Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/d17NvPjJFEhfD2rmqS_9adwGhEI.roa
File: d17NvPjJFEhfD2rmqS_9adwGhEI.roa (raw, json)
Hash identifier: CQ4AKKI2dL/jf8jTgBTZOQmfEz22OTir9h9RsozsdJ8=
Subject key identifier: 77:5E:CD:BC:F8:C9:14:48:5F:0F:6A:E6:A9:2F:FD:69:DC:06:84:42
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 1831D573
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/d17NvPjJFEhfD2rmqS_9adwGhEI.roa
Signing time: Wed 30 Mar 2022 06:21:24 +0000
ROA not before: Wed 30 Mar 2022 06:21:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134963
IP address blocks: 212.31.96.0/24 maxlen: 24
195.14.157.0/24 maxlen: 24
195.14.154.0/24 maxlen: 24
212.31.123.0/24 maxlen: 24
212.31.124.0/24 maxlen: 24
212.31.125.0/24 maxlen: 24
212.31.127.0/24 maxlen: 24
128.0.107.0/24 maxlen: 24
81.4.190.0/23 maxlen: 24
46.199.88.0/24 maxlen: 24
195.14.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 405919091 (0x1831d573)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Mar 30 06:21:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=775ecdbcf8c914485f0f6ae6a92ffd69dc068442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0e:d4:91:44:68:0e:c1:2f:17:9c:bf:ee:0f:
0d:53:b1:b0:58:f7:1c:8b:62:b8:f2:d4:78:52:ae:
97:bb:08:36:96:71:fa:e7:82:87:43:8c:91:80:7c:
81:30:72:62:5b:66:a8:d9:c0:04:c1:f6:5f:ec:f9:
6b:02:e3:29:ce:07:5c:2f:1f:4b:84:db:86:34:1a:
a6:5e:82:e0:42:06:72:34:4e:1b:ec:52:88:28:b9:
33:65:f8:e6:af:b0:d1:e7:45:72:8f:31:fb:fe:d4:
cc:3f:59:9c:ac:c1:bc:0e:2c:18:88:ae:5b:23:ca:
83:fb:e4:9c:0e:f1:7b:88:ca:8d:ec:28:22:9d:8c:
68:bc:18:dc:86:a5:69:ea:2b:ad:95:5c:dd:5e:46:
80:7e:67:36:f4:43:6d:8c:e7:6e:de:d9:c0:a6:e4:
10:88:64:34:ea:9f:5e:2d:2b:cb:d6:c5:bf:df:04:
74:b9:2b:77:3b:41:8c:b2:dc:7f:c2:3e:d4:df:a4:
98:e6:52:1b:63:3c:14:bf:21:ae:ff:aa:98:45:9d:
a7:a3:79:18:3c:69:eb:37:43:11:7f:ce:cd:4b:84:
ed:20:9a:1e:bd:f6:af:16:21:24:63:1f:f4:26:54:
1d:09:a6:53:03:4a:8d:47:f1:18:f8:77:5f:c1:8d:
fa:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5E:CD:BC:F8:C9:14:48:5F:0F:6A:E6:A9:2F:FD:69:DC:06:84:42
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/d17NvPjJFEhfD2rmqS_9adwGhEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.199.88.0/24
81.4.190.0/23
128.0.107.0/24
195.14.130.0/24
195.14.154.0/24
195.14.157.0/24
212.31.96.0/24
212.31.123.0-212.31.125.255
212.31.127.0/24
Signature Algorithm: sha256WithRSAEncryption
91:2b:30:bb:ef:56:1e:2a:af:5e:69:17:be:89:0f:62:49:0e:
8b:66:33:db:5d:24:71:cc:70:35:04:9c:f6:5f:0c:5a:46:03:
8d:f9:91:58:b3:de:ba:46:15:5b:96:9b:23:cd:2b:2e:20:18:
dd:4b:cf:06:b4:e3:08:75:9e:83:6c:a0:f8:8f:8d:db:0d:fd:
89:83:5b:49:f2:77:0b:12:b3:89:c7:39:0b:9e:2e:e9:58:5f:
7b:36:e5:71:20:bc:1a:fc:ab:80:50:91:cd:fb:4e:c4:84:41:
dd:b6:8f:91:42:f4:38:de:4a:f9:4d:b1:35:94:c8:aa:ee:3f:
0c:c7:c9:9e:f7:75:21:ea:f3:83:8d:47:ba:33:0f:e7:0a:5c:
03:c2:fa:ba:6f:18:64:73:2b:54:87:ca:ba:33:56:01:66:17:
82:53:19:f8:a7:e4:50:ca:b8:86:a2:78:92:f7:9e:02:e0:b8:
1c:38:d9:25:03:90:ed:80:1c:88:68:a1:d4:b3:91:c7:06:a1:
fb:75:8a:be:5e:ce:63:b9:43:28:ce:ca:99:f9:37:d6:68:a0:
80:ea:c2:5b:cd:6e:c8:17:8f:cc:cc:f9:46:8e:5c:d6:37:7e:
47:6f:cd:70:80:be:6e:e7:55:8f:b0:ce:5f:f4:5e:2a:7f:0d:
8a:10:b3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:21 2023 by rpki-client on console-ams.rpki-client.org