Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/8RFaVGkCkyOLP41yZtysioJ6IZY.roa
File: 8RFaVGkCkyOLP41yZtysioJ6IZY.roa (raw, json)
Hash identifier: NTSBypLyh9PAFCOgRzRxjhIXXVndR27YV5fZgR6OeoI=
Subject key identifier: F1:11:5A:54:69:02:93:23:8B:3F:8D:72:66:DC:AC:8A:82:7A:21:96
Certificate issuer: /CN=055618a6195f1ecacb085ced3b0a1a17c62a2cfa
Certificate serial: 028B5B92
Authority key identifier: 05:56:18:A6:19:5F:1E:CA:CB:08:5C:ED:3B:0A:1A:17:C6:2A:2C:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/8RFaVGkCkyOLP41yZtysioJ6IZY.roa
Signing time: Sat 01 Jan 2022 02:52:35 +0000
ROA not before: Sat 01 Jan 2022 02:52:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201602
IP address blocks: 134.19.170.0/24 maxlen: 24
134.19.171.0/24 maxlen: 24
134.19.172.0/24 maxlen: 24
134.19.168.0/24 maxlen: 24
134.19.169.0/24 maxlen: 24
134.19.173.0/24 maxlen: 24
134.19.174.0/24 maxlen: 24
134.19.175.0/24 maxlen: 24
185.203.104.0/24 maxlen: 24
185.203.105.0/24 maxlen: 24
185.203.106.0/24 maxlen: 24
185.203.107.0/24 maxlen: 24
185.66.24.0/24 maxlen: 24
188.241.140.0/24 maxlen: 24
188.241.141.0/24 maxlen: 24
185.66.26.0/24 maxlen: 24
185.66.27.0/24 maxlen: 24
185.66.25.0/24 maxlen: 24
31.187.104.0/24 maxlen: 24
31.187.105.0/24 maxlen: 24
31.187.111.0/24 maxlen: 24
31.187.107.0/24 maxlen: 24
31.187.108.0/24 maxlen: 24
31.187.109.0/24 maxlen: 24
31.187.110.0/24 maxlen: 24
31.187.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42687378 (0x28b5b92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=055618a6195f1ecacb085ced3b0a1a17c62a2cfa
Validity
Not Before: Jan 1 02:52:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1115a54690293238b3f8d7266dcac8a827a2196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b1:49:be:27:e3:e1:bd:88:9e:49:a2:39:2f:
5c:02:cc:70:bb:57:13:9d:f0:ec:fc:81:89:56:c4:
c0:77:0e:9e:77:14:9f:7a:91:37:5c:ab:86:f6:e4:
28:3f:b9:c0:b2:87:21:36:ee:e4:7e:b0:d0:b3:57:
30:2e:b1:2e:7a:f5:a8:15:84:0d:7f:17:6c:5e:de:
c1:dc:96:de:ca:21:7b:f4:89:3e:eb:45:fd:3c:05:
3a:73:f3:b9:4e:49:c0:22:9f:42:87:f3:b6:2c:28:
5b:14:e9:77:41:02:c8:e7:b1:f7:25:74:d4:8c:cf:
25:93:0a:92:e2:86:17:b1:17:90:0b:c9:25:2b:22:
b2:61:65:b0:f7:66:dc:46:e7:53:0e:de:04:4d:d1:
7d:1b:33:62:39:66:0b:9a:ba:87:42:8f:c2:0d:d1:
7c:51:22:52:a9:0f:51:59:96:15:b7:1e:38:89:99:
76:39:7c:47:10:81:3d:8a:b3:08:0a:b6:54:a4:f3:
63:b2:0d:57:7e:fc:a3:db:5a:de:ae:30:27:02:95:
d7:ad:35:0b:33:50:8d:74:33:c2:6f:d7:21:16:e7:
17:45:46:09:0e:5f:49:41:be:6c:1e:55:d1:3e:49:
54:df:c2:eb:80:cf:2b:b8:fd:7c:65:8c:af:37:d5:
2a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:11:5A:54:69:02:93:23:8B:3F:8D:72:66:DC:AC:8A:82:7A:21:96
X509v3 Authority Key Identifier:
keyid:05:56:18:A6:19:5F:1E:CA:CB:08:5C:ED:3B:0A:1A:17:C6:2A:2C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/8RFaVGkCkyOLP41yZtysioJ6IZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.104.0/21
134.19.168.0/21
185.66.24.0/22
185.203.104.0/22
188.241.140.0/23
Signature Algorithm: sha256WithRSAEncryption
26:16:c3:ca:88:f6:f8:5d:d3:61:4e:89:1a:78:23:5d:67:67:
71:1f:7e:35:21:40:75:91:30:1f:1f:de:6d:c3:97:c8:f8:fe:
b2:bf:55:d6:a5:e6:8a:dd:0b:fd:51:8d:06:35:b7:e9:5f:14:
b8:71:5a:ec:0b:7f:9c:dd:5c:b6:bf:49:be:ce:00:6b:f9:82:
cd:fe:aa:25:9c:aa:0d:f4:2e:c6:79:93:61:26:c4:ce:6c:2a:
c1:42:30:ea:84:24:08:de:67:91:03:6b:4c:95:91:ad:81:b7:
bd:99:db:d2:9f:b5:24:14:3d:18:f1:02:a7:61:9d:4b:8c:ba:
9d:e1:4e:81:30:56:eb:2f:31:6c:39:3c:fd:43:e8:29:d2:3e:
11:94:ad:eb:a2:66:72:d0:68:2e:63:ea:e1:10:8d:b5:20:61:
cf:13:1c:55:50:31:35:a8:6b:1c:51:f9:80:db:d6:9f:79:70:
0f:ab:37:c1:01:39:c4:65:ad:77:58:04:df:86:bb:e0:68:0b:
90:6e:76:c3:50:37:c1:1d:8e:c9:7e:95:ab:de:45:ff:f1:df:
f1:a4:0f:e0:e5:27:d0:98:18:1d:9e:3b:f5:0a:09:18:7f:30:
14:0d:f5:5e:4f:58:cf:e3:39:d0:a9:c4:9a:8a:22:28:b3:51:
f0:15:5f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:29 2023 by rpki-client on console-ams.rpki-client.org