Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/x_ahVwGK1wnmDlpQJtXbUiVjRRA.roa
File: x_ahVwGK1wnmDlpQJtXbUiVjRRA.roa (raw, json)
Hash identifier: NuUnKSBHc+y5xIc6fvQKkbhLDaEUKDHjgUuoW+pwsk8=
Subject key identifier: C7:F6:A1:57:01:8A:D7:09:E6:0E:5A:50:26:D5:DB:52:25:63:45:10
Certificate issuer: /CN=103aa909e8db00f8377a450dbca57d051f4bf435
Certificate serial: 370B5F05
Authority key identifier: 10:3A:A9:09:E8:DB:00:F8:37:7A:45:0D:BC:A5:7D:05:1F:4B:F4:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDqpCejbAPg3ekUNvKV9BR9L9DU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/x_ahVwGK1wnmDlpQJtXbUiVjRRA.roa
Signing time: Sat 01 Jan 2022 12:06:21 +0000
ROA not before: Sat 01 Jan 2022 12:06:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56787
IP address blocks: 31.223.177.0/24 maxlen: 24
31.223.178.0/24 maxlen: 24
31.223.179.0/24 maxlen: 24
31.223.176.0/24 maxlen: 24
31.223.181.0/24 maxlen: 24
31.223.182.0/24 maxlen: 24
31.223.180.0/24 maxlen: 24
31.223.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 923492101 (0x370b5f05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=103aa909e8db00f8377a450dbca57d051f4bf435
Validity
Not Before: Jan 1 12:06:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7f6a157018ad709e60e5a5026d5db5225634510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fa:61:59:9a:19:18:02:b0:06:6f:67:f3:b1:
3c:fb:e1:ba:31:ee:96:6f:25:d4:70:36:48:f7:67:
db:8e:2d:86:cd:f3:30:61:ec:f8:7d:26:29:59:51:
df:3a:c0:a9:4f:1e:02:a6:fd:99:74:5b:04:06:7f:
9a:c8:53:14:06:c8:e0:66:de:3a:e6:35:e1:b7:89:
b0:6f:ac:10:cf:51:2a:b9:b4:7f:b7:db:ab:33:9a:
8c:07:d1:f4:4c:e7:df:3c:78:b9:1d:82:f4:21:26:
71:5b:bb:e9:1e:53:ed:3a:b2:9d:b3:72:8e:bc:48:
b2:74:f4:cd:95:fe:63:f6:c9:9d:06:e5:8d:48:e0:
16:ce:14:fe:19:55:9b:61:ff:67:5b:11:d5:fb:02:
9d:fd:c6:83:b6:e0:68:54:ee:24:a8:af:82:76:d1:
94:76:d2:dd:04:61:1e:02:3e:9d:51:09:ca:d5:22:
46:07:9b:7a:e7:d5:fc:52:98:78:8b:4d:93:99:7b:
48:4a:ed:6f:0e:1e:00:65:9c:6b:cc:4e:ea:01:5d:
d8:aa:e3:8d:0a:98:ac:21:9c:0d:a3:12:6e:9f:f1:
d0:8f:1a:58:ee:5a:8b:13:3a:bc:08:e2:c5:bf:7a:
79:c7:94:be:d8:19:5d:d0:14:aa:a9:4b:ce:34:53:
55:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F6:A1:57:01:8A:D7:09:E6:0E:5A:50:26:D5:DB:52:25:63:45:10
X509v3 Authority Key Identifier:
keyid:10:3A:A9:09:E8:DB:00:F8:37:7A:45:0D:BC:A5:7D:05:1F:4B:F4:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDqpCejbAPg3ekUNvKV9BR9L9DU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/x_ahVwGK1wnmDlpQJtXbUiVjRRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.223.176.0/21
