Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/vHuRDHMzx5b6Dg3mzy2kNTJJpJA.roa
File: vHuRDHMzx5b6Dg3mzy2kNTJJpJA.roa (raw, json)
Hash identifier: GBub1azZrGKa74kMgsjnHJt6EgkBwJln+YulsbZiWIc=
Subject key identifier: BC:7B:91:0C:73:33:C7:96:FA:0E:0D:E6:CF:2D:A4:35:32:49:A4:90
Certificate issuer: /CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Certificate serial: 03A35807
Authority key identifier: 86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/vHuRDHMzx5b6Dg3mzy2kNTJJpJA.roa
Signing time: Wed 27 Apr 2022 07:40:47 +0000
ROA not before: Wed 27 Apr 2022 07:40:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197720
IP address blocks: 31.186.29.0/24 maxlen: 24
31.186.2.0/24 maxlen: 24
31.186.4.0/24 maxlen: 24
31.186.3.0/24 maxlen: 24
31.186.7.0/24 maxlen: 24
31.186.9.0/24 maxlen: 24
31.186.11.0/24 maxlen: 24
31.186.10.0/24 maxlen: 24
31.186.5.0/24 maxlen: 24
31.186.13.0/24 maxlen: 24
31.186.12.0/24 maxlen: 24
31.186.15.0/24 maxlen: 24
31.186.14.0/24 maxlen: 24
31.186.16.0/24 maxlen: 24
31.186.17.0/24 maxlen: 24
31.186.21.0/24 maxlen: 24
31.186.23.0/24 maxlen: 24
31.186.18.0/24 maxlen: 24
31.186.20.0/24 maxlen: 24
31.186.19.0/24 maxlen: 24
2a0d:a000:0:1400::/56 maxlen: 56
2a0d:a000:0:f00::/56 maxlen: 56
2a0d:a000:0:1800::/56 maxlen: 56
2a0d:a000:0:b00::/56 maxlen: 56
2a0d:a000:0:1500::/56 maxlen: 56
2a0d:a000:0:1100::/56 maxlen: 56
2a0d:a000:0:1000::/56 maxlen: 56
2a0d:a000:0:1900::/56 maxlen: 56
2a0d:a000:0:c00::/56 maxlen: 56
2a0d:a000:0:1600::/56 maxlen: 56
2a0d:a000:0:1200::/56 maxlen: 56
2a0d:a000:0:1a00::/56 maxlen: 56
2a0d:a000:0:d00::/56 maxlen: 56
2a0d:a000:0:a00::/56 maxlen: 56
2a0d:a000:0:1300::/56 maxlen: 56
2a0d:a000:0:e00::/56 maxlen: 56
2a0d:a000:0:1700::/56 maxlen: 56
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61036551 (0x3a35807)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Validity
Not Before: Apr 27 07:40:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc7b910c7333c796fa0e0de6cf2da4353249a490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e3:32:d8:b2:67:16:80:0d:7a:cc:49:08:66:
5d:e9:b1:e5:48:06:ff:a0:0b:97:fe:6c:2d:f3:5e:
0c:20:bf:68:18:73:75:7f:be:30:4c:1f:3d:b3:23:
6c:6a:fa:4c:74:4e:c7:d4:d9:6d:5b:bf:27:6c:f1:
c6:88:1e:5b:3a:62:dc:de:90:d3:92:63:eb:dd:80:
c3:af:15:f2:c7:c1:6a:38:cd:01:f8:e9:d0:3e:c3:
d1:46:63:b9:f4:23:f1:27:c3:15:69:02:dd:f6:3f:
f7:7b:ab:ba:79:8f:df:09:a2:f9:b6:65:1f:bf:e7:
df:f0:03:74:67:80:c8:56:92:e0:34:84:90:9f:69:
f5:0a:f3:ef:c7:48:9f:35:cd:8f:4b:df:d4:66:08:
15:6a:a6:e8:b9:cf:c1:5e:23:1a:72:64:7e:03:94:
70:1d:30:56:c2:f2:84:ca:da:59:3b:08:4b:b2:25:
50:fc:3b:57:69:8f:4d:ce:43:c2:b0:b0:47:eb:54:
67:31:c7:ca:4d:81:1b:27:34:03:23:55:53:9e:a9:
4c:6f:0e:4d:8f:82:12:fe:85:d7:54:02:a0:7f:85:
a9:8a:64:13:fb:93:65:47:86:01:ce:6c:47:b6:af:
95:f7:f7:6e:af:21:95:d5:79:6f:81:55:81:3e:20:
55:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7B:91:0C:73:33:C7:96:FA:0E:0D:E6:CF:2D:A4:35:32:49:A4:90
X509v3 Authority Key Identifier:
keyid:86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/vHuRDHMzx5b6Dg3mzy2kNTJJpJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.2.0-31.186.5.255
31.186.7.0/24
31.186.9.0-31.186.21.255
31.186.23.0/24
31.186.29.0/24
IPv6:
2a0d:a000:0:a00::-2a0d:a000:0:1aff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
52:d2:d2:d4:70:42:91:33:93:59:6a:cd:22:51:0d:90:e9:12:
df:66:b6:31:8b:57:c8:95:d6:72:67:4e:fa:b5:99:08:18:e5:
2a:a3:0a:b9:4c:4a:47:bc:57:12:7b:3e:cd:95:3e:02:8a:9c:
7e:05:c1:5d:6d:8c:15:5c:62:3b:d4:a8:bf:18:53:85:6a:77:
d3:f8:4e:38:02:be:17:04:7f:39:42:7d:87:ef:8b:c5:58:a4:
d9:bd:ad:ed:d3:7e:b4:70:b6:5f:e5:67:d1:4b:37:a2:b2:cc:
84:d3:89:44:23:d5:21:fa:69:11:0f:92:35:39:e8:d3:36:08:
09:8d:f2:81:29:d1:14:d0:5e:ce:eb:ce:01:e8:e9:c0:1f:d0:
d9:7f:9e:44:15:58:97:81:4a:5e:0d:77:b5:a0:3e:0f:06:14:
6e:d7:99:ef:dd:0e:df:97:67:b4:bd:64:53:b3:2b:3d:3d:e0:
e9:bb:f1:05:67:97:82:0c:42:1c:26:12:32:e5:9e:9a:6b:81:
2a:ea:bd:d1:22:33:93:58:30:70:47:e4:47:61:51:69:2b:3f:
36:4d:db:f8:82:97:49:f0:ff:86:8c:b2:e9:cf:82:2b:72:93:
80:44:8d:3e:e6:3d:fb:28:f2:75:d5:68:6b:4d:1d:08:4b:e7:
be:83:16:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:34 2024 by rpki-client on console-fra.rpki-client.org