Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/q9pRU6cxNbouyyIs99H71ocZGwY.roa
File: q9pRU6cxNbouyyIs99H71ocZGwY.roa (raw, json)
Hash identifier: N29zgiHzbaPpVc8GO90JJFAS1ElHNopbjzj1vynsLGU=
Subject key identifier: AB:DA:51:53:A7:31:35:BA:2E:CB:22:2C:F7:D1:FB:D6:87:19:1B:06
Certificate issuer: /CN=3af7710df8add64bb9688e0f4581bea67e402c66
Certificate serial: 018B9B54050CB71EA40F831933CC9C208EEC
Authority key identifier: 3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/q9pRU6cxNbouyyIs99H71ocZGwY.roa
Signing time: Sat 04 Nov 2023 17:14:16 +0000
ROA not before: Sat 04 Nov 2023 17:14:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5398
IP address blocks: 31.44.32.0/20 maxlen: 20
193.221.216.0/23 maxlen: 23
31.44.46.0/23 maxlen: 23
46.21.16.0/23 maxlen: 23
46.21.22.0/24 maxlen: 24
46.21.18.0/23 maxlen: 23
46.21.21.0/24 maxlen: 24
46.21.29.0/24 maxlen: 24
193.222.104.0/23 maxlen: 23
185.155.176.0/22 maxlen: 22
185.155.184.0/23 maxlen: 23
77.220.64.0/19 maxlen: 19
2a00:bd00::/32 maxlen: 32
2a0f:e880::/29 maxlen: 29
2a02:210::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:9b:54:05:0c:b7:1e:a4:0f:83:19:33:cc:9c:20:8e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af7710df8add64bb9688e0f4581bea67e402c66
Validity
Not Before: Nov 4 17:14:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=abda5153a73135ba2ecb222cf7d1fbd687191b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5b:f2:47:23:09:df:c7:05:d5:4d:80:cb:df:
d3:69:10:bf:56:c9:d4:e6:38:6f:16:97:71:59:99:
79:8f:b7:e1:a0:10:ee:49:63:91:33:4e:08:7f:a4:
73:ca:41:e8:af:c8:ce:c3:36:f6:d4:e8:c3:20:53:
9f:af:a4:1e:3c:28:dd:f7:82:6b:0b:22:86:f5:8d:
a6:b2:b3:58:a8:22:6f:e4:1a:52:85:29:35:02:d4:
f7:17:c6:ca:42:88:db:47:0b:7c:72:bb:59:bd:aa:
f7:5f:7f:3c:bd:4a:c1:88:c4:4b:04:0d:b5:44:c7:
e4:2c:81:c6:93:ce:cb:f2:d8:0a:a2:80:2f:e9:84:
d2:9a:19:7d:34:13:e8:10:ba:28:69:70:be:af:26:
cd:95:4d:35:b7:de:37:e3:75:2f:a9:95:a6:f3:b8:
15:cb:ae:e6:66:07:d9:15:ab:9c:a5:0c:95:d9:c0:
ac:4e:c2:b8:56:2c:1f:e5:5f:54:5c:3d:70:a3:61:
aa:0d:38:99:77:f9:9f:6a:a8:6e:90:59:94:f2:02:
7a:63:25:79:83:66:3f:05:ff:95:5a:cd:c2:ba:df:
68:ef:29:f4:3b:d4:db:c1:4e:e4:d8:07:1c:ab:3e:
4b:c0:e8:44:bc:f6:ca:75:8c:ee:72:0a:1a:1d:a9:
1c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DA:51:53:A7:31:35:BA:2E:CB:22:2C:F7:D1:FB:D6:87:19:1B:06
X509v3 Authority Key Identifier:
keyid:3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/q9pRU6cxNbouyyIs99H71ocZGwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.32.0/20
46.21.16.0/22
46.21.21.0-46.21.22.255
46.21.29.0/24
77.220.64.0/19
185.155.176.0/22
185.155.184.0/23
193.221.216.0/23
193.222.104.0/23
IPv6:
2a00:bd00::/32
2a02:210::/32
2a0f:e880::/29
Signature Algorithm: sha256WithRSAEncryption
50:2e:f1:7d:ba:79:fc:a7:45:09:67:31:27:8c:6f:fb:60:a2:
41:aa:d7:70:ef:8d:a3:7e:e0:b0:6b:a5:28:21:b3:fb:6d:9f:
73:b8:d0:99:de:fd:42:93:bd:67:0b:5c:fc:2f:55:93:49:2f:
38:d2:a5:c6:b3:fe:d1:20:c0:b8:76:e7:27:8d:5a:d8:c1:05:
7a:02:3a:36:37:51:41:67:ee:da:6d:fe:71:01:f5:e8:6d:05:
ae:05:75:0f:8c:64:52:ff:03:d0:c8:d5:e5:c8:35:18:8a:a3:
6c:5f:5b:09:36:e4:8d:1c:19:48:b8:9e:2d:ed:7b:ff:03:eb:
03:a0:9b:0d:20:c6:2b:47:34:69:74:82:4f:41:f5:08:12:df:
49:0e:73:9d:3c:2c:96:a7:6d:0e:17:17:c7:a9:2e:78:27:95:
42:60:13:b9:64:9b:ff:d2:08:28:02:95:77:f9:d5:56:63:c6:
cc:09:47:eb:16:6f:cc:27:30:7c:42:39:a4:42:5f:80:8a:28:
59:e1:76:ac:bf:57:bc:83:80:ff:40:7b:ee:f1:6b:38:23:23:
13:b3:80:d3:25:b8:99:f4:a4:24:7d:d5:c9:d1:04:ac:fd:6c:
db:47:b4:7a:3e:38:10:e9:5d:c3:0c:d4:9d:2e:69:43:2b:5c:
8c:69:44:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:31 2025 by rpki-client