Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/1-d94AEZlp_ubKK5Kn0LrtFf9Cx4.roa
File: 1-d94AEZlp_ubKK5Kn0LrtFf9Cx4.roa (raw, json)
Hash identifier: EI15e83hi9we839p1y7aOm+FOSOBdOd6CQWGwbaIDxg=
Subject key identifier: F9:DF:78:00:46:65:A7:FB:9B:28:AE:4A:9F:42:EB:B4:57:FD:0B:1E
Certificate issuer: /CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Certificate serial: 0354CB88
Authority key identifier: E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/1-d94AEZlp_ubKK5Kn0LrtFf9Cx4.roa
Signing time: Sat 01 Jan 2022 05:02:36 +0000
ROA not before: Sat 01 Jan 2022 05:02:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200043
IP address blocks: 31.3.172.0/22 maxlen: 24
31.3.168.0/22 maxlen: 24
31.3.176.0/20 maxlen: 24
185.98.8.0/22 maxlen: 24
185.63.168.0/23 maxlen: 24
62.220.80.0/21 maxlen: 24
62.220.88.0/21 maxlen: 24
109.238.124.0/23 maxlen: 24
109.238.126.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55888776 (0x354cb88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Validity
Not Before: Jan 1 05:02:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9df78004665a7fb9b28ae4a9f42ebb457fd0b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:28:d1:a6:89:d2:6a:ce:3c:e1:52:99:26:a1:
85:89:df:b3:5a:8d:ca:31:c5:b4:9b:07:67:b3:49:
d4:25:e8:41:c7:93:62:bf:1d:94:39:fd:9b:5a:5c:
f1:32:2a:6e:4e:70:12:6f:b3:3a:d4:28:b7:3f:2c:
e5:5e:f1:27:e6:72:46:1b:07:10:19:70:b5:62:2c:
3b:f1:bf:53:7a:4c:6f:f4:3e:0a:b6:ea:6d:67:3d:
db:f6:c0:a3:aa:3a:03:e6:15:65:30:15:ba:e1:fe:
29:fd:dc:bc:3a:e6:44:64:a9:6b:5a:19:61:5d:80:
c1:0a:d6:83:cb:08:d5:9e:a7:bb:cc:c3:5e:6b:76:
02:89:98:f4:51:7c:57:d6:ce:ff:69:95:ce:5c:29:
90:d3:0e:12:79:ac:78:c5:48:b1:b2:d1:93:5e:8f:
da:1b:56:47:0f:4b:a5:41:d4:41:88:26:54:01:b6:
3b:d3:9a:96:b5:56:de:26:11:0d:b7:18:d4:2d:43:
bd:d1:f3:5b:32:3c:5a:89:1b:5f:a1:52:a3:4b:ab:
80:6c:f0:a0:5a:64:56:24:3b:05:73:a3:9f:38:48:
05:8c:63:4b:29:14:d4:53:ed:7d:3c:b2:05:cc:f9:
6a:d9:92:19:39:59:ee:99:9d:ec:9b:18:89:0f:3d:
54:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DF:78:00:46:65:A7:FB:9B:28:AE:4A:9F:42:EB:B4:57:FD:0B:1E
X509v3 Authority Key Identifier:
keyid:E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/1-d94AEZlp_ubKK5Kn0LrtFf9Cx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.168.0-31.3.191.255
62.220.80.0/20
109.238.124.0/22
185.63.168.0/23
185.98.8.0/22
Signature Algorithm: sha256WithRSAEncryption
60:3c:b6:04:47:f3:01:80:71:64:87:9d:58:d8:ab:d7:86:de:
4f:fd:ab:9f:e2:08:b8:a8:bc:94:10:e7:0c:65:67:28:f5:5a:
75:7e:7a:e7:e9:b3:a9:40:0c:5b:13:dd:3d:19:aa:83:b8:40:
61:5e:ee:f0:f2:fb:57:af:3d:b5:aa:a6:b4:70:74:9a:98:dc:
44:cb:a1:3c:25:b8:14:90:8d:ac:03:2b:0a:ed:b5:52:7b:4f:
49:d8:c1:61:22:c3:b9:9f:7e:34:10:78:ea:06:62:a8:e9:65:
b5:21:09:4d:a6:3e:1c:04:91:6f:15:dd:cd:eb:f6:6a:93:6c:
41:05:cb:47:06:e9:24:36:33:28:3e:9c:fa:38:08:bf:00:5e:
90:ca:53:76:03:94:33:43:35:af:39:d9:44:8c:89:1e:23:15:
c8:d4:4f:d3:66:b1:cb:3d:56:1f:1b:74:e1:8f:b6:c8:32:8a:
15:d8:da:03:76:1b:e7:4c:d3:bc:27:a4:a9:9c:1f:11:9e:9e:
1a:81:3c:08:09:ee:81:5f:3f:c2:2d:9c:90:cf:6b:3b:77:a1:
5f:0d:f2:b9:7a:0e:33:7e:4b:01:7a:90:15:50:5b:23:fd:ae:
af:cd:f6:92:d4:2b:d6:d5:f5:0f:d8:74:9b:67:0f:a1:d4:45:
5d:ca:43:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:34 2023 by rpki-client on console-fra.rpki-client.org