Signature Algorithm: sha256WithRSAEncryption
00:cd:9f:09:39:93:6d:20:fa:d7:74:b0:66:20:5d:0c:2a:ad:
bb:40:d0:27:53:1a:00:a9:d5:5c:da:cb:8b:6a:51:58:5d:9f:
8e:5f:e1:62:08:74:4f:e1:5d:f6:5f:8f:29:07:18:a3:b4:03:
93:32:a0:77:59:0a:2c:70:23:36:35:cb:0e:14:72:07:66:05:
40:ba:fa:fb:1f:e6:65:c1:6c:03:d5:47:4c:62:50:92:1d:15:
f6:33:78:00:2d:18:b3:7a:bd:ae:bd:0f:3d:61:cd:93:f6:25:
a5:ad:ce:2e:83:51:7a:93:74:02:70:78:24:17:6e:90:d3:6d:
9a:7b:ed:80:e6:99:74:9d:32:c4:df:c0:6e:0e:2d:8e:76:20:
a0:7e:d5:7b:bc:6b:91:cb:ee:6d:d3:aa:d0:52:0f:aa:fd:04:
53:e9:aa:92:1f:7c:ff:71:b1:e2:ca:5f:92:74:fb:9a:15:af:
09:55:f4:8e:c1:c0:52:13:be:d4:15:37:e1:92:67:e5:d5:3b:
23:ad:92:e8:89:c3:a4:3a:9f:b4:1f:b4:0c:3e:69:29:49:e7:
06:89:f6:7f:01:9a:ac:77:ff:0e:18:ac:ee:9d:31:16:ee:88:
46:2b:46:56:82:93:14:5b:23:f3:6d:7b:3e:d8:0f:82:e2:47:
ef:63:92:aa
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIENwtfBTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MDNhYTkwOWU4ZGIwMGY4Mzc3YTQ1MGRiY2E1N2QwNTFmNGJmNDM1MB4XDTIyMDEw
MTEyMDYyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzdmNmExNTcwMThh
ZDcwOWU2MGU1YTUwMjZkNWRiNTIyNTYzNDUxMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJT6YVmaGRgCsAZvZ/OxPPvhujHulm8l1HA2SPdn244ths3z
MGHs+H0mKVlR3zrAqU8eAqb9mXRbBAZ/mshTFAbI4GbeOuY14beJsG+sEM9RKrm0
f7fbqzOajAfR9Ezn3zx4uR2C9CEmcVu76R5T7TqynbNyjrxIsnT0zZX+Y/bJnQbl
jUjgFs4U/hlVm2H/Z1sR1fsCnf3Gg7bgaFTuJKivgnbRlHbS3QRhHgI+nVEJytUi
RgebeufV/FKYeItNk5l7SErtbw4eAGWca8xO6gFd2KrjjQqYrCGcDaMSbp/x0I8a
WO5aixM6vAjixb96eceUvtgZXdAUqqlLzjRTVYUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTH9qFXAYrXCeYOWlAm1dtSJWNFEDAfBgNVHSMEGDAWgBQQOqkJ6NsA+Dd6
RQ28pX0FH0v0NTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0VEcXBDZWpiQVBnM2VrVU52S1Y5QlI5TDlEVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWUvMmY3Yzc5LTNmNmItNDQ0YS04ZWM1LTdiZGNhNzUxNmU3NS8x
L3hfYWhWd0dLMXdubURscFFKdFhiVWlWalJSQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWUv
MmY3Yzc5LTNmNmItNDQ0YS04ZWM1LTdiZGNhNzUxNmU3NS8xL0VEcXBDZWpiQVBn
M2VrVU52S1Y5QlI5TDlEVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAx/fsDANBgkqhkiG9w0BAQsFAAOC
AQEAAM2fCTmTbSD613SwZiBdDCqtu0DQJ1MaAKnVXNrLi2pRWF2fjl/hYgh0T+Fd
9l+PKQcYo7QDkzKgd1kKLHAjNjXLDhRyB2YFQLr6+x/mZcFsA9VHTGJQkh0V9jN4
AC0Ys3q9rr0PPWHNk/Ylpa3OLoNRepN0AnB4JBdukNNtmnvtgOaZdJ0yxN/Abg4t
jnYgoH7Ve7xrkcvubdOq0FIPqv0EU+mqkh98/3Gx4spfknT7mhWvCVX0jsHAUhO+
1BU34ZJn5dU7I62S6InDpDqftB+0DD5pKUnnBon2fwGarHf/Dhis7p0xFu6IRitG
VoKTFFsj8217PtgPguJH72OSqg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:10 2023 by rpki-client on console-fra.rpki-client.org