Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/1KLrV27l1wm7BFmANSt5im7rZaw.roa
File: 1KLrV27l1wm7BFmANSt5im7rZaw.roa (raw, json)
Hash identifier: fnj0TDtxmOegqfTJvybUZHASU/fPipvlQSXwSFXv9/w=
Subject key identifier: D4:A2:EB:57:6E:E5:D7:09:BB:04:59:80:35:2B:79:8A:6E:EB:65:AC
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 3819C181
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/1KLrV27l1wm7BFmANSt5im7rZaw.roa
Signing time: Wed 23 Feb 2022 07:08:26 +0000
ROA not before: Wed 23 Feb 2022 07:08:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43395
IP address blocks: 151.238.136.0/21 maxlen: 21
151.238.144.0/23 maxlen: 23
31.58.238.0/24 maxlen: 24
31.58.240.0/24 maxlen: 24
31.58.236.0/24 maxlen: 24
31.58.239.0/24 maxlen: 24
31.58.237.0/24 maxlen: 24
151.247.232.0/22 maxlen: 22
151.247.228.0/22 maxlen: 22
151.247.236.0/22 maxlen: 22
151.247.240.0/24 maxlen: 24
151.247.241.0/24 maxlen: 24
31.58.246.0/24 maxlen: 24
31.58.242.0/24 maxlen: 24
31.58.244.0/24 maxlen: 24
31.58.245.0/24 maxlen: 24
31.58.241.0/24 maxlen: 24
31.58.243.0/24 maxlen: 24
31.58.252.0/24 maxlen: 24
31.58.248.0/24 maxlen: 24
31.58.250.0/24 maxlen: 24
31.58.247.0/24 maxlen: 24
31.58.253.0/24 maxlen: 24
31.58.249.0/24 maxlen: 24
31.58.251.0/24 maxlen: 24
31.59.3.0/24 maxlen: 24
31.58.255.0/24 maxlen: 24
31.59.0.0/23 maxlen: 23
31.58.254.0/24 maxlen: 24
31.59.4.0/24 maxlen: 24
31.59.2.0/24 maxlen: 24
31.59.5.0/24 maxlen: 24
31.59.9.0/24 maxlen: 24
31.59.8.0/24 maxlen: 24
31.59.13.0/24 maxlen: 24
31.59.15.0/24 maxlen: 24
31.59.14.0/24 maxlen: 24
31.59.12.0/24 maxlen: 24
31.59.12.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 941212033 (0x3819c181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Feb 23 07:08:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4a2eb576ee5d709bb045980352b798a6eeb65ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:de:d7:36:54:3c:38:b4:4f:52:63:b7:09:f5:
b5:2d:9d:40:fa:5d:91:f9:4a:2b:9a:59:b5:d2:94:
56:25:d0:4e:57:8b:9a:54:19:e7:89:df:09:ac:32:
9d:79:7b:86:ff:39:ac:ce:36:35:e3:ac:2b:c6:3b:
d1:58:f7:7f:37:2a:8a:06:08:fb:95:76:b3:5c:70:
13:dd:cf:a1:7b:b2:f8:0b:e6:7d:c6:80:2b:75:c0:
73:89:09:83:ac:aa:3a:b1:d3:96:56:96:5c:32:dc:
d3:37:ce:bc:a0:21:80:95:17:0b:c8:97:7a:e6:df:
45:83:9c:d4:5a:d4:a2:02:5d:5b:77:a8:b8:41:f3:
5d:5b:21:b4:54:14:32:c2:fb:c6:c4:ec:35:33:d3:
9a:a5:2f:8d:07:8b:33:be:f6:f0:0e:e1:8e:72:da:
98:14:7d:00:25:da:de:a9:7f:8a:8f:3a:e7:0d:2d:
a0:78:d9:4e:27:a5:db:8e:6d:6d:68:51:00:93:e9:
39:a6:7a:28:cd:ca:0d:15:aa:7a:51:28:5c:50:a6:
56:93:d8:9d:2c:5f:1f:43:c1:39:e0:35:2e:ee:83:
fb:df:9f:c0:0f:79:01:d4:5f:7f:46:2c:bb:05:9d:
41:0f:f9:df:ac:91:e7:a9:38:fd:6e:7e:11:cc:26:
8a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A2:EB:57:6E:E5:D7:09:BB:04:59:80:35:2B:79:8A:6E:EB:65:AC
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/1KLrV27l1wm7BFmANSt5im7rZaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.236.0-31.59.5.255
31.59.8.0/23
31.59.12.0/22
151.238.136.0-151.238.145.255
151.247.228.0-151.247.241.255
Signature Algorithm: sha256WithRSAEncryption
02:f4:3c:4e:3c:a9:89:82:ea:d9:6a:0a:77:1c:e3:9c:f4:d1:
e0:80:e7:70:da:bd:62:79:52:49:d2:a1:71:da:62:cf:4f:ec:
00:c5:fa:21:b0:c0:50:b3:39:07:b8:ad:bc:02:f2:b7:80:ad:
e1:23:3a:52:80:3b:87:04:3e:a9:3b:3b:71:d2:e2:f6:8b:97:
04:cc:7c:cc:c3:a5:6d:68:52:8d:50:db:0d:b9:af:39:84:d0:
8b:07:49:1c:41:5a:1e:4f:d1:f4:11:91:34:58:2f:3e:05:9a:
74:f7:32:47:8f:87:8a:a3:de:97:6e:95:b3:73:e4:07:52:6d:
a6:79:e2:66:43:0c:97:ed:8e:4b:a4:ca:ec:66:1a:8f:89:3c:
a3:a2:f0:71:47:1d:de:2b:71:e4:ff:96:8d:86:01:0e:33:54:
93:6e:d3:30:d9:76:82:ff:46:f0:d2:65:e2:ec:26:2f:f4:e1:
66:58:7f:be:28:7c:08:41:25:85:ae:c7:a5:cc:4e:f9:cf:46:
f0:38:96:64:b9:9d:53:0c:ad:74:57:d2:e7:75:85:91:3c:9b:
f8:de:84:cc:e2:23:52:a6:96:72:26:f0:a5:95:a7:5f:d5:9b:
11:03:42:7d:2a:fb:25:da:fe:36:02:fd:d0:da:96:a4:7e:be:
54:cf:31:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:36 2023 by rpki-client on console.sobornost.net