Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/wL170uSCg8UiLeHCWm6iU44ew58.roa
File: wL170uSCg8UiLeHCWm6iU44ew58.roa (raw, json)
Hash identifier: doKiWfHQbmnHybfZkl8oluNnzwBACySVwxPf9xkFDJs=
Subject key identifier: C0:BD:7B:D2:E4:82:83:C5:22:2D:E1:C2:5A:6E:A2:53:8E:1E:C3:9F
Certificate issuer: /CN=78811e8e36e22280bb2f65a7d2c6034ecf86716c
Certificate serial: 0184AEDED95173BBDE244EA292953527CEE2
Authority key identifier: 78:81:1E:8E:36:E2:22:80:BB:2F:65:A7:D2:C6:03:4E:CF:86:71:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIEejjbiIoC7L2Wn0sYDTs-GcWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/wL170uSCg8UiLeHCWm6iU44ew58.roa
Signing time: Fri 25 Nov 2022 12:59:10 +0000
ROA not before: Fri 25 Nov 2022 12:59:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59702
IP address blocks: 207.189.192.0/20 maxlen: 20
81.25.144.0/20 maxlen: 20
146.66.232.0/21 maxlen: 21
185.80.216.0/22 maxlen: 22
216.158.96.0/20 maxlen: 20
194.37.249.0/24 maxlen: 24
213.244.240.0/21 maxlen: 21
185.16.200.0/22 maxlen: 22
31.31.161.0/24 maxlen: 24
31.31.163.0/24 maxlen: 24
31.31.165.0/24 maxlen: 24
31.31.166.0/24 maxlen: 24
31.31.167.0/24 maxlen: 24
185.47.192.0/24 maxlen: 24
172.103.88.0/21 maxlen: 21
185.47.193.0/24 maxlen: 24
185.47.194.0/24 maxlen: 24
2a03:780::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ae:de:d9:51:73:bb:de:24:4e:a2:92:95:35:27:ce:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78811e8e36e22280bb2f65a7d2c6034ecf86716c
Validity
Not Before: Nov 25 12:59:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0bd7bd2e48283c5222de1c25a6ea2538e1ec39f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c0:c6:aa:f0:35:46:71:45:e2:8d:16:6e:e4:
97:9f:93:75:21:35:15:55:03:7b:24:6b:0c:78:d6:
cd:59:c5:f4:2b:95:cd:42:7b:fb:44:54:24:77:18:
3e:69:94:57:55:b9:7e:66:11:ae:e6:6b:f4:f7:0d:
74:a7:46:77:f8:32:b9:db:cb:fb:fd:4e:f2:ed:4b:
2f:04:fe:a7:a9:90:83:6f:4a:88:39:c1:cd:fa:fe:
80:70:06:9e:c7:4b:b5:1c:73:c3:22:ad:c0:0b:8c:
c9:6f:6e:12:35:7a:77:18:a2:ff:55:7b:37:78:a2:
4e:28:d0:c9:42:43:1c:8a:87:56:9f:b9:d1:66:26:
6e:c1:5b:aa:cc:a2:6b:6f:57:85:a3:0d:16:20:62:
52:61:bb:bf:b8:20:0a:12:be:e9:fc:be:e3:f3:0a:
82:e1:2e:ed:8b:17:ce:f7:09:04:6c:53:b2:bf:d1:
a4:fb:66:16:27:85:1c:e9:9c:44:fb:66:39:46:f3:
2c:db:6f:1d:c0:e1:8f:b3:91:6d:2b:42:10:09:40:
ee:f0:d6:e8:81:f3:76:e4:85:1e:7b:60:36:ff:a2:
68:e7:84:d5:c0:c7:dd:37:3b:5b:c4:16:7d:68:8a:
ac:dc:f5:f3:e0:39:51:fc:a4:6d:04:dd:40:0c:77:
ee:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BD:7B:D2:E4:82:83:C5:22:2D:E1:C2:5A:6E:A2:53:8E:1E:C3:9F
X509v3 Authority Key Identifier:
keyid:78:81:1E:8E:36:E2:22:80:BB:2F:65:A7:D2:C6:03:4E:CF:86:71:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIEejjbiIoC7L2Wn0sYDTs-GcWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/wL170uSCg8UiLeHCWm6iU44ew58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/eIEejjbiIoC7L2Wn0sYDTs-GcWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.31.161.0/24
31.31.163.0/24
31.31.165.0-31.31.167.255
81.25.144.0/20
146.66.232.0/21
172.103.88.0/21
185.16.200.0/22
185.47.192.0-185.47.194.255
185.80.216.0/22
194.37.249.0/24
207.189.192.0/20
213.244.240.0/21
216.158.96.0/20
IPv6:
2a03:780::/32
Signature Algorithm: sha256WithRSAEncryption
61:fe:80:ea:52:5b:cb:7d:33:c2:c1:6d:87:ec:a3:35:44:09:
b4:41:47:ea:53:e5:ba:00:ab:d5:b8:11:f5:82:ca:c9:03:55:
d0:9c:17:b9:4c:75:e6:29:f3:df:b9:da:d0:85:77:d2:e3:83:
1a:98:68:32:eb:31:f3:03:d1:56:e7:4c:19:83:0c:b1:b0:fc:
c0:4c:9f:b7:ad:dd:26:f0:b9:2b:25:58:d0:2c:1c:2c:38:1a:
78:f4:a9:9c:3e:87:a7:90:fc:c6:e3:ad:ec:43:d5:e2:8d:0f:
5f:b7:10:0a:55:1f:ca:bf:26:7e:57:59:c6:d3:96:44:96:57:
26:24:a1:18:e5:87:78:cd:80:61:dc:b3:89:a8:1a:7f:76:9f:
f4:02:ae:89:13:bd:4f:c6:ab:bf:96:e1:1b:ec:ec:ea:ba:ce:
af:ec:df:74:a7:0b:5d:a7:24:dd:cc:48:90:19:5c:47:30:a6:
fc:2f:35:44:70:c6:9e:c6:16:15:29:68:6b:26:4a:6c:b7:a3:
ea:fa:e6:e4:19:38:98:0a:e3:fb:b1:65:40:9d:2f:42:e1:a2:
b7:24:7c:6d:c0:03:a4:54:14:8b:13:55:c8:47:e2:9f:37:db:
a5:34:35:75:96:90:73:ce:cb:7a:a5:ff:23:c0:e3:7c:60:21:
75:40:98:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:04 2023 by rpki-client on console-fra.rpki-client.org