iqUTcayHa6leQd_xq5ZxUqnN5O8.roa
File: iqUTcayHa6leQd_xq5ZxUqnN5O8.roa (raw, json)
Hash identifier: r+YthVgQgM2nqkPUYBQTAPWiI9dTwA3N08SV70leIis=
Subject key identifier: 8A:A5:13:71:AC:87:6B:A9:5E:41:DF:F1:AB:96:71:52:A9:CD:E4:EF
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 1B7435EF
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/iqUTcayHa6leQd_xq5ZxUqnN5O8.roa
Signing time: Sat 01 Jan 2022 10:02:47 +0000
ROA not before: Sat 01 Jan 2022 10:02:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205285
IP address blocks: 31.46.29.0/24 maxlen: 24
78.92.232.0/23 maxlen: 23
84.2.63.0/24 maxlen: 24
84.1.114.0/24 maxlen: 24
84.1.116.0/24 maxlen: 24
84.1.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 460600815 (0x1b7435ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 1 10:02:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8aa51371ac876ba95e41dff1ab967152a9cde4ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3a:86:d3:1d:9e:b7:51:cd:7b:5a:bd:0c:5e:
36:3d:ee:76:13:96:93:ea:d2:a9:84:a2:c4:e2:ec:
75:db:93:a4:fe:da:6e:56:32:f9:e9:a7:cd:ec:b8:
36:04:40:4f:aa:52:e9:31:01:f9:a2:36:6c:63:b2:
90:ab:56:c2:03:51:1c:54:47:1c:43:50:2b:01:0e:
9d:e8:09:d2:e9:e7:1e:10:a3:d2:8f:12:94:fa:1c:
8e:c0:7a:29:6c:74:92:46:fe:71:8e:af:3b:d1:71:
1d:e1:dc:44:8e:c9:21:e8:0b:f6:20:a3:33:88:ae:
1c:d8:89:95:51:4c:a8:7d:ad:c1:4e:10:5c:44:fe:
9a:d4:16:cf:b9:10:8c:84:61:92:1c:d5:34:43:6d:
47:af:88:cf:13:cb:7d:28:76:f2:d8:40:f6:77:85:
96:3a:a5:14:15:bd:18:f0:6e:24:6e:ba:d8:02:31:
0a:1a:85:08:ee:d5:c8:cc:23:8d:43:44:18:fd:3f:
9f:42:d8:aa:67:d4:a3:0d:0c:52:05:64:04:d1:34:
52:0e:a2:e1:12:42:92:ea:1e:e3:cb:5a:81:95:1b:
cc:83:a2:78:2b:8f:3e:06:63:f9:d4:f0:a9:08:3c:
c6:e0:3e:d3:0d:a2:06:bb:dd:8e:f3:ba:69:50:f7:
06:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A5:13:71:AC:87:6B:A9:5E:41:DF:F1:AB:96:71:52:A9:CD:E4:EF
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/iqUTcayHa6leQd_xq5ZxUqnN5O8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.46.29.0/24
78.92.232.0/23
84.1.114.0-84.1.116.255
84.2.63.0/24
Signature Algorithm: sha256WithRSAEncryption
42:27:f4:a5:7d:e8:b1:31:ea:92:41:ab:99:a6:24:b3:3a:64:
49:79:b0:1d:b9:ec:c0:81:97:c1:47:e1:ec:d7:90:8e:09:21:
4c:bb:7e:3f:34:99:9e:8a:29:c6:67:64:25:4a:b6:6b:de:e3:
a5:52:f6:b8:56:44:0f:ec:6b:60:fa:53:48:62:4c:cc:5d:e3:
54:76:32:6a:02:33:0d:aa:89:28:89:8a:26:ee:80:c2:2f:04:
7d:a4:0d:91:db:43:17:8b:76:a9:7a:13:ff:d7:af:bc:80:68:
0d:80:44:7b:08:bd:79:13:d1:94:88:a7:46:30:86:c0:7c:f3:
51:9b:9a:73:32:82:12:fe:85:62:e5:ae:5d:86:0b:bf:c3:31:
05:32:ab:d6:8a:29:19:6c:f6:58:a5:d9:7b:c8:ae:c3:eb:ca:
ac:6d:c5:9a:a8:66:e9:70:31:26:cf:11:77:a8:84:4f:be:ae:
b6:62:a0:3f:36:4a:ad:9f:19:0e:9b:01:d7:e9:2e:f1:fe:f8:
2d:d0:c6:f0:b0:4f:3d:d0:f8:32:bc:16:7d:5c:c4:55:d2:5a:
ba:0d:91:44:18:42:69:2c:ff:3b:76:11:88:de:25:ba:9b:16:
3f:5b:8d:c9:1b:d3:92:ce:b2:64:78:4e:ff:2b:f5:49:a3:a3:
95:58:75:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:17 2023 by rpki-client on console-fra.rpki-client.org