Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/91OcQy5EGVy9eUBPWsXWtgrN0xs.roa
File: 91OcQy5EGVy9eUBPWsXWtgrN0xs.roa (raw, json)
Hash identifier: YECkzYgqtyJkZ/P9Mr45r2MCBpO1mbyNIXI3cVQxuh4=
Subject key identifier: F7:53:9C:43:2E:44:19:5C:BD:79:40:4F:5A:C5:D6:B6:0A:CD:D3:1B
Certificate issuer: /CN=659abae2b0cae86c4196b020765b823a203207fc
Certificate serial: 07CBDBF5
Authority key identifier: 65:9A:BA:E2:B0:CA:E8:6C:41:96:B0:20:76:5B:82:3A:20:32:07:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/91OcQy5EGVy9eUBPWsXWtgrN0xs.roa
Signing time: Sat 01 Jan 2022 15:58:30 +0000
ROA not before: Sat 01 Jan 2022 15:58:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196949
IP address blocks: 37.200.72.0/23 maxlen: 23
37.200.72.0/21 maxlen: 21
37.200.74.0/23 maxlen: 23
37.200.76.0/23 maxlen: 23
37.200.78.0/23 maxlen: 23
217.150.74.0/23 maxlen: 23
217.150.76.0/23 maxlen: 23
217.150.78.0/23 maxlen: 23
217.150.72.0/23 maxlen: 23
217.150.72.0/21 maxlen: 21
109.110.36.0/23 maxlen: 23
109.110.32.0/19 maxlen: 19
109.110.32.0/23 maxlen: 23
109.110.34.0/23 maxlen: 23
109.110.38.0/23 maxlen: 23
109.110.40.0/23 maxlen: 23
109.110.42.0/23 maxlen: 23
109.110.44.0/23 maxlen: 23
109.110.50.0/23 maxlen: 23
109.110.46.0/23 maxlen: 23
109.110.48.0/23 maxlen: 23
109.110.52.0/23 maxlen: 23
109.110.54.0/23 maxlen: 23
109.110.56.0/23 maxlen: 23
109.110.58.0/23 maxlen: 23
109.110.60.0/23 maxlen: 23
109.110.62.0/23 maxlen: 23
31.200.224.0/23 maxlen: 23
31.200.224.0/20 maxlen: 20
31.200.226.0/23 maxlen: 23
31.200.228.0/23 maxlen: 23
31.200.230.0/23 maxlen: 23
31.200.232.0/23 maxlen: 23
31.200.236.0/23 maxlen: 23
31.200.238.0/23 maxlen: 23
31.200.234.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130800629 (0x7cbdbf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659abae2b0cae86c4196b020765b823a203207fc
Validity
Not Before: Jan 1 15:58:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f7539c432e44195cbd79404f5ac5d6b60acdd31b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c1:8a:69:6b:a2:28:fc:cb:c0:eb:5c:fa:02:
d6:80:ac:56:0d:ef:90:f4:f1:90:e6:59:d9:41:5c:
34:2f:c9:c5:b7:54:98:2b:9d:ce:0f:5b:12:7c:2e:
27:a0:1c:63:65:8b:db:2f:d3:6b:a7:8d:5d:cd:80:
cf:60:a8:7e:9b:c1:27:d0:8c:97:12:c3:90:44:68:
dc:99:84:55:5d:1b:5e:1c:92:2c:13:b0:14:04:24:
9d:9b:94:2d:b6:4c:67:87:ce:db:af:e3:8c:fd:5d:
7d:39:74:5e:3d:4c:ea:86:a0:c5:16:a4:96:b3:36:
ea:b3:5d:4b:53:e4:a7:9b:51:8f:1c:32:7d:f7:56:
b2:76:7d:8f:11:09:15:93:0b:4b:54:0b:4b:27:51:
22:4d:b9:2f:0b:e1:cf:11:84:58:02:d1:59:9f:04:
f0:2b:4c:51:df:ce:e8:8b:bf:65:57:a6:28:d1:dc:
da:65:34:86:dc:35:37:22:1c:28:b4:81:6d:a4:bf:
87:ea:ed:08:ec:a5:27:4d:2c:67:2d:1f:c5:fe:99:
b4:a5:ce:2e:e9:f2:f4:fa:1d:50:95:e4:40:99:3a:
13:f5:cc:4a:70:05:ce:ad:c9:cb:a5:18:88:2d:f4:
33:9d:c4:a7:1f:aa:99:7d:6c:b2:c4:cd:ae:8a:92:
a2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:53:9C:43:2E:44:19:5C:BD:79:40:4F:5A:C5:D6:B6:0A:CD:D3:1B
X509v3 Authority Key Identifier:
keyid:65:9A:BA:E2:B0:CA:E8:6C:41:96:B0:20:76:5B:82:3A:20:32:07:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/91OcQy5EGVy9eUBPWsXWtgrN0xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.200.224.0/20
37.200.72.0/21
109.110.32.0/19
217.150.72.0/21
Signature Algorithm: sha256WithRSAEncryption
38:5d:7f:6c:73:b2:14:43:af:75:7b:1e:d8:cd:8a:20:55:e6:
2f:0b:4e:66:e3:f4:0f:55:fe:a5:b1:12:98:48:0a:24:c2:2e:
d3:a9:7d:a3:a3:33:02:2d:93:af:cb:0d:84:64:d0:f3:f4:30:
2c:57:19:2d:bb:cb:0d:c7:f9:3c:78:d9:b6:3c:de:40:21:45:
27:ad:61:6f:83:1e:af:c5:71:6a:19:1c:97:42:ec:bd:85:7f:
9e:d0:e7:a3:94:5f:11:5d:cf:f2:9c:53:a3:b6:b6:fc:a1:5c:
79:15:26:a8:fc:0a:03:5d:a2:7d:92:f9:09:31:44:1b:9b:5e:
46:cb:57:1b:ac:a9:26:92:24:ba:d7:bc:11:01:d3:b4:58:df:
ae:a7:3c:fb:10:c5:53:fc:4e:ab:1f:32:37:1e:1c:2f:51:24:
8b:88:ee:14:61:9e:01:19:ee:09:cb:82:5d:c7:1d:ee:d1:6c:
8d:e8:c7:33:2f:48:ae:af:8b:d2:c5:b8:42:9a:d4:2f:32:eb:
76:ae:d9:49:cc:8f:8b:9e:49:14:8a:3c:35:92:58:e6:2e:9a:
aa:09:df:5a:66:74:d8:f8:a9:2f:ec:37:8c:5a:d2:30:58:04:
e5:3a:a3:2a:e8:75:d6:ea:42:07:a9:73:44:99:7b:48:e7:19:
4a:8f:3b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-fra.rpki-client.org