Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/0dCmj27htiflasej9oJNWh5cOQs.roa
File: 0dCmj27htiflasej9oJNWh5cOQs.roa (raw, json)
Hash identifier: c0GQ+9M5+LQHKl0hRkCwROYfDXd9Mge4TZHadfcMDNc=
Subject key identifier: D1:D0:A6:8F:6E:E1:B6:27:E5:6A:C7:A3:F6:82:4D:5A:1E:5C:39:0B
Certificate issuer: /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial: 10C6292F
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/0dCmj27htiflasej9oJNWh5cOQs.roa
Signing time: Mon 14 Mar 2022 06:31:46 +0000
ROA not before: Mon 14 Mar 2022 06:31:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211559
IP address blocks: 31.11.48.0/21 maxlen: 21
80.76.166.0/24 maxlen: 24
80.76.165.0/24 maxlen: 24
80.76.168.0/23 maxlen: 23
80.76.167.0/24 maxlen: 24
80.76.166.0/23 maxlen: 23
37.186.60.0/22 maxlen: 22
37.186.60.0/24 maxlen: 24
212.70.104.0/24 maxlen: 24
212.70.105.0/24 maxlen: 24
212.70.101.0/24 maxlen: 24
212.70.100.0/24 maxlen: 24
212.70.103.0/24 maxlen: 24
212.70.102.0/24 maxlen: 24
212.70.123.0/24 maxlen: 24
212.70.120.0/24 maxlen: 24
185.247.88.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 281422127 (0x10c6292f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
Validity
Not Before: Mar 14 06:31:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d1d0a68f6ee1b627e56ac7a3f6824d5a1e5c390b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:86:40:be:30:0d:f3:f7:4c:d0:d4:90:f0:03:
99:c2:b9:cb:96:8f:52:e5:0e:6d:f7:01:0b:e3:86:
04:63:3e:33:03:ab:2f:4e:f5:52:c3:30:d3:bb:99:
59:2e:df:4f:ce:73:25:a0:97:a6:83:00:51:91:fc:
5d:e0:5b:f1:6f:81:c4:d1:76:cc:0f:dd:6a:42:81:
f1:6a:4b:5c:90:c3:22:65:27:3b:f9:66:0b:22:c3:
f4:76:c7:6c:c9:f3:64:8f:5a:5f:5a:db:d1:5e:8e:
1b:47:51:5d:d5:ce:fa:7c:cb:88:b2:fb:93:f8:ef:
9e:32:dc:72:90:e3:1f:2f:af:e5:f2:71:f5:03:fa:
55:19:fb:34:ce:6e:e8:8d:a6:df:03:af:4e:74:fc:
7c:70:bd:c3:e0:a0:d6:e1:c0:03:4b:98:be:27:98:
ef:0a:5d:94:68:97:47:41:fe:6f:19:9b:83:0d:10:
57:5b:11:44:43:47:09:9a:ab:fa:30:8d:97:ba:c7:
33:81:07:27:d2:ae:b5:9b:7a:5b:52:ce:18:df:f8:
26:2e:18:b6:00:8d:9f:74:40:11:ef:3b:9c:c6:2e:
9f:58:07:85:12:cb:40:4c:74:4b:9e:a9:da:5a:d7:
20:e1:82:79:0e:8d:1f:e6:f4:58:86:13:56:7f:f9:
bb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D0:A6:8F:6E:E1:B6:27:E5:6A:C7:A3:F6:82:4D:5A:1E:5C:39:0B
X509v3 Authority Key Identifier:
keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/0dCmj27htiflasej9oJNWh5cOQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.48.0/21
37.186.60.0/22
80.76.165.0-80.76.169.255
185.247.88.0/22
212.70.100.0-212.70.105.255
212.70.120.0/24
212.70.123.0/24
Signature Algorithm: sha256WithRSAEncryption
40:ce:36:7f:46:43:20:e1:f7:7e:73:a7:cf:29:2c:dc:4a:e3:
48:57:fe:66:2e:ef:a2:45:3b:77:9c:4b:72:88:e4:12:27:79:
df:7c:2b:0d:e3:bf:8f:6c:14:10:f2:59:c7:51:56:a9:77:69:
6b:fb:6d:50:d1:f8:ba:4e:b0:1c:f2:3e:98:99:7f:3f:f1:c2:
64:0d:20:5c:34:88:2d:4d:1e:1d:c8:31:e5:9e:9d:e5:e0:a3:
4e:aa:43:3b:d7:53:c8:62:0c:ed:c4:5a:24:38:15:a5:70:43:
4b:de:df:4c:5a:0d:de:b4:4f:76:c2:5d:68:27:97:a4:35:38:
39:32:1d:59:47:fc:3c:34:71:a6:68:e9:60:6c:a6:c6:91:f7:
1a:06:25:b8:c5:85:f7:af:fa:ab:8a:2e:7a:53:f6:be:14:bb:
aa:09:0c:a5:fa:6b:26:49:4d:5c:05:e1:d9:d2:fd:bf:2c:c0:
08:5b:78:ed:99:0c:d7:b0:cd:09:33:7a:9b:50:71:56:78:53:
fa:45:20:a5:bf:6c:ff:cd:9c:a5:78:50:88:b3:33:8f:0a:c9:
a1:9d:af:d2:81:3a:b2:22:67:4f:5b:fc:a1:b6:fd:c2:25:4f:
eb:f8:3c:bb:cd:28:25:8b:97:6f:d0:fa:c2:d7:ce:15:1d:19:
be:5d:c9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:35 2023 by rpki-client on console-ams.rpki-client.org