Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/L99wcACGlVx34U5mZ9pz7BY2sL0.roa
File: L99wcACGlVx34U5mZ9pz7BY2sL0.roa (raw, json)
Hash identifier: 7fBWNi0lWk1kiCxufL68UPY9wmtNWjXLpx94uQSzPz0=
Subject key identifier: 2F:DF:70:70:00:86:95:5C:77:E1:4E:66:67:DA:73:EC:16:36:B0:BD
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018505E12FCF3EEADC110B465A0B949A62CB
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/L99wcACGlVx34U5mZ9pz7BY2sL0.roa
Signing time: Mon 12 Dec 2022 10:28:41 +0000
ROA not before: Mon 12 Dec 2022 10:28:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35298
IP address blocks: 31.173.176.0/20 maxlen: 20
37.29.76.0/22 maxlen: 22
188.162.0.0/16 maxlen: 24
78.41.100.0/22 maxlen: 22
178.176.154.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:e1:2f:cf:3e:ea:dc:11:0b:46:5a:0b:94:9a:62:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 10:28:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2fdf70700086955c77e14e6667da73ec1636b0bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:24:45:77:ca:9e:9f:cb:4b:e5:fb:85:70:c8:
d3:c6:5e:c5:ca:27:29:8f:43:f4:8d:22:46:f1:3d:
01:55:df:8d:4a:b8:59:95:39:36:6b:47:b6:51:b8:
74:2f:24:32:9a:b8:9d:f4:b7:a8:66:c2:e5:94:e5:
1d:3f:80:75:6f:56:1f:c6:03:9d:5d:0e:19:fa:56:
36:e5:5c:85:a0:3a:85:a6:05:77:5a:b9:d6:7e:ff:
b7:0d:c0:13:74:b4:70:f0:8a:81:f8:e5:a9:11:c6:
19:dd:90:5c:86:73:f9:28:b9:0a:26:25:26:28:b0:
c2:0f:db:d0:5e:14:17:46:2a:40:d0:c3:56:e9:b7:
f6:37:9a:f9:cc:24:3a:bd:87:9a:5b:37:9f:54:a3:
7c:39:b3:2b:d5:9f:54:ba:a1:e5:3b:60:69:ec:be:
57:7e:13:fc:44:99:08:fd:1e:a7:1f:a3:70:56:73:
71:15:b7:e1:c1:cf:ee:91:9e:26:f2:17:7a:79:29:
62:4b:c5:bb:38:b2:df:e1:7a:84:5b:b5:f2:ca:3a:
5e:c7:ae:95:71:c9:4a:1e:7e:22:db:a2:83:31:b5:
02:23:7c:e6:88:05:2e:7b:77:a8:25:1b:79:af:d0:
2f:17:f3:fb:d7:b6:8a:52:a9:29:9b:c0:2d:39:69:
7b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DF:70:70:00:86:95:5C:77:E1:4E:66:67:DA:73:EC:16:36:B0:BD
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/L99wcACGlVx34U5mZ9pz7BY2sL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.176.0/20
37.29.76.0/22
78.41.100.0/22
178.176.154.0/23
188.162.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6b:a5:16:92:f6:09:3b:1a:62:38:69:ea:ba:d3:67:e3:c3:a0:
b0:6a:29:7e:4a:58:ad:da:27:db:a4:e6:c6:8c:4c:d4:e4:fb:
61:51:52:03:db:d8:d5:6a:9c:8d:83:b4:cb:f8:aa:3f:ba:1b:
92:cf:97:f7:39:65:96:d7:6b:8b:6e:1e:09:3c:bd:8c:d8:29:
0e:be:e1:44:4c:82:24:4a:d4:44:d7:c6:73:ef:9d:43:3b:3d:
34:47:e3:c4:e6:1c:1f:92:97:74:27:21:d4:c8:02:33:8e:a6:
80:a7:a6:72:8f:1d:f1:69:82:63:c7:56:42:7f:b0:70:72:2c:
bc:b6:88:10:7b:57:d5:74:1b:5b:fe:ad:15:f0:01:b7:03:63:
d4:71:57:f8:3d:6a:8c:e5:96:f6:90:86:34:53:20:68:cb:ea:
e7:8e:42:f6:40:b9:02:10:99:8e:b4:db:5a:5c:79:e9:b0:6b:
52:ae:46:9f:35:c3:04:7b:d7:98:45:c5:03:4e:d4:2b:b4:0d:
85:19:67:46:9c:c8:96:b6:b5:5e:75:25:25:88:69:f1:23:74:
8b:9c:01:e5:de:1f:ca:21:36:01:39:d3:5f:91:45:d7:af:78:
b8:e9:2e:84:e2:5b:5c:ff:c2:ef:41:df:df:89:d1:95:4d:f8:
fa:aa:25:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:34 2025 by rpki-client