Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/Pn1ORtuuVK6brNXuG136Z5Wv7LQ.roa
File: Pn1ORtuuVK6brNXuG136Z5Wv7LQ.roa (raw, json)
Hash identifier: k7NX15s1ClvYS7cbh5RHoG22ImeNpzaRQl24aP479Ik=
Subject key identifier: 3E:7D:4E:46:DB:AE:54:AE:9B:AC:D5:EE:1B:5D:FA:67:95:AF:EC:B4
Certificate issuer: /CN=e541a4c152b5f786d623d85c41465299cdda3389
Certificate serial: 086A23BD
Authority key identifier: E5:41:A4:C1:52:B5:F7:86:D6:23:D8:5C:41:46:52:99:CD:DA:33:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/Pn1ORtuuVK6brNXuG136Z5Wv7LQ.roa
Signing time: Sat 01 Jan 2022 01:57:32 +0000
ROA not before: Sat 01 Jan 2022 01:57:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60955
IP address blocks: 31.172.112.0/23 maxlen: 23
31.172.112.0/20 maxlen: 20
31.172.114.0/24 maxlen: 24
31.172.115.0/24 maxlen: 24
31.172.116.0/22 maxlen: 22
185.22.220.0/22 maxlen: 24
193.192.40.0/23 maxlen: 23
2a04:2200::/29 maxlen: 29
2a04:2201::/32 maxlen: 32
2a04:2200::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141173693 (0x86a23bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e541a4c152b5f786d623d85c41465299cdda3389
Validity
Not Before: Jan 1 01:57:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e7d4e46dbae54ae9bacd5ee1b5dfa6795afecb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:88:b2:d4:35:25:bf:14:e2:95:16:62:a4:b7:
51:fc:bc:68:cd:89:7e:b6:b4:13:ef:e5:cf:63:99:
24:1d:16:33:63:a1:6b:68:75:36:32:4d:f8:0d:59:
98:60:c4:e2:46:b2:bf:32:b6:e4:f8:46:4e:ea:65:
cb:ee:1d:10:f6:d3:3c:8c:bb:f5:53:e1:7a:30:9d:
32:a6:f6:c6:b2:23:42:49:80:f6:e3:2a:e0:54:d3:
eb:6c:8d:a7:a8:df:c6:ec:00:a8:24:e9:60:52:7a:
32:88:d8:ad:dd:0b:34:e9:e3:cf:12:e0:80:ae:9d:
b4:00:e7:5e:8c:40:de:66:31:36:f8:3b:80:60:70:
3f:79:52:cc:07:c7:84:18:67:f5:e0:39:06:ea:79:
1e:8b:ea:26:6a:52:68:f4:0b:c5:1e:19:3c:81:d1:
64:18:15:d1:7c:6d:14:c6:f1:3f:4c:7a:08:1c:26:
f6:e4:b0:05:16:0b:5a:1f:cc:54:3b:8c:f3:87:02:
c4:41:ad:c5:4f:c1:51:e7:4d:e7:8b:c8:ae:5b:35:
01:a7:68:67:af:9f:66:e8:13:68:96:3a:2f:2a:7a:
3d:8e:f3:47:eb:87:ec:bf:9e:1a:78:5c:36:84:bf:
38:40:9e:e4:27:f1:ad:e7:86:ac:04:fc:ad:02:32:
3d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7D:4E:46:DB:AE:54:AE:9B:AC:D5:EE:1B:5D:FA:67:95:AF:EC:B4
X509v3 Authority Key Identifier:
keyid:E5:41:A4:C1:52:B5:F7:86:D6:23:D8:5C:41:46:52:99:CD:DA:33:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/Pn1ORtuuVK6brNXuG136Z5Wv7LQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.112.0/20
185.22.220.0/22
193.192.40.0/23
IPv6:
2a04:2200::/29
Signature Algorithm: sha256WithRSAEncryption
20:88:e0:cd:39:6b:5e:9d:e6:40:53:b0:ba:99:27:60:f0:aa:
cc:b4:c6:2a:56:90:73:85:5d:2c:a9:19:90:c5:a4:49:a5:59:
b8:6b:79:9a:ca:d8:92:34:28:42:7a:5f:94:51:66:d9:25:d1:
c7:72:2a:fc:a4:45:09:31:69:d4:05:2b:28:84:28:5c:48:fd:
7e:e4:25:ed:a3:0f:b5:91:7a:4a:64:c2:29:62:77:00:05:ab:
79:58:a7:9f:ef:13:35:46:34:3e:bf:43:e1:60:f4:f6:36:dd:
3f:bb:bd:ef:12:17:38:85:e9:67:a5:25:11:17:f5:a2:58:a6:
0f:1f:90:a8:71:7b:d6:71:e8:c9:13:ef:2a:e4:69:fc:23:b2:
e8:6c:59:9b:9f:9c:56:e3:80:a9:1b:1a:fb:64:da:0b:e4:fb:
33:3e:2d:e8:ea:d4:f1:1a:d4:a6:f8:0c:ad:a5:93:89:d1:cc:
11:0c:df:0f:53:2b:0f:b8:02:80:1a:05:03:e9:21:be:df:0a:
94:7d:13:2d:ea:69:62:68:f8:78:98:8b:e4:4e:ec:de:1a:e0:
27:1b:19:a5:31:fb:8c:0b:fa:1f:a2:e6:e0:7f:de:72:66:d8:
64:86:7d:f4:84:33:0c:b3:ed:e7:71:55:97:00:ca:84:1f:8c:
45:38:e2:4f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:28 2024 by rpki-client on console-fra.rpki-client.org