Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/yKseOtU9RoxOtZlcqeCtGvGm1rk.roa
File: yKseOtU9RoxOtZlcqeCtGvGm1rk.roa (raw, json)
Hash identifier: Y1NqBOiHibhCfbzWuaIedgE14W2xZGE5KFpsScacMks=
Subject key identifier: C8:AB:1E:3A:D5:3D:46:8C:4E:B5:99:5C:A9:E0:AD:1A:F1:A6:D6:B9
Certificate issuer: /CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Certificate serial: 0184852AC7C89BFED763F0C6936A5BFC0E45
Authority key identifier: 9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/yKseOtU9RoxOtZlcqeCtGvGm1rk.roa
Signing time: Thu 17 Nov 2022 10:38:04 +0000
ROA not before: Thu 17 Nov 2022 10:38:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209711
IP address blocks: 45.145.20.0/24 maxlen: 24
193.53.87.0/24 maxlen: 24
37.156.246.0/24 maxlen: 24
193.53.98.0/24 maxlen: 24
193.53.103.0/24 maxlen: 24
109.230.196.0/24 maxlen: 24
193.53.245.0/24 maxlen: 24
45.139.222.0/24 maxlen: 24
31.214.152.0/24 maxlen: 24
89.45.94.0/24 maxlen: 24
31.14.52.0/24 maxlen: 24
185.111.245.0/24 maxlen: 24
185.111.244.0/24 maxlen: 24
185.111.246.0/24 maxlen: 24
185.111.247.0/24 maxlen: 24
93.113.96.0/24 maxlen: 24
31.214.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:85:2a:c7:c8:9b:fe:d7:63:f0:c6:93:6a:5b:fc:0e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Validity
Not Before: Nov 17 10:38:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8ab1e3ad53d468c4eb5995ca9e0ad1af1a6d6b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b7:82:83:40:80:60:ce:e8:ae:87:c3:f3:5c:
15:2e:71:74:2c:9b:cf:73:88:32:48:0b:17:1d:60:
ff:25:ea:27:83:cf:1a:fd:16:65:f8:8b:4a:d7:34:
23:c3:9b:92:59:e5:f9:26:86:2e:d8:4b:93:3b:43:
a5:f7:51:a2:56:d4:2a:25:73:81:dd:7d:33:39:f0:
4b:8d:c6:6d:e1:66:70:94:c0:d6:7e:f9:8d:81:c8:
9a:65:4f:ed:86:53:fe:74:72:43:2f:e0:2b:6f:ad:
ac:cd:2b:47:cf:e8:d9:be:8f:71:d8:60:4a:4d:4f:
e1:ee:07:1d:ca:d4:fb:2d:77:bf:58:d5:bd:8f:8a:
10:45:6e:64:30:53:ff:78:1f:d3:16:d6:41:fe:e1:
f9:9e:1c:2b:f9:b4:65:eb:7b:b1:68:a9:00:90:c6:
48:ed:73:e9:5d:83:12:b7:23:9b:b4:0a:18:86:9c:
c2:ce:3a:dd:1a:24:17:b9:41:b5:2c:02:20:4c:db:
27:dc:3d:13:a2:4c:28:42:fd:39:e7:b4:49:d1:44:
2f:41:71:cf:90:f5:f2:22:35:14:cd:e6:f9:ba:4b:
16:7f:f9:1b:13:42:d6:c1:e6:53:a9:84:5a:f3:bd:
ab:4e:7e:25:9f:a6:b8:32:bf:a8:40:2c:30:b3:25:
98:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AB:1E:3A:D5:3D:46:8C:4E:B5:99:5C:A9:E0:AD:1A:F1:A6:D6:B9
X509v3 Authority Key Identifier:
keyid:9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/yKseOtU9RoxOtZlcqeCtGvGm1rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.52.0/24
31.214.129.0/24
31.214.152.0/24
37.156.246.0/24
45.139.222.0/24
45.145.20.0/24
89.45.94.0/24
93.113.96.0/24
109.230.196.0/24
185.111.244.0/22
193.53.87.0/24
193.53.98.0/24
193.53.103.0/24
193.53.245.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:ee:3c:26:01:f5:e3:d2:24:02:e3:6d:f7:fe:3f:bf:b9:05:
a3:23:3e:7a:b7:f2:a0:18:4e:59:1a:3a:75:6f:30:83:e9:b3:
20:a4:29:1f:d9:bd:ed:30:78:6e:2c:18:9c:00:8f:4e:c9:9b:
16:dd:56:57:ad:17:8a:c4:1d:41:0a:9e:be:56:6b:13:8a:cf:
69:c8:78:56:3d:52:28:7f:a2:6c:fd:26:d1:ea:91:20:e8:9c:
5a:25:bc:a3:f6:d1:90:18:0c:52:ed:a2:a5:43:66:3d:66:5f:
61:1a:b3:62:80:66:81:17:93:c0:9b:6b:64:e6:7a:cb:a8:0a:
57:3f:83:89:e1:7c:a7:ef:4a:90:7e:c6:1c:dc:06:bb:78:cb:
9d:89:73:78:47:7c:c1:85:d3:48:89:9b:f4:94:56:88:51:65:
5d:87:6e:ab:bd:3e:70:f9:ef:f0:bb:45:ef:62:d9:d4:bb:34:
3f:dc:e4:49:8a:b8:b2:06:b5:0a:9a:1b:e2:fd:1f:92:6f:0f:
c2:ba:d6:e3:2f:2d:02:4e:7c:41:d8:ef:37:21:2e:24:30:35:
a5:c3:08:cf:9c:3f:0e:d9:f9:8e:a4:71:ed:5f:c6:71:1b:59:
8c:49:9f:1d:ec:f4:87:99:0c:72:86:4a:97:52:f1:e7:e8:ea:
6e:02:8b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:00 2023 by rpki-client on console-fra.rpki-client.org