Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/fKF6nlfsI8SYziHlumhtA43WgtA.roa
File: fKF6nlfsI8SYziHlumhtA43WgtA.roa (raw, json)
Hash identifier: IF7MXpMpDWMEk2YK+nFSEJnEX5EgiESjogaQERl8dEY=
Subject key identifier: 7C:A1:7A:9E:57:EC:23:C4:98:CE:21:E5:BA:68:6D:03:8D:D6:82:D0
Certificate issuer: /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial: 0183C58F26529FAEBBF216BB933CB4803A20
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/fKF6nlfsI8SYziHlumhtA43WgtA.roa
Signing time: Tue 11 Oct 2022 05:40:36 +0000
ROA not before: Tue 11 Oct 2022 05:40:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 31.11.50.0/24 maxlen: 24
31.11.51.0/24 maxlen: 24
31.11.48.0/24 maxlen: 24
31.11.49.0/24 maxlen: 24
31.11.52.0/24 maxlen: 24
31.11.53.0/24 maxlen: 24
31.11.54.0/24 maxlen: 24
31.11.55.0/24 maxlen: 24
80.76.165.0/24 maxlen: 24
80.76.166.0/24 maxlen: 24
80.76.169.0/24 maxlen: 24
80.76.167.0/24 maxlen: 24
80.76.168.0/24 maxlen: 24
37.186.51.0/24 maxlen: 24
212.70.100.0/24 maxlen: 24
212.70.101.0/24 maxlen: 24
212.70.102.0/24 maxlen: 24
212.70.103.0/24 maxlen: 24
212.70.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c5:8f:26:52:9f:ae:bb:f2:16:bb:93:3c:b4:80:3a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
Validity
Not Before: Oct 11 05:40:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ca17a9e57ec23c498ce21e5ba686d038dd682d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:13:87:c2:0e:88:60:60:f8:9f:04:19:58:1e:
76:a2:b8:4d:c6:db:15:a1:0b:86:7d:48:cf:99:bc:
22:67:43:48:75:50:1f:07:4d:44:be:09:ee:14:ab:
0b:40:c7:b9:b6:52:8a:3f:d3:73:14:e2:30:d4:e6:
88:5c:82:24:cc:a0:ec:85:f4:68:8f:bd:8f:09:ba:
d2:25:40:de:28:ae:0d:cf:b2:0c:ac:61:bb:74:e9:
11:ee:42:6c:78:01:d6:14:da:ff:ba:1e:d7:93:8b:
e0:1c:e5:c9:71:1c:d1:42:9b:51:b7:2c:c6:64:29:
6f:55:9b:52:24:f1:83:17:35:61:db:ab:bc:d7:98:
9e:e1:02:0b:ad:cc:be:c4:ee:cc:87:3d:c1:e7:08:
8c:3d:89:fa:f9:44:76:7a:1c:72:c7:28:b2:bc:99:
de:37:3d:59:9c:05:8f:02:d1:19:9e:87:be:73:ec:
85:e2:27:9b:f6:05:a4:81:98:a5:3b:2a:5b:c8:72:
ef:df:06:58:dc:0f:79:02:26:5b:7c:d6:07:62:e6:
65:39:26:6d:d9:3f:9b:ae:ae:22:ef:21:36:c9:83:
1a:80:2e:86:81:29:8e:15:e2:3a:49:6f:54:cf:d5:
a1:43:20:82:0b:21:fc:cd:ca:d0:04:b9:9b:87:6b:
8e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A1:7A:9E:57:EC:23:C4:98:CE:21:E5:BA:68:6D:03:8D:D6:82:D0
X509v3 Authority Key Identifier:
keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/fKF6nlfsI8SYziHlumhtA43WgtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.48.0/21
37.186.51.0/24
80.76.165.0-80.76.169.255
212.70.100.0/22
212.70.121.0/24
Signature Algorithm: sha256WithRSAEncryption
16:6e:78:69:0a:f0:1e:dc:e0:a1:a5:2b:4f:01:9f:90:66:fa:
83:65:1b:d4:33:67:8d:a5:7d:9a:b4:c4:c2:20:87:6e:8f:26:
3a:7f:20:c6:86:87:49:d8:64:80:57:60:33:0f:a8:33:c4:5d:
56:be:9d:2c:c3:ed:f8:f7:cd:4b:97:62:14:38:c4:2c:70:df:
4f:bc:ce:ab:fd:95:77:3a:47:c5:77:61:65:af:3c:7f:f2:f3:
13:18:4f:f9:be:96:ff:56:64:4c:f6:49:b5:fe:66:55:0e:14:
52:a8:03:30:35:1c:f6:2b:b7:2a:c0:53:53:2e:f1:d8:74:a9:
60:f7:e0:fe:88:1d:2a:be:6d:a3:69:63:ca:ec:cb:ba:06:ef:
fb:d4:aa:cb:3f:2d:a4:63:02:b8:b3:55:8b:af:6e:33:16:ed:
c3:eb:bd:07:bc:bc:ad:94:a5:8e:c3:b0:41:bd:6f:45:bd:de:
34:3d:36:80:3e:cb:ab:3c:98:02:e6:98:06:f6:18:c2:73:be:
b8:63:17:ce:82:cf:a7:d0:66:95:91:66:05:88:47:08:5f:8a:
9f:03:e5:2a:9c:c9:b6:89:57:32:4d:28:f4:9f:8c:f4:fe:66:
c1:f0:3e:ad:1c:73:50:31:46:f5:01:9b:98:7c:3d:2c:81:8c:
83:6e:df:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:35 2023 by rpki-client on console-ams.rpki-client.org