Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/8vnWrWDjQDvvL1psX4iYmhom90E.roa
File: 8vnWrWDjQDvvL1psX4iYmhom90E.roa (raw, json)
Hash identifier: VvtiuMOS3wDdSNqqoCQBKbHIsL9J6MAPiJGCWtXJZEg=
Subject key identifier: F2:F9:D6:AD:60:E3:40:3B:EF:2F:5A:6C:5F:88:98:9A:1A:26:F7:41
Certificate issuer: /CN=6ff362c0765afb7b9804b6d819470007b01f262e
Certificate serial: 01827C45C410563BD61B41939473CEECE3E1
Authority key identifier: 6F:F3:62:C0:76:5A:FB:7B:98:04:B6:D8:19:47:00:07:B0:1F:26:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/8vnWrWDjQDvvL1psX4iYmhom90E.roa
Signing time: Mon 08 Aug 2022 07:05:23 +0000
ROA not before: Mon 08 Aug 2022 07:05:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31399
IP address blocks: 141.113.232.0/21 maxlen: 21
141.113.240.0/21 maxlen: 21
141.113.248.0/21 maxlen: 21
141.113.204.0/22 maxlen: 22
141.113.200.0/22 maxlen: 22
141.113.208.0/21 maxlen: 21
141.113.216.0/21 maxlen: 21
141.113.224.0/21 maxlen: 21
141.113.16.0/21 maxlen: 21
141.113.24.0/22 maxlen: 22
141.113.36.0/22 maxlen: 22
141.113.32.0/22 maxlen: 22
141.113.32.0/21 maxlen: 21
141.113.40.0/21 maxlen: 21
141.113.48.0/21 maxlen: 21
141.113.56.0/21 maxlen: 21
141.113.64.0/21 maxlen: 21
53.0.0.0/8 maxlen: 8
141.113.0.0/21 maxlen: 21
141.113.8.0/21 maxlen: 21
53.3.144.0/21 maxlen: 21
141.113.120.0/21 maxlen: 21
141.113.72.0/21 maxlen: 21
141.113.88.0/22 maxlen: 22
141.113.96.0/21 maxlen: 21
141.113.104.0/21 maxlen: 21
141.113.112.0/21 maxlen: 21
2a03:9e40::/29 maxlen: 29
2a03:9e42::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7c:45:c4:10:56:3b:d6:1b:41:93:94:73:ce:ec:e3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ff362c0765afb7b9804b6d819470007b01f262e
Validity
Not Before: Aug 8 07:05:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2f9d6ad60e3403bef2f5a6c5f88989a1a26f741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:27:f0:0d:7e:58:82:63:f0:11:9c:72:15:60:
70:e3:5d:ac:49:ad:b0:93:b0:9e:d8:c2:4d:20:1e:
79:ef:09:11:ca:0b:5e:ce:48:21:95:32:7a:6d:6e:
05:44:c3:fe:b6:f8:c6:3b:53:b8:a7:9f:f6:69:f2:
3f:dd:12:5c:db:50:dd:01:42:ed:c4:f9:02:0d:b9:
41:b8:a4:2d:8f:4d:8b:7f:27:20:61:d8:6e:1c:09:
2e:0f:a0:5c:ff:5b:6a:f4:47:31:1e:5f:ea:8e:75:
1d:40:b8:86:37:a3:35:90:e2:ff:9d:2d:fe:e5:0f:
72:72:0c:49:d7:5d:c0:ea:ff:75:30:e3:8b:7e:f3:
26:10:a6:8e:f5:d1:d0:15:78:be:ff:5c:9c:83:5d:
02:03:f4:81:76:95:39:e8:36:4d:1e:4f:f8:22:f1:
0d:e7:19:ad:91:ea:84:2d:f7:52:0f:b6:84:64:c8:
cb:49:49:86:b5:63:f4:5c:c6:5e:a2:e6:01:35:3b:
18:0f:89:e0:2d:24:58:94:81:ce:43:46:84:4c:50:
52:57:09:e9:34:40:07:06:52:9c:d6:69:aa:7a:fd:
47:3d:65:bd:ae:a0:e6:cf:15:0d:44:3f:87:d7:5b:
fa:89:58:22:09:2f:44:15:e3:5c:cf:93:7c:18:76:
99:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F9:D6:AD:60:E3:40:3B:EF:2F:5A:6C:5F:88:98:9A:1A:26:F7:41
X509v3 Authority Key Identifier:
keyid:6F:F3:62:C0:76:5A:FB:7B:98:04:B6:D8:19:47:00:07:B0:1F:26:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/8vnWrWDjQDvvL1psX4iYmhom90E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
53.0.0.0/8
141.113.0.0-141.113.27.255
141.113.32.0-141.113.79.255
141.113.88.0/22
141.113.96.0/19
141.113.200.0-141.113.255.255
IPv6:
2a03:9e40::/29
Signature Algorithm: sha256WithRSAEncryption
99:89:94:d0:41:c3:7e:38:2b:0c:db:0b:1d:80:99:00:eb:08:
c2:a1:b1:0e:b5:98:3f:16:17:ce:bd:80:26:51:1b:e8:a0:98:
9d:90:37:fe:da:18:50:ac:b7:38:f2:6d:fb:a4:a0:17:98:ba:
e2:ed:1d:59:f7:23:7f:c9:c5:53:0d:36:f5:99:ff:ed:ef:af:
3b:79:f0:39:ae:59:3a:3d:ff:0f:53:fa:e4:7f:6b:47:41:46:
f1:23:eb:16:f2:85:47:60:fe:34:13:fa:da:55:69:8e:f1:09:
a1:84:9d:e5:39:66:34:38:dc:42:44:b4:b4:0a:9f:96:20:a2:
41:6b:16:bd:92:09:98:48:7a:7a:6e:60:a2:4e:73:55:2e:ae:
10:56:3f:c0:3d:cd:4d:98:97:33:40:53:50:84:0c:ca:b1:e9:
64:d1:17:2c:71:d4:e7:da:40:80:82:73:cf:f7:b7:9e:db:b2:
83:7f:aa:5e:59:d9:75:e2:ae:20:d8:21:df:82:9b:b9:b7:de:
9c:bd:f0:93:cd:3b:3b:1c:66:cc:95:33:31:35:41:0b:18:83:
ed:55:7f:c5:af:29:65:c1:d5:bf:6a:a6:fb:24:33:3e:c8:f6:
a7:ec:61:ed:b0:6f:85:54:f8:43:9a:5d:53:85:75:12:89:33:
42:54:53:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:14 2024 by rpki-client on console-ams.rpki-client.org