Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/3Rnqwm0oo_T8bBftuWrLMKkTrws.roa
File: 3Rnqwm0oo_T8bBftuWrLMKkTrws.roa (raw, json)
Hash identifier: xS8citw2NbVaAtgw3WdOfNjbIi4MVAE1TY+/qqHI4gs=
Subject key identifier: DD:19:EA:C2:6D:28:A3:F4:FC:6C:17:ED:B9:6A:CB:30:A9:13:AF:0B
Certificate issuer: /CN=3af7710df8add64bb9688e0f4581bea67e402c66
Certificate serial: 01840B8BEFD2109D3DE022E6AA9D009BBFC6
Authority key identifier: 3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/3Rnqwm0oo_T8bBftuWrLMKkTrws.roa
Signing time: Mon 24 Oct 2022 19:50:31 +0000
ROA not before: Mon 24 Oct 2022 19:50:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5398
IP address blocks: 31.44.32.0/20 maxlen: 20
193.221.216.0/23 maxlen: 23
31.44.46.0/23 maxlen: 23
46.21.16.0/23 maxlen: 23
46.21.18.0/23 maxlen: 23
46.21.20.0/23 maxlen: 23
46.21.29.0/24 maxlen: 24
46.21.31.0/24 maxlen: 24
193.222.104.0/23 maxlen: 23
185.155.176.0/22 maxlen: 22
185.155.184.0/23 maxlen: 23
77.220.64.0/19 maxlen: 19
2a00:bd00::/32 maxlen: 32
2a0f:e880::/29 maxlen: 29
2a02:210::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0b:8b:ef:d2:10:9d:3d:e0:22:e6:aa:9d:00:9b:bf:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af7710df8add64bb9688e0f4581bea67e402c66
Validity
Not Before: Oct 24 19:50:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd19eac26d28a3f4fc6c17edb96acb30a913af0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c1:47:78:9e:d1:55:40:b3:f3:76:9e:07:e8:
cc:a3:ae:84:fc:76:54:b2:72:64:c5:1c:37:37:4b:
19:5f:f3:58:12:3e:59:de:da:74:23:5c:e9:2a:aa:
68:ea:d6:8e:0a:f7:67:9d:ef:d3:84:de:3b:a0:f8:
56:72:fe:c6:b6:88:de:e7:d9:73:98:2e:8a:0a:9d:
27:5f:d7:14:ed:75:c2:f1:a1:f1:55:4e:74:32:29:
34:d5:dc:16:c5:66:38:87:31:89:1e:f0:82:43:96:
da:5d:20:90:59:2f:24:83:41:e7:d6:02:9f:54:59:
08:80:ed:ac:1a:10:6b:2c:57:cf:6f:74:fb:a4:88:
13:28:c5:30:74:9e:f5:cd:64:1a:a4:18:d8:ac:82:
81:ec:16:21:5d:97:c4:66:b4:38:85:14:74:6b:d5:
5a:f9:6e:1e:02:b1:29:07:64:94:60:ea:03:cc:b2:
8b:ba:b2:bd:f2:cb:a3:2f:1b:59:3e:00:ba:83:29:
96:35:f4:88:90:e2:73:30:c3:3d:fa:44:ee:2f:9e:
2b:28:8b:77:00:14:09:67:13:e1:2e:d9:ab:0e:bd:
97:e4:de:94:57:8e:3c:41:ab:4d:25:12:7e:11:3d:
5e:c8:e5:4d:d9:c6:51:30:7d:39:e5:5c:56:8d:d5:
4b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:19:EA:C2:6D:28:A3:F4:FC:6C:17:ED:B9:6A:CB:30:A9:13:AF:0B
X509v3 Authority Key Identifier:
keyid:3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/3Rnqwm0oo_T8bBftuWrLMKkTrws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.32.0/20
46.21.16.0-46.21.21.255
46.21.29.0/24
46.21.31.0/24
77.220.64.0/19
185.155.176.0/22
185.155.184.0/23
193.221.216.0/23
193.222.104.0/23
IPv6:
2a00:bd00::/32
2a02:210::/32
2a0f:e880::/29
Signature Algorithm: sha256WithRSAEncryption
0c:2b:36:b4:a1:ed:83:5f:5c:c5:9d:d8:0d:a6:02:02:77:56:
92:bf:b3:50:3e:9f:61:41:24:c1:1b:b2:32:5f:d7:5d:ed:80:
c1:e3:71:2e:c4:eb:43:cd:b8:78:2e:42:de:b2:2d:e9:5e:27:
5a:73:e1:6e:a1:fd:64:b7:73:f0:ee:f8:6d:11:57:9d:33:07:
23:bf:ee:e7:38:84:31:af:42:92:c7:7d:d0:4e:19:5b:81:60:
a5:64:69:1f:37:a8:2e:07:a8:47:08:8c:4b:ed:86:cd:74:60:
ef:bd:a4:d2:36:1e:94:e5:b4:9a:bb:33:80:78:4d:1c:e5:96:
21:a5:59:4f:99:9f:5a:d3:f0:26:b8:8c:7b:c8:43:8f:b3:43:
ab:e9:b5:3b:a2:90:f0:36:fa:b2:4f:04:6c:ed:84:4d:32:9f:
87:5a:55:30:d4:7f:2a:ec:c5:c1:44:4f:9e:cc:44:ef:46:f4:
34:ff:ec:41:6b:5a:f4:0c:ac:f4:e3:7c:45:c7:a6:c5:7d:c8:
21:f5:3e:23:c5:c5:85:98:dc:4c:6c:c0:b3:d3:5f:f9:e1:6c:
35:4d:7a:aa:04:4f:e4:2d:33:91:be:2b:60:3d:51:67:fc:c5:
20:a9:3e:4c:89:12:6c:44:22:26:e6:a4:5c:99:01:e9:4e:4c:
f1:d4:a6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:58 2023 by rpki-client on console-fra.rpki-client.org