Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/EoGE1kC9J2cysrH6dEJV5NNANdU.roa
File: EoGE1kC9J2cysrH6dEJV5NNANdU.roa (raw, json)
Hash identifier: sWo3nDkQEMUWWotWsIcigILQ1W6z8UIoH+aU/+7urLA=
Subject key identifier: 12:81:84:D6:40:BD:27:67:32:B2:B1:FA:74:42:55:E4:D3:40:35:D5
Certificate issuer: /CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121
Certificate serial: 30560490
Authority key identifier: D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/EoGE1kC9J2cysrH6dEJV5NNANdU.roa
Signing time: Sat 01 Jan 2022 13:54:53 +0000
ROA not before: Sat 01 Jan 2022 13:54:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 38176
IP address blocks: 31.47.93.0/24 maxlen: 24
31.47.92.0/24 maxlen: 24
31.47.95.0/24 maxlen: 24
31.47.94.0/24 maxlen: 24
31.47.91.0/24 maxlen: 24
31.47.90.0/24 maxlen: 24
31.47.89.0/24 maxlen: 24
31.47.88.0/24 maxlen: 24
31.47.88.0/21 maxlen: 21
185.198.105.0/24 maxlen: 24
185.198.104.0/24 maxlen: 24
185.198.107.0/24 maxlen: 24
185.198.106.0/24 maxlen: 24
2a0a:1a40::/34 maxlen: 34
2a0a:1a40:4000::/34 maxlen: 34
2a0a:1a40:8000::/34 maxlen: 34
2a0a:1a40:c000::/34 maxlen: 34
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 810943632 (0x30560490)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121
Validity
Not Before: Jan 1 13:54:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=128184d640bd276732b2b1fa744255e4d34035d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:14:4a:5a:30:75:7b:78:51:d6:85:90:1c:04:
8d:8f:e2:2b:29:36:79:16:2e:1a:98:70:fc:e4:92:
da:8b:d7:8e:f8:43:cd:5e:1f:a8:26:59:ba:87:9e:
a2:bc:c8:ac:42:dd:17:74:24:ea:6d:5f:78:52:f6:
ab:32:97:b5:f5:ee:89:90:0a:5f:8d:89:77:7a:59:
f3:34:8d:6d:24:20:5e:93:30:d3:6c:7f:2d:6d:6d:
6f:43:2a:7f:94:d1:d9:9d:ad:9a:50:8f:37:ef:75:
23:b9:86:42:70:1a:e5:61:07:36:0b:f9:4a:81:9b:
a0:5f:39:74:99:9b:d5:b2:55:75:3b:59:e1:4d:d7:
0c:df:69:70:3c:eb:79:42:8a:10:53:f7:ea:ce:3f:
37:bc:11:1e:2f:51:38:c8:5b:31:86:e2:cb:91:19:
e8:1c:bc:03:94:d5:53:e2:93:9c:dc:00:7c:3a:0e:
2b:4c:2f:a4:83:55:cd:86:ea:f9:2a:45:54:af:d1:
a5:95:72:23:57:f1:9b:46:f8:32:92:8d:70:ba:f2:
cb:91:3a:7f:d8:7e:7b:3e:e3:43:a3:65:43:10:43:
79:40:55:c3:63:a8:81:6f:60:c8:70:fd:cf:78:d4:
99:60:f1:72:87:f7:b6:b7:cc:05:2f:c0:59:37:a3:
e0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:81:84:D6:40:BD:27:67:32:B2:B1:FA:74:42:55:E4:D3:40:35:D5
X509v3 Authority Key Identifier:
keyid:D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/EoGE1kC9J2cysrH6dEJV5NNANdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.47.88.0/21
185.198.104.0/22
IPv6:
2a0a:1a40::/32
Signature Algorithm: sha256WithRSAEncryption
56:5b:50:28:3d:cf:c6:e3:dd:82:b6:69:7c:a2:9a:52:fb:da:
aa:e0:a3:12:21:e7:3f:1c:e4:67:64:e9:ed:92:91:12:31:5d:
48:be:93:52:4e:14:45:6b:31:b6:36:3d:dd:e5:d3:76:a9:18:
bf:04:d8:be:9c:fd:b7:87:56:c9:da:8b:4f:41:93:41:8a:c5:
2d:2a:d5:10:8f:db:7b:4d:5a:a2:3c:a6:63:67:2e:3a:b3:68:
d4:e4:a1:3a:bf:32:d1:e1:c5:ed:36:3b:18:b9:5c:c7:86:5d:
05:52:45:79:e6:a3:64:d6:11:c7:15:84:8e:e5:39:61:57:25:
f8:fe:61:8a:e6:45:96:55:ff:d1:23:f4:2a:88:cc:af:59:9a:
ce:59:2e:3c:cb:64:39:fa:ee:1b:97:73:fa:6b:08:47:6c:34:
7a:d2:0c:4b:7b:81:8c:1f:81:12:8d:55:27:35:6c:56:bd:f5:
6b:2a:9c:b5:c0:a6:ed:49:73:3d:89:d4:82:b6:35:e9:06:b0:
3a:77:c6:7f:b2:8e:8a:50:3b:d7:50:49:da:7b:99:2f:01:c0:
d4:31:5c:e6:b1:6c:ea:0b:da:b5:fa:35:05:6b:f2:35:4e:89:
fc:0f:3d:fe:8c:89:57:1f:02:7f:43:74:36:c0:31:f2:c1:84:
e1:9e:72:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:49 2023 by rpki-client on console-ams.rpki-client.org