Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/5ZsXgpiYhrnsUzjguxxnbervJFs.roa
File: 5ZsXgpiYhrnsUzjguxxnbervJFs.roa (raw, json)
Hash identifier: fVm7WJ7fZw7XOTPt1gsHHE++8hq+Mmosu85nUpxdmxY=
Subject key identifier: E5:9B:17:82:98:98:86:B9:EC:53:38:E0:BB:1C:67:6D:EA:EF:24:5B
Certificate issuer: /CN=8c7f325f9aaeb93a83c39e78145c41937d586b77
Certificate serial: 080F3F89
Authority key identifier: 8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/5ZsXgpiYhrnsUzjguxxnbervJFs.roa
Signing time: Mon 03 Jan 2022 17:49:40 +0000
ROA not before: Mon 03 Jan 2022 17:49:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16039
IP address blocks: 31.177.50.0/24 maxlen: 24
31.177.49.0/24 maxlen: 24
31.177.51.0/24 maxlen: 24
31.177.48.0/24 maxlen: 24
31.177.48.0/21 maxlen: 21
31.177.53.0/24 maxlen: 24
31.177.52.0/24 maxlen: 24
31.177.55.0/24 maxlen: 24
31.177.54.0/24 maxlen: 24
82.199.37.0/24 maxlen: 24
82.199.38.0/24 maxlen: 24
82.199.32.0/24 maxlen: 24
82.199.32.0/20 maxlen: 24
82.199.44.0/24 maxlen: 24
82.199.39.0/24 maxlen: 24
82.199.41.0/24 maxlen: 24
82.199.45.0/24 maxlen: 24
82.199.51.0/24 maxlen: 24
82.199.50.0/24 maxlen: 24
82.199.47.0/24 maxlen: 24
82.199.49.0/24 maxlen: 24
82.199.48.0/20 maxlen: 24
82.199.48.0/24 maxlen: 24
82.199.58.0/24 maxlen: 24
82.199.54.0/24 maxlen: 24
82.199.53.0/24 maxlen: 24
82.199.56.0/24 maxlen: 24
82.199.55.0/24 maxlen: 24
82.199.52.0/24 maxlen: 24
82.199.59.0/24 maxlen: 24
82.199.61.0/24 maxlen: 24
82.199.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135217033 (0x80f3f89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f325f9aaeb93a83c39e78145c41937d586b77
Validity
Not Before: Jan 3 17:49:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e59b1782989886b9ec5338e0bb1c676deaef245b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c7:62:d6:dc:df:84:b8:55:c8:f0:9c:80:a8:
59:ce:70:b2:ff:21:fe:be:59:c1:1f:ec:25:79:c5:
bc:0b:e4:01:ea:50:d7:72:a0:1a:f3:d1:f3:cd:ca:
01:8e:87:7d:f2:40:59:c8:77:43:86:ee:e3:f8:8f:
78:29:29:05:aa:39:5b:ee:6e:34:47:97:72:b4:1b:
86:d8:f4:d8:8c:32:39:f6:a5:4c:d1:17:89:4a:b9:
13:48:3a:4c:24:f4:5f:7d:b7:87:d1:93:47:ff:e2:
9e:23:2e:63:f1:ef:9a:09:bc:3a:18:16:96:48:c0:
c0:5f:5d:e3:d8:ab:22:2d:8a:f6:cf:1e:c1:be:0e:
bc:c1:4a:14:ca:c2:d2:90:c2:e6:9f:f0:da:31:93:
24:89:84:21:33:dc:8f:8d:51:58:22:c8:86:4b:1b:
b3:ef:a6:b0:5c:c4:3d:d9:1d:66:41:2b:69:6a:75:
79:ba:8a:c1:f1:67:ad:f0:78:4e:6a:26:9d:df:af:
c0:ba:67:52:e3:09:b1:b6:ea:e9:62:cc:a1:11:25:
27:1b:d8:59:24:b5:9f:79:66:fc:df:4a:df:7c:6b:
0d:ba:97:e7:04:ad:82:cf:ba:f1:9a:e1:3e:67:81:
5b:7e:13:0e:91:55:f3:f3:de:9d:60:33:58:4a:0f:
ff:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:9B:17:82:98:98:86:B9:EC:53:38:E0:BB:1C:67:6D:EA:EF:24:5B
X509v3 Authority Key Identifier:
keyid:8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/5ZsXgpiYhrnsUzjguxxnbervJFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.177.48.0/21
82.199.32.0/19
Signature Algorithm: sha256WithRSAEncryption
5b:9d:a0:d6:0e:b4:02:10:4f:7d:a4:7c:fd:48:27:c2:dc:64:
b4:a5:0d:34:a2:10:e9:08:a2:fc:df:9b:52:00:11:74:b6:d3:
43:31:a7:f5:d6:8a:3d:82:40:46:76:13:ef:e9:e6:b1:75:9f:
f0:63:3c:e2:5e:0d:b1:b1:fe:48:7f:ab:25:47:0b:10:aa:63:
2f:f2:1d:1a:c2:c2:13:c1:6b:67:b6:99:9d:2f:99:88:02:42:
25:9f:25:45:fd:f4:65:04:42:20:e9:44:4d:1a:86:21:ee:cb:
7a:9f:bf:25:59:f4:02:01:6b:67:dc:5b:3b:7b:e6:71:5c:3f:
02:9c:20:9b:e6:3b:d4:92:b6:ca:c0:b0:29:09:f8:ae:0c:aa:
bf:ab:52:51:d8:a7:03:46:29:2f:9d:55:71:3a:1c:e8:73:79:
f3:a8:28:3c:9b:1d:6c:9e:32:7b:f5:8a:e2:be:86:a9:dd:f1:
8d:34:ff:21:34:80:79:68:01:a4:a1:cc:d5:28:ad:df:e6:6d:
14:96:75:c9:fe:7b:00:f1:fd:80:dc:06:96:5a:4f:0c:69:a3:
15:bd:c5:cf:91:27:8f:09:77:0f:e4:34:20:a7:21:61:f8:d1:
ac:18:42:9e:48:c3:f8:10:75:28:cd:3d:bf:f5:e5:5d:ec:3a:
ae:7c:13:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:57 2024 by rpki-client on console-fra.rpki-client.org