Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/xriDjgFCYbd3rcOJi2cX-2Nc_1g.roa
File: xriDjgFCYbd3rcOJi2cX-2Nc_1g.roa (raw, json)
Hash identifier: S+sVzaABXivIzjQ539g/DK3QvKvkx9YC8/lBz7v+RGQ=
Subject key identifier: C6:B8:83:8E:01:42:61:B7:77:AD:C3:89:8B:67:17:FB:63:5C:FF:58
Certificate issuer: /CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Certificate serial: 37AD2E25
Authority key identifier: AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/xriDjgFCYbd3rcOJi2cX-2Nc_1g.roa
Signing time: Sat 01 Jan 2022 04:59:24 +0000
ROA not before: Sat 01 Jan 2022 04:59:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48299
IP address blocks: 31.25.144.0/21 maxlen: 21
31.25.151.0/24 maxlen: 24
94.126.160.0/21 maxlen: 21
185.36.97.0/24 maxlen: 24
185.36.99.0/24 maxlen: 24
2a02:2600::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 934096421 (0x37ad2e25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Validity
Not Before: Jan 1 04:59:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6b8838e014261b777adc3898b6717fb635cff58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:44:96:b7:d8:e0:85:77:05:e8:53:ea:f5:c6:
aa:a4:c2:68:5f:07:c4:34:71:3a:42:41:77:31:d8:
17:6c:d1:0d:4d:24:10:8e:d6:b6:80:bd:12:74:de:
89:80:14:7f:a2:08:da:37:b2:26:c2:c6:cf:88:75:
7f:b9:fb:40:3f:8d:e6:be:9f:9c:06:32:61:c4:f3:
95:60:f2:a4:3c:b6:19:2c:ef:e8:40:ee:79:34:f2:
cc:41:30:42:44:64:a4:15:53:e1:5f:c5:dc:db:16:
9e:b2:9e:86:e9:e6:07:8b:e7:0a:74:7a:e8:8d:dd:
3c:2e:92:70:96:f6:89:5c:7a:54:41:63:e4:6d:90:
1d:53:a4:00:7e:c7:82:32:76:3a:73:3e:29:89:97:
16:35:78:08:e0:cf:95:e0:b6:c5:b5:b7:a0:78:30:
25:e2:d7:6c:be:6a:78:6e:ea:7b:03:56:56:c1:47:
4b:33:18:1b:0b:4f:ca:a8:ec:f6:43:89:29:33:76:
d1:0f:3d:d4:8a:0c:f2:a0:fe:2a:03:56:d7:1e:d8:
eb:86:b6:26:75:de:bc:b9:ff:3d:21:59:3c:2e:cd:
e2:af:6a:62:c4:34:07:85:b4:15:4f:9b:7c:65:78:
50:aa:9a:44:81:94:b7:ff:c0:c7:5d:34:33:4f:b9:
b1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B8:83:8E:01:42:61:B7:77:AD:C3:89:8B:67:17:FB:63:5C:FF:58
X509v3 Authority Key Identifier:
keyid:AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/xriDjgFCYbd3rcOJi2cX-2Nc_1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.144.0/21
94.126.160.0/21
185.36.97.0/24
185.36.99.0/24
IPv6:
2a02:2600::/32
Signature Algorithm: sha256WithRSAEncryption
b9:3c:35:b8:a7:74:45:8d:55:e8:2a:da:48:f0:18:e4:e6:e3:
24:e9:29:60:b2:11:44:69:d5:b6:1c:da:df:f1:a9:2f:4a:17:
19:e1:45:21:27:bc:29:51:0f:2f:ac:d6:5f:7f:e7:7d:04:8d:
8a:0e:9d:49:25:8b:e6:4c:89:fc:03:f8:a0:44:37:b4:33:9f:
dc:b5:9a:56:ad:18:15:dd:8d:24:6b:00:70:83:6f:19:ec:d8:
21:fb:c4:59:e8:a3:89:ec:33:31:11:7d:54:4c:b3:c9:5b:4c:
1f:a6:2a:31:a2:b5:7a:fd:6f:0a:8e:90:d4:0c:9d:4e:86:ee:
0e:5c:e1:3c:7a:d9:38:f8:3f:1b:06:f3:8f:a0:1e:5c:a1:19:
65:26:00:27:bb:79:9d:d9:a6:2b:30:16:e1:48:62:80:bf:d4:
88:d8:fa:ea:e6:fc:e5:33:17:8e:73:c5:21:b1:4d:6e:a1:31:
63:3b:51:3a:d9:03:8a:82:60:a4:87:3b:5d:fc:b8:a4:3e:d8:
11:48:ce:c0:6a:b4:45:fb:36:84:a0:4a:67:10:57:0d:09:a4:
5a:7e:3b:62:05:68:ce:da:30:e0:c6:a8:7e:e3:4a:b4:1c:06:
cb:f0:f9:fb:ca:3d:6e:af:13:fc:09:f8:fd:bb:4b:77:48:26:
e2:34:ce:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:54 2023 by rpki-client on console.sobornost.net