Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/zRXNcZjUN-IU1tlibeHwBaOiLQc.roa
File: zRXNcZjUN-IU1tlibeHwBaOiLQc.roa (raw, json)
Hash identifier: 1GVjaWbodfl9f+QKv7aOGxMNWQJt419tAUorZBF7b88=
Subject key identifier: CD:15:CD:71:98:D4:37:E2:14:D6:D9:62:6D:E1:F0:05:A3:A2:2D:07
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 4349EE3E
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/zRXNcZjUN-IU1tlibeHwBaOiLQc.roa
Signing time: Sat 01 Jan 2022 07:59:57 +0000
ROA not before: Sat 01 Jan 2022 07:59:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47692
IP address blocks: 151.236.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1128918590 (0x4349ee3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jan 1 07:59:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd15cd7198d437e214d6d9626de1f005a3a22d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d9:ca:ff:3d:f8:4e:68:c0:91:8a:4e:71:b2:
91:96:7b:4a:de:16:5c:50:d6:34:87:28:15:d0:59:
3b:cd:fa:22:27:29:b4:ce:89:2d:01:5a:03:60:de:
f6:b8:9d:c7:21:6c:8f:20:2e:a6:9e:22:13:77:9d:
96:49:7e:3e:a0:9b:4f:57:1d:12:48:cc:3c:34:ca:
c1:c3:86:c5:b4:1d:86:0c:6f:89:6f:4d:fe:d1:8f:
d0:1f:8a:0c:65:01:a8:a4:5e:2f:94:bd:c8:7d:95:
0e:34:4c:e7:d7:0c:00:67:e9:c3:ff:08:4b:99:02:
fd:ac:b1:93:5c:ca:61:2a:a1:bc:35:ad:79:04:2c:
e6:ad:f8:b2:4d:bf:28:1b:77:c2:44:9e:a7:70:3c:
39:ab:1c:fc:e7:27:eb:82:9e:26:be:52:c9:6c:29:
b8:05:a5:85:85:47:cc:d5:2b:ac:73:2c:03:7a:80:
48:dc:ba:0b:51:8a:2e:2b:6f:9c:f4:dc:a0:1f:6d:
24:99:66:a6:e1:81:b0:d8:13:96:af:a0:73:f5:30:
01:e8:d5:ea:22:5c:4b:d9:ec:f0:de:88:a8:dc:06:
47:4f:01:07:af:5e:3e:36:0e:58:8b:56:dc:eb:1d:
15:6f:32:d1:6f:0c:81:ce:a6:63:22:a2:1e:57:c7:
a3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:15:CD:71:98:D4:37:E2:14:D6:D9:62:6D:E1:F0:05:A3:A2:2D:07
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/zRXNcZjUN-IU1tlibeHwBaOiLQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.236.31.0/24
Signature Algorithm: sha256WithRSAEncryption
84:82:de:0f:97:5f:a6:65:f4:76:97:68:3f:67:cf:25:97:5f:
dc:e5:2d:df:b6:a2:30:fb:b8:49:9e:aa:af:04:c7:5a:7d:34:
20:87:7f:b1:3a:b7:60:4d:e0:d8:fc:8c:20:ee:a2:69:b4:54:
d0:bb:c7:5b:db:f0:0e:66:c0:fc:31:23:7d:c0:2f:be:55:22:
0e:c9:be:d6:0b:e1:c3:4f:c7:39:62:a3:fb:41:1b:8f:1d:79:
9d:8c:aa:db:8a:71:6f:b9:24:c3:1a:b0:ac:65:98:ea:f7:5a:
c5:7e:2b:24:ad:71:3c:62:6d:b7:39:5e:ca:45:23:ca:c2:d0:
50:36:9c:8f:00:83:60:1a:62:e0:2b:43:26:34:7d:25:53:db:
1e:dd:8e:fe:a7:9f:2a:7b:af:6b:53:59:8b:d0:41:d6:6c:3c:
cd:37:36:23:5b:ce:5e:d8:90:38:95:61:54:08:ee:5b:0a:4d:
19:6e:d9:a2:f0:29:a5:e6:ab:f7:4c:f1:42:52:3e:27:09:a5:
c1:76:a7:51:96:6a:5e:77:53:ca:67:c1:b9:c6:ed:09:5f:37:
18:65:f2:16:95:f6:c8:28:39:1b:14:01:30:bc:67:ec:b1:5c:
19:53:bd:c4:73:c6:41:fd:1f:ac:bb:d4:89:e1:e4:70:74:cd:
d0:52:ec:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:09 2023 by rpki-client on console-fra.rpki-client.org