Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/_7p9CksgFgooIm2LI6oLMUBUU3g.roa
File: _7p9CksgFgooIm2LI6oLMUBUU3g.roa (raw, json)
Hash identifier: MQgnOLTyd0BdVqH8B//ef+eRZBD076fPCxjPbrT7rTo=
Subject key identifier: FF:BA:7D:0A:4B:20:16:0A:28:22:6D:8B:23:AA:0B:31:40:54:53:78
Certificate issuer: /CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08
Certificate serial: 0C8C370B
Authority key identifier: 82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/_7p9CksgFgooIm2LI6oLMUBUU3g.roa
Signing time: Sat 01 Jan 2022 09:01:28 +0000
ROA not before: Sat 01 Jan 2022 09:01:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50290
IP address blocks: 31.15.124.0/22 maxlen: 22
109.69.32.0/21 maxlen: 22
185.74.174.0/24 maxlen: 24
185.74.174.0/23 maxlen: 23
46.30.132.0/22 maxlen: 22
46.30.130.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 210515723 (0xc8c370b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08
Validity
Not Before: Jan 1 09:01:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ffba7d0a4b20160a28226d8b23aa0b3140545378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:fc:25:16:c1:4c:06:0e:17:f8:ca:d8:cc:23:
72:d0:f1:2d:cc:d1:28:75:8b:84:20:fe:db:4c:cb:
de:0d:a6:b1:79:9e:f1:57:99:d4:50:ac:8c:93:6e:
fd:7a:5e:03:e4:04:3e:98:63:4f:99:04:4d:8d:0f:
0d:60:cf:1c:6c:c3:9a:7b:6f:f6:b1:f3:61:fa:ae:
65:80:53:9b:75:be:8d:ab:6f:ff:e9:f9:09:d7:62:
0d:fa:54:fd:f5:99:b6:5f:4d:05:1c:3e:66:ff:a8:
48:15:86:74:69:1a:d2:ae:f7:dc:18:a3:c0:0e:4e:
32:19:ef:34:bd:88:44:15:ca:34:cd:5c:52:48:a3:
f0:b8:86:88:9e:e7:16:1f:e6:ef:65:b6:fe:4d:b7:
8e:47:0e:50:6e:36:b8:61:f8:82:ec:cf:a0:63:4d:
39:07:d1:f1:56:00:00:cd:42:54:0d:6e:d0:4c:d8:
08:6a:64:03:a9:f8:49:78:aa:cc:fd:b9:c0:4a:47:
72:e0:9e:2b:57:a3:12:c2:04:be:f6:18:c7:28:2d:
19:d3:ba:0c:f4:cd:2a:80:cd:c4:5f:5b:5b:df:8c:
eb:ab:69:0c:68:8e:9f:ba:6f:ba:f9:c4:cc:6f:1c:
37:87:3e:95:52:09:c3:0c:60:83:98:48:0c:46:33:
6f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:BA:7D:0A:4B:20:16:0A:28:22:6D:8B:23:AA:0B:31:40:54:53:78
X509v3 Authority Key Identifier:
keyid:82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/_7p9CksgFgooIm2LI6oLMUBUU3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.124.0/22
46.30.130.0-46.30.135.255
109.69.32.0/21
185.74.174.0/23
Signature Algorithm: sha256WithRSAEncryption
c6:d0:12:ac:b8:77:27:bf:4d:cb:16:5b:8f:3d:1d:cb:bb:42:
75:cf:9f:75:80:30:16:c5:a1:ee:2c:73:2f:cb:f8:17:9e:e3:
d3:f7:72:25:6e:5a:d8:5a:a1:f5:21:96:d3:50:5c:b6:ab:80:
de:f0:a3:d0:0a:d5:f0:44:e3:2d:64:17:52:52:bd:b9:9b:9a:
c6:35:96:aa:11:14:5f:57:f0:07:48:2e:69:82:69:bc:bd:00:
34:0b:49:64:20:20:4c:3a:93:24:cc:43:68:40:2c:2c:64:ea:
c9:2b:32:03:b8:ce:06:95:c1:6c:a2:16:44:db:47:f8:11:7a:
ba:88:4f:0f:1b:42:57:ec:39:67:bc:62:6a:7b:d1:ae:9a:90:
f1:55:e3:c6:19:8c:a3:5d:2f:65:bb:a4:68:f5:19:c2:e1:2d:
ac:cf:46:c2:5f:dc:b0:c4:4c:95:b1:77:06:05:7b:f4:36:c0:
88:d5:06:92:86:e1:24:8d:6a:c9:c1:e8:ea:af:3d:bb:13:cf:
79:ac:35:21:e2:86:c4:0e:ee:33:a3:42:f4:63:a6:73:33:b4:
af:77:9e:24:dd:b6:e7:88:eb:14:37:00:f2:e5:81:be:e6:9f:
ce:05:dd:f1:13:dd:bc:b9:09:b9:72:82:9e:ad:d5:cf:13:c1:
0b:0b:9d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:11 2023 by rpki-client on console-fra.rpki-client.org