Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/iiP8RVWDR1SLx35YDt-Eu8WsG0I.roa
File: iiP8RVWDR1SLx35YDt-Eu8WsG0I.roa (raw, json)
Hash identifier: lFgg0OtNK6vzVsTqcQmGdvEjHztgGady8CvVDEPHSSo=
Subject key identifier: 8A:23:FC:45:55:83:47:54:8B:C7:7E:58:0E:DF:84:BB:C5:AC:1B:42
Certificate issuer: /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial: 0184618DE4D28E76258512A1EE58F82BD0C5
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/iiP8RVWDR1SLx35YDt-Eu8WsG0I.roa
Signing time: Thu 10 Nov 2022 12:39:59 +0000
ROA not before: Thu 10 Nov 2022 12:39:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 31.11.50.0/24 maxlen: 24
31.11.51.0/24 maxlen: 24
31.11.48.0/24 maxlen: 24
31.11.49.0/24 maxlen: 24
31.11.52.0/24 maxlen: 24
31.11.53.0/24 maxlen: 24
31.11.54.0/24 maxlen: 24
31.11.55.0/24 maxlen: 24
37.186.35.0/24 maxlen: 24
37.186.36.0/24 maxlen: 24
37.186.37.0/24 maxlen: 24
37.186.32.0/24 maxlen: 24
37.186.33.0/24 maxlen: 24
37.186.34.0/24 maxlen: 24
37.186.38.0/24 maxlen: 24
37.186.41.0/24 maxlen: 24
37.186.42.0/24 maxlen: 24
37.186.43.0/24 maxlen: 24
37.186.44.0/24 maxlen: 24
37.186.39.0/24 maxlen: 24
37.186.40.0/24 maxlen: 24
37.186.48.0/24 maxlen: 24
37.186.49.0/24 maxlen: 24
37.186.50.0/24 maxlen: 24
37.186.51.0/24 maxlen: 24
37.186.45.0/24 maxlen: 24
37.186.46.0/24 maxlen: 24
37.186.47.0/24 maxlen: 24
37.186.55.0/24 maxlen: 24
37.186.56.0/24 maxlen: 24
37.186.57.0/24 maxlen: 24
37.186.58.0/24 maxlen: 24
37.186.52.0/24 maxlen: 24
37.186.53.0/24 maxlen: 24
37.186.54.0/24 maxlen: 24
37.186.62.0/24 maxlen: 24
37.186.63.0/24 maxlen: 24
37.186.59.0/24 maxlen: 24
37.186.60.0/24 maxlen: 24
37.186.61.0/24 maxlen: 24
185.247.88.0/24 maxlen: 24
185.247.89.0/24 maxlen: 24
185.247.90.0/24 maxlen: 24
185.247.91.0/24 maxlen: 24
103.17.2.0/24 maxlen: 24
103.17.3.0/24 maxlen: 24
103.17.0.0/24 maxlen: 24
103.17.1.0/24 maxlen: 24
80.76.162.0/24 maxlen: 24
80.76.163.0/24 maxlen: 24
80.76.164.0/24 maxlen: 24
80.76.165.0/24 maxlen: 24
80.76.160.0/24 maxlen: 24
80.76.161.0/24 maxlen: 24
80.76.166.0/24 maxlen: 24
80.76.169.0/24 maxlen: 24
80.76.170.0/24 maxlen: 24
80.76.171.0/24 maxlen: 24
80.76.172.0/24 maxlen: 24
80.76.167.0/24 maxlen: 24
80.76.168.0/24 maxlen: 24
80.76.173.0/24 maxlen: 24
80.76.174.0/24 maxlen: 24
80.76.175.0/24 maxlen: 24
103.23.124.0/24 maxlen: 24
103.23.125.0/24 maxlen: 24
103.23.126.0/24 maxlen: 24
103.23.127.0/24 maxlen: 24
212.70.96.0/24 maxlen: 24
212.70.97.0/24 maxlen: 24
212.70.98.0/24 maxlen: 24
212.70.102.0/24 maxlen: 24
212.70.99.0/24 maxlen: 24
212.70.100.0/24 maxlen: 24
212.70.101.0/24 maxlen: 24
212.70.103.0/24 maxlen: 24
212.70.106.0/24 maxlen: 24
212.70.107.0/24 maxlen: 24
212.70.108.0/24 maxlen: 24
212.70.109.0/24 maxlen: 24
212.70.110.0/24 maxlen: 24
212.70.111.0/24 maxlen: 24
212.70.112.0/24 maxlen: 24
212.70.113.0/24 maxlen: 24
212.70.114.0/24 maxlen: 24
212.70.115.0/24 maxlen: 24
