Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/MlTKzhBWXLGQY_0s3hTwrUWvhwY.roa
File: MlTKzhBWXLGQY_0s3hTwrUWvhwY.roa (raw, json)
Hash identifier: RaAUPjW3O3FGDyp77ClLSwj6SghMfOl2W0RM0KtXK64=
Subject key identifier: 32:54:CA:CE:10:56:5C:B1:90:63:FD:2C:DE:14:F0:AD:45:AF:87:06
Certificate issuer: /CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Certificate serial: 018380A7DF4127921EDA2BBACB1602F7F1CF
Authority key identifier: B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/MlTKzhBWXLGQY_0s3hTwrUWvhwY.roa
Signing time: Tue 27 Sep 2022 20:33:48 +0000
ROA not before: Tue 27 Sep 2022 20:33:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212330
IP address blocks: 45.113.239.0/24 maxlen: 24
103.229.80.0/24 maxlen: 24
77.81.176.0/24 maxlen: 24
185.16.25.0/24 maxlen: 24
193.3.137.0/24 maxlen: 24
94.176.40.0/24 maxlen: 24
128.0.45.0/24 maxlen: 24
185.96.160.0/24 maxlen: 24
86.111.151.0/24 maxlen: 24
86.111.150.0/24 maxlen: 24
185.113.104.0/24 maxlen: 24
31.223.185.0/24 maxlen: 24
185.113.106.0/24 maxlen: 24
86.105.220.0/24 maxlen: 24
93.115.252.0/24 maxlen: 24
2a10:fa42::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:80:a7:df:41:27:92:1e:da:2b:ba:cb:16:02:f7:f1:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Validity
Not Before: Sep 27 20:33:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3254cace10565cb19063fd2cde14f0ad45af8706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:18:64:be:20:1b:c2:61:ab:ec:76:97:d1:fd:
de:54:ec:bd:bd:8b:15:fb:f8:e1:e3:59:be:ae:a7:
9e:28:f6:b4:b0:4f:72:0b:68:76:fb:b2:7a:78:cd:
51:cf:b7:bb:9f:ab:ed:09:60:f1:4d:7e:21:2b:fa:
ac:b5:ed:3b:80:11:b6:80:9c:3e:69:16:33:89:e0:
90:40:2a:8f:cc:e8:c8:b4:a0:a4:67:8c:41:ad:28:
5a:c2:0a:1f:5e:54:d4:d9:f2:b1:2d:dd:91:07:5d:
e2:7d:5b:61:f3:db:84:2f:0c:57:c9:fe:2c:0b:05:
07:76:fe:92:7d:7d:47:7a:90:17:ba:8d:f8:c0:9e:
19:0d:8a:6c:3a:71:3a:67:16:ae:9a:a6:28:9a:d7:
9c:9d:08:96:bd:88:b7:1f:b9:ea:b8:e1:eb:5d:ce:
99:e5:66:35:6b:87:55:70:ff:d7:e5:f9:dd:59:a8:
f9:4c:eb:bd:13:37:dc:cd:8b:b8:d4:59:d5:c5:6e:
58:e6:2a:be:32:a5:79:e1:50:3b:d0:67:17:4d:15:
5b:35:e0:64:6f:5b:4a:6a:b4:25:20:97:c6:46:e0:
ef:a5:4f:fc:25:28:d3:5c:b8:2f:4f:4c:8f:e4:e2:
e5:e6:dc:c5:a5:c9:a4:f2:a5:81:c6:cd:e3:6e:ee:
5d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:54:CA:CE:10:56:5C:B1:90:63:FD:2C:DE:14:F0:AD:45:AF:87:06
X509v3 Authority Key Identifier:
keyid:B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/MlTKzhBWXLGQY_0s3hTwrUWvhwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.223.185.0/24
45.113.239.0/24
77.81.176.0/24
86.105.220.0/24
86.111.150.0/23
93.115.252.0/24
94.176.40.0/24
103.229.80.0/24
128.0.45.0/24
185.16.25.0/24
185.96.160.0/24
185.113.104.0/24
185.113.106.0/24
193.3.137.0/24
IPv6:
2a10:fa42::/32
Signature Algorithm: sha256WithRSAEncryption
b3:cd:32:8a:52:62:d3:95:c5:f7:32:e3:a4:05:27:0b:ac:54:
05:9d:26:40:63:08:10:ea:ec:ad:10:07:17:b3:04:c3:14:1c:
8f:6b:8a:35:ac:a7:fd:f9:84:0b:b4:16:0a:92:ac:d0:8b:f4:
2f:e0:d1:2a:e4:1d:dd:ab:7d:d7:4a:08:fc:5c:f8:15:dc:3c:
4b:59:7a:55:a7:d6:36:fd:f0:19:77:2d:8b:02:2d:60:25:b0:
56:9c:ed:28:70:3f:3f:9a:54:9c:5a:d1:0e:d5:eb:c6:ee:44:
b8:a3:d4:36:bc:0b:cc:91:c0:55:95:f0:47:09:74:9e:50:d3:
00:b6:c3:ee:1f:44:24:95:3a:bd:a6:1c:44:03:dc:e8:9d:2e:
fd:32:91:41:41:d3:f3:ee:da:03:e6:a6:59:a6:a9:ec:12:fa:
b5:84:0d:fe:53:2d:8d:ed:a4:f0:2d:26:5a:60:d0:07:61:8b:
b7:16:5b:da:7d:6f:af:d4:1b:df:67:3b:63:11:89:3e:f4:81:
2f:19:f1:f6:c1:cc:bb:80:c2:df:f9:ab:aa:55:c2:34:4c:1f:
74:70:17:63:98:cb:a8:c9:6c:32:30:14:9d:77:0b:0f:e4:96:
b1:2c:e0:d7:63:8c:56:85:72:0e:88:e3:55:db:9b:87:14:50:
66:83:51:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:42 2024 by rpki-client on console-ams.rpki-client.org