Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/gdEJ9poj_h016pB3Mu0qi35J1jQ.roa
File: gdEJ9poj_h016pB3Mu0qi35J1jQ.roa (raw, json)
Hash identifier: l/BsTtyPkdnk9AGlnBqpuS5cZEIJPpraKa2Ae6QwKXc=
Subject key identifier: 81:D1:09:F6:9A:23:FE:1D:35:EA:90:77:32:ED:2A:8B:7E:49:D6:34
Certificate issuer: /CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8
Certificate serial: 9D4CD8
Authority key identifier: CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/gdEJ9poj_h016pB3Mu0qi35J1jQ.roa
Signing time: Sat 01 Jan 2022 00:53:05 +0000
ROA not before: Sat 01 Jan 2022 00:53:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59491
IP address blocks: 91.238.134.0/23 maxlen: 23
31.6.70.0/23 maxlen: 23
31.6.68.0/23 maxlen: 23
178.19.96.0/24 maxlen: 24
178.19.99.0/24 maxlen: 24
178.19.104.0/21 maxlen: 21
212.59.229.0/24 maxlen: 24
212.59.240.0/23 maxlen: 23
212.59.243.0/24 maxlen: 24
212.59.244.0/22 maxlen: 22
91.188.125.0/24 maxlen: 24
185.24.216.0/24 maxlen: 24
185.24.218.0/23 maxlen: 23
2a02:2430:5::/48 maxlen: 48
2a02:2430:40::/42 maxlen: 42
2a02:2430:3::/48 maxlen: 48
2a02:2430:7::/48 maxlen: 48
2a02:2430:6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10308824 (0x9d4cd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8
Validity
Not Before: Jan 1 00:53:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=81d109f69a23fe1d35ea907732ed2a8b7e49d634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0f:91:18:f7:e7:6b:39:7f:20:5c:44:4e:41:
2a:c6:6a:58:c9:b6:7e:b7:89:e1:4a:92:b9:15:3d:
72:09:f4:a9:ba:37:13:e2:43:8c:3a:35:72:f6:60:
79:23:f8:31:ad:9a:9e:51:75:d8:85:06:7a:3d:2a:
27:b7:3b:d0:f5:ad:92:12:92:14:2f:6b:5c:de:c3:
7e:7e:b0:31:a2:69:e8:c4:82:81:de:0d:6a:74:55:
43:78:a5:c6:ad:c4:b1:e1:34:4a:24:df:2c:c9:23:
7e:2b:0e:db:5d:da:e5:49:82:bf:90:fe:1f:53:aa:
52:66:6b:ec:c7:52:bb:e4:01:0e:ec:8d:69:fa:06:
e2:1a:ec:f3:8e:0e:c1:9c:ce:67:41:52:d6:da:6c:
a1:e5:8a:f6:2d:51:a5:95:b7:19:df:4c:08:6b:c2:
14:9e:58:21:12:64:cd:25:17:81:2a:c7:6e:e5:5d:
bc:8c:19:aa:a4:7f:94:6f:4f:bb:81:d5:07:83:b1:
4c:3f:1c:ea:a6:49:ab:f5:11:2b:be:1a:09:43:55:
dc:9f:50:2c:09:9e:fa:c3:ca:48:d4:3a:48:a8:e8:
1d:1b:da:7b:8f:9e:c6:e1:89:21:64:48:e1:10:46:
54:af:89:41:af:34:10:81:14:7b:7f:11:9c:37:3c:
20:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D1:09:F6:9A:23:FE:1D:35:EA:90:77:32:ED:2A:8B:7E:49:D6:34
X509v3 Authority Key Identifier:
keyid:CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/gdEJ9poj_h016pB3Mu0qi35J1jQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.68.0/22
91.188.125.0/24
91.238.134.0/23
178.19.96.0/24
178.19.99.0/24
178.19.104.0/21
185.24.216.0/24
185.24.218.0/23
212.59.229.0/24
212.59.240.0/23
212.59.243.0-212.59.247.255
IPv6:
2a02:2430:3::/48
2a02:2430:5::-2a02:2430:7:ffff:ffff:ffff:ffff:ffff
2a02:2430:40::/42
Signature Algorithm: sha256WithRSAEncryption
7c:a5:c4:dc:6a:8c:a2:26:59:1a:6c:90:cf:2d:08:f1:b1:7f:
58:8d:93:f4:f3:c1:22:e2:d7:cf:68:84:e4:e4:1f:fb:77:a8:
76:7d:84:92:09:fb:a4:64:34:f4:8b:57:78:16:6b:e5:5a:ae:
ba:18:fa:f5:ac:cb:57:f3:6a:d7:d7:4e:a9:4f:9e:11:7e:1b:
58:54:41:4f:9e:75:7b:db:3d:de:d4:a5:70:89:6c:68:7f:23:
a0:9a:a3:4f:9c:a4:e0:11:45:52:03:5b:26:ca:56:33:e3:bd:
f5:73:ee:73:99:0c:b0:40:65:0f:11:60:f7:5a:9c:25:cd:b4:
f8:78:2c:6f:97:f0:28:b8:89:37:88:28:f7:ee:54:10:cf:5d:
0f:70:64:06:50:0e:05:53:65:11:c6:5f:89:99:13:ae:bb:9f:
3b:d4:4e:3e:1e:55:9b:31:cd:39:99:03:09:ee:eb:3f:5d:e1:
6f:f1:43:ee:9c:72:fc:11:1d:84:25:7b:74:5d:92:29:5e:67:
15:21:ff:df:ed:62:9f:2e:42:c6:a3:9d:38:9c:fe:f5:7b:7e:
e1:5c:be:b3:5d:eb:b4:97:42:5a:04:b4:14:62:09:3e:d1:b9:
1c:a2:44:6e:5b:e6:84:97:92:27:69:81:c7:aa:62:46:7c:db:
83:8d:b0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:57 2023 by rpki-client on console-fra.rpki-client.org