212.70.116.0/24 maxlen: 24
212.70.117.0/24 maxlen: 24
212.70.118.0/24 maxlen: 24
212.70.120.0/24 maxlen: 24
212.70.121.0/24 maxlen: 24
212.70.122.0/24 maxlen: 24
212.70.119.0/24 maxlen: 24
212.70.123.0/24 maxlen: 24
212.70.124.0/24 maxlen: 24
212.70.125.0/24 maxlen: 24
212.70.127.0/24 maxlen: 24
212.70.126.0/24 maxlen: 24
103.14.208.0/24 maxlen: 24
103.14.209.0/24 maxlen: 24
103.14.210.0/24 maxlen: 24
103.14.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:61:8d:e4:d2:8e:76:25:85:12:a1:ee:58:f8:2b:d0:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
Validity
Not Before: Nov 10 12:39:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a23fc45558347548bc77e580edf84bbc5ac1b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e2:58:29:73:ae:86:93:b1:07:65:86:44:09:
43:c1:34:a9:c9:7c:a4:e4:14:e2:36:ec:35:be:96:
67:97:f6:aa:a8:3e:cd:0b:c1:36:35:52:07:bc:f1:
fd:47:52:19:4d:35:24:07:fb:1d:f4:5e:b4:8d:af:
23:e5:1f:f9:b8:f0:2f:96:84:d1:68:c4:69:01:a3:
0b:7a:f3:6c:e8:b7:c8:19:08:b1:0c:24:cb:8b:f3:
d3:95:07:cc:48:25:0a:26:08:f7:a0:bf:be:56:02:
22:3d:d4:08:aa:a3:de:0e:fc:b9:c3:fd:aa:e0:59:
26:f5:ca:c0:2f:74:07:3d:98:ed:f4:27:2b:72:1e:
c1:51:be:78:8c:ee:33:a1:c1:9d:5b:46:6a:7c:a9:
ad:66:ab:c4:82:95:32:45:63:d8:d8:7f:bf:f8:8f:
24:1e:d7:1c:32:0a:4d:a4:f6:d2:b0:73:bf:47:57:
be:02:e3:a1:c6:d4:61:2c:87:4b:15:c2:e5:2b:db:
28:74:e1:81:3f:6f:0f:4f:de:24:c9:88:e4:7f:7e:
5c:75:8b:d9:69:9d:51:24:65:ef:f7:a9:d1:97:89:
31:f3:ad:82:b3:32:90:23:d0:93:39:91:f3:d0:67:
a0:c5:e8:db:07:6a:e3:f3:a3:71:76:c9:70:fa:b3:
ec:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:23:FC:45:55:83:47:54:8B:C7:7E:58:0E:DF:84:BB:C5:AC:1B:42
X509v3 Authority Key Identifier:
keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/iiP8RVWDR1SLx35YDt-Eu8WsG0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.48.0/21
37.186.32.0/19
80.76.160.0/20
103.14.208.0/22
103.17.0.0/22
103.23.124.0/22
185.247.88.0/22
212.70.96.0/21
212.70.106.0-212.70.127.255
Signature Algorithm: sha256WithRSAEncryption
7f:18:58:98:56:17:92:07:a0:17:3d:be:f1:a2:eb:3a:54:38:
3f:40:b9:9b:1e:d4:3f:d7:74:d2:b4:b0:e3:7d:a9:aa:25:67:
45:2e:4f:46:a5:34:f9:2d:c6:e0:bd:ad:78:e5:51:2c:ba:e2:
9d:57:7a:c7:aa:13:56:2f:04:36:3e:d6:cf:e6:81:51:1f:9d:
2d:62:2b:66:35:5a:9a:bf:75:6e:2b:ed:63:22:11:00:c5:c4:
cd:7f:e3:36:91:ec:61:b9:5a:4a:b7:fa:27:24:49:ff:6e:b9:
d4:fc:93:c1:e7:93:88:ca:bc:26:36:d8:9b:b2:45:ef:62:a0:
4e:94:94:72:aa:64:9d:33:f1:16:2c:75:64:dd:75:3b:c7:e3:
5b:a2:af:0c:1e:e9:1b:fb:0d:8f:d5:f5:97:26:4e:de:47:ee:
1c:79:b2:24:21:e8:21:e1:cc:02:87:0b:b6:bc:5e:e8:9e:15:
53:5e:00:39:e0:b1:05:ec:47:6b:db:90:49:f8:76:e2:e7:15:
e7:50:c0:7c:15:9f:f6:95:77:46:72:eb:4f:9e:f6:db:75:6d:
d4:96:ef:97:32:20:1a:7c:a6:dc:e4:06:38:db:f0:a0:c1:82:
2c:67:b2:00:a9:d7:e3:eb:23:8d:fa:a0:af:af:c5:92:5d:12:
2d:e9:6e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:41 2023 by rpki-client on console-fra.rpki-client.org