Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/TiR0uMcLySYFZfKLJsF06UJ-NMk.roa
File: TiR0uMcLySYFZfKLJsF06UJ-NMk.roa (raw, json)
Hash identifier: tMscZKbz/p2RORQMence4SpD08M30C/BYt9WSphgGiA=
Subject key identifier: 4E:24:74:B8:C7:0B:C9:26:05:65:F2:8B:26:C1:74:E9:42:7E:34:C9
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 3839A762
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/TiR0uMcLySYFZfKLJsF06UJ-NMk.roa
Signing time: Tue 08 Mar 2022 11:37:28 +0000
ROA not before: Tue 08 Mar 2022 11:37:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43395
IP address blocks: 151.238.136.0/21 maxlen: 21
151.238.144.0/23 maxlen: 23
31.58.238.0/24 maxlen: 24
31.58.240.0/24 maxlen: 24
31.58.236.0/24 maxlen: 24
31.58.239.0/24 maxlen: 24
31.58.237.0/24 maxlen: 24
151.247.232.0/22 maxlen: 22
151.247.228.0/22 maxlen: 22
151.247.236.0/22 maxlen: 22
151.247.240.0/24 maxlen: 24
151.247.241.0/24 maxlen: 24
151.247.248.0/22 maxlen: 22
31.58.246.0/24 maxlen: 24
31.58.242.0/24 maxlen: 24
31.58.244.0/24 maxlen: 24
31.58.245.0/24 maxlen: 24
31.58.241.0/24 maxlen: 24
31.58.243.0/24 maxlen: 24
31.58.252.0/24 maxlen: 24
31.58.248.0/24 maxlen: 24
31.58.250.0/24 maxlen: 24
31.58.247.0/24 maxlen: 24
31.58.253.0/24 maxlen: 24
31.58.249.0/24 maxlen: 24
31.58.251.0/24 maxlen: 24
31.59.3.0/24 maxlen: 24
31.58.255.0/24 maxlen: 24
31.59.0.0/23 maxlen: 23
31.58.254.0/24 maxlen: 24
31.59.4.0/24 maxlen: 24
31.59.5.0/24 maxlen: 24
31.59.9.0/24 maxlen: 24
31.59.8.0/24 maxlen: 24
31.59.13.0/24 maxlen: 24
31.59.15.0/24 maxlen: 24
31.59.14.0/24 maxlen: 24
31.59.12.0/24 maxlen: 24
31.59.12.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 943302498 (0x3839a762)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Mar 8 11:37:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e2474b8c70bc9260565f28b26c174e9427e34c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:48:72:20:4d:cc:ad:26:02:b0:6f:0f:33:7a:
4c:4f:9a:2b:fa:1c:22:78:bd:96:a6:48:76:96:9b:
5a:f9:7c:38:df:69:0b:a3:85:12:80:63:9f:c9:99:
55:40:62:67:f9:e4:f0:59:2b:3b:d6:78:82:6f:eb:
19:55:4f:15:04:8d:11:52:a9:00:e7:41:88:7a:6b:
af:7c:90:77:75:2b:7b:67:f7:9e:3e:6f:2e:59:e3:
80:09:93:e6:36:96:ca:f9:ec:5e:af:f0:5e:55:a3:
62:eb:eb:23:3e:0e:84:ae:0d:e3:f8:24:7d:37:f7:
e8:83:62:1b:ae:9e:cb:4a:2f:74:7b:c8:c7:84:e6:
75:70:87:99:b0:fb:f6:23:81:bd:f9:b0:07:23:9a:
6d:64:d6:e5:44:bf:ef:c3:5e:41:94:b6:18:7e:5c:
17:27:f0:df:1c:0e:83:95:d7:9d:6d:50:c1:3c:05:
11:dd:e0:bf:16:88:25:9c:23:5b:2d:9b:eb:e0:9c:
7b:30:23:8d:69:28:bc:88:1f:dd:ed:cd:61:2c:10:
a5:77:e0:9c:19:8b:6e:f6:c1:f6:3a:21:f1:a3:35:
9a:e8:18:b0:f5:60:59:f6:ee:53:f7:44:36:45:c1:
97:6b:a1:c7:26:f3:e7:3a:9a:8b:87:aa:bf:dc:88:
c0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:24:74:B8:C7:0B:C9:26:05:65:F2:8B:26:C1:74:E9:42:7E:34:C9
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/TiR0uMcLySYFZfKLJsF06UJ-NMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.236.0-31.59.1.255
31.59.3.0-31.59.5.255
31.59.8.0/23
31.59.12.0/22
151.238.136.0-151.238.145.255
151.247.228.0-151.247.241.255
151.247.248.0/22
Signature Algorithm: sha256WithRSAEncryption
99:4e:4e:35:5c:31:ba:c1:3d:bf:01:c6:26:b9:a9:b9:11:9f:
75:bf:59:47:66:cc:38:9e:e1:14:7a:c1:da:b1:9a:3e:ba:29:
24:01:c4:fd:8a:a1:16:b8:17:e6:81:fb:60:fb:15:02:fe:14:
72:63:c2:3b:9a:54:e9:74:31:9c:01:4d:38:a0:37:e8:d1:94:
1b:93:f1:7f:70:5d:4d:e3:98:5a:85:fb:a7:f9:eb:c4:18:ae:
3e:2c:74:27:e1:ec:2d:b9:d3:d7:91:fb:f5:14:27:b7:c8:de:
bc:04:d1:4d:ca:4c:59:c7:74:5e:57:90:7f:f4:01:11:97:5b:
82:17:72:b2:91:26:46:b3:f0:f7:21:58:0e:02:1b:57:ac:82:
30:a6:bf:9d:bf:c8:eb:5e:a2:f8:31:1f:fc:61:1a:0f:37:e5:
99:9f:b3:ab:d5:d1:0f:f8:40:4f:d2:d5:39:5f:91:6f:e5:9a:
26:05:fe:d1:87:f8:ef:62:70:18:18:18:5a:ac:a4:33:1f:55:
6e:6d:41:22:31:27:36:ab:45:6e:bf:d9:4f:53:d8:70:f7:30:
12:b3:30:76:24:57:69:02:31:1d:a3:82:98:04:74:30:de:dc:
8b:e2:2b:aa:83:ee:19:4c:bb:97:bb:99:29:b7:b0:98:73:16:
db:01:6d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:36 2023 by rpki-client on console.sobornost.net