Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Jo2jEzQL4QgYPgVunFatNbS_02g.roa
File: Jo2jEzQL4QgYPgVunFatNbS_02g.roa (raw, json)
Hash identifier: Qpiakt8y6Qvadp9Quc7KGkM24gltl2nDon/uYrnECvk=
Subject key identifier: 26:8D:A3:13:34:0B:E1:08:18:3E:05:6E:9C:56:AD:35:B4:BF:D3:68
Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Certificate serial: 01822026B24600801E17CB9EF623E4DD468A
Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Jo2jEzQL4QgYPgVunFatNbS_02g.roa
Signing time: Thu 21 Jul 2022 09:46:23 +0000
ROA not before: Thu 21 Jul 2022 09:46:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211252
IP address blocks: 194.31.96.0/24 maxlen: 24
194.31.97.0/24 maxlen: 24
194.99.44.0/24 maxlen: 24
194.99.46.0/24 maxlen: 24
31.210.20.0/24 maxlen: 24
31.210.21.0/24 maxlen: 24
162.12.206.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:20:26:b2:46:00:80:1e:17:cb:9e:f6:23:e4:dd:46:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Validity
Not Before: Jul 21 09:46:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=268da313340be108183e056e9c56ad35b4bfd368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:99:9c:a7:60:61:9e:e4:6a:79:1c:bc:14:bf:
54:a9:e6:1d:63:2f:f6:c1:33:da:38:91:7d:fb:b5:
73:6a:65:5d:10:65:bd:af:b9:95:95:f7:8d:a5:20:
7e:a2:bb:7e:71:79:2c:d8:49:43:b9:ca:66:e6:1c:
1c:3d:e9:17:7a:7b:35:bd:7a:b0:b3:47:3a:c3:53:
45:45:12:dd:64:9a:e3:46:02:97:af:97:3d:99:17:
da:8b:cb:b9:c6:ea:c1:df:4f:92:55:62:e9:9b:cc:
ca:be:51:fb:4f:7f:79:82:a7:60:9c:d4:21:97:9e:
49:9e:54:f7:0f:a5:df:ad:83:42:dd:13:52:30:ab:
2d:62:80:1f:83:73:b0:0c:34:ee:79:5a:e1:36:6e:
ab:07:ea:57:c8:43:cd:1e:d6:36:5f:7f:d9:f5:b8:
fa:c4:b7:63:b2:5a:b9:97:3c:a0:50:4f:52:86:d0:
0e:4c:6c:a7:c4:cb:3f:b2:1b:31:4a:aa:ed:b6:b5:
0d:04:bf:70:05:93:2c:b3:5a:2a:aa:53:82:d6:72:
99:16:73:3b:1a:1d:e0:53:98:7d:54:61:70:a8:7f:
a1:5a:15:75:8e:a0:2b:40:ad:88:81:da:4d:46:7f:
df:3e:c5:21:2b:ac:34:d4:90:d8:86:c0:7b:56:4b:
3e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8D:A3:13:34:0B:E1:08:18:3E:05:6E:9C:56:AD:35:B4:BF:D3:68
X509v3 Authority Key Identifier:
keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Jo2jEzQL4QgYPgVunFatNbS_02g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.20.0/23
162.12.206.0/24
194.31.96.0/23
194.99.44.0/24
194.99.46.0/24
Signature Algorithm: sha256WithRSAEncryption
32:40:46:34:b1:aa:7b:37:10:6a:de:e6:f8:86:34:1e:c6:8d:
04:cc:81:5a:c1:30:67:c6:be:13:c3:f8:02:ea:a4:b0:74:d8:
7f:42:b5:e1:81:79:0f:33:82:86:53:d6:ac:c6:e1:1a:0f:60:
c4:cf:7c:d4:c9:03:92:9f:c0:df:f0:18:98:22:2a:1c:12:42:
72:53:62:2c:85:d7:a4:cd:37:9c:43:28:2e:23:64:af:c4:8d:
3c:3c:e9:10:84:86:ab:66:2a:e0:76:e8:af:e8:a2:69:29:dc:
07:b3:33:3b:06:08:15:02:85:35:49:64:22:21:70:98:af:8b:
94:5b:b4:8e:85:3a:53:35:a4:34:7f:84:92:e2:bd:de:5d:dc:
17:61:c0:ca:43:77:54:86:32:b0:5b:21:51:52:ff:8c:9c:ed:
7f:92:2f:39:b8:a5:fa:a4:da:6d:13:24:c1:d8:79:64:62:b0:
f2:9a:23:e3:88:41:c0:25:7f:00:5c:d1:a5:9c:a2:73:34:11:
03:97:59:30:29:09:78:99:76:8c:7b:f8:01:ad:a5:a8:d6:8f:
65:74:38:72:87:18:09:8a:0b:0f:02:c2:fc:f3:d5:8f:0e:11:
d5:7d:4d:b2:c0:43:2e:1a:73:9c:80:70:5b:d1:05:17:f4:c4:
a5:3f:d0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:48 2023 by rpki-client on console-ams.rpki-client.org