Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/3cEiVcaTF1htpgY1NKrB2dYrzrY.roa
File: 3cEiVcaTF1htpgY1NKrB2dYrzrY.roa (raw, json)
Hash identifier: q/dkWvF1So/pyt8K61duJufkDWgFTrmAXhVNvPM/XuI=
Subject key identifier: DD:C1:22:55:C6:93:17:58:6D:A6:06:35:34:AA:C1:D9:D6:2B:CE:B6
Certificate issuer: /CN=1e80c5a70a236384054f3584915092c41714eed7
Certificate serial: 016A8D
Authority key identifier: 1E:80:C5:A7:0A:23:63:84:05:4F:35:84:91:50:92:C4:17:14:EE:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/3cEiVcaTF1htpgY1NKrB2dYrzrY.roa
Signing time: Sun 20 Mar 2022 12:10:14 +0000
ROA not before: Sun 20 Mar 2022 12:10:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56624
IP address blocks: 31.133.8.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92813 (0x16a8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e80c5a70a236384054f3584915092c41714eed7
Validity
Not Before: Mar 20 12:10:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ddc12255c69317586da6063534aac1d9d62bceb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7d:2c:6d:76:b3:3f:0f:e3:a3:bd:48:6c:34:
b3:b9:84:99:da:d7:89:ad:ce:c4:fb:b1:5d:98:21:
3d:d8:79:4a:84:c5:00:27:04:e8:6d:03:6a:22:39:
74:a2:8a:f8:35:49:16:8f:af:c2:7d:31:0c:7e:d5:
8e:e3:ef:0c:74:35:3f:02:7c:c8:8a:13:15:a4:93:
8e:7d:67:75:f4:dc:b4:35:59:0e:9f:c9:5b:cf:4e:
bf:2a:d5:d8:3d:24:a3:c6:d8:56:84:a6:02:2a:25:
a2:61:84:31:33:85:fd:1b:4f:83:38:45:d2:55:5b:
e9:18:0d:e1:59:f1:e3:15:4f:2c:27:e8:40:ff:64:
b5:20:c5:a5:b6:7b:1b:e1:db:d7:53:6b:73:fe:e4:
34:17:fa:ff:6a:a5:25:db:0c:43:e6:ee:00:6e:98:
33:d4:c4:49:00:25:b3:9d:15:7b:61:e7:81:cd:3e:
21:22:49:1f:12:58:2f:fe:5b:fa:f1:1d:b3:f9:52:
14:dc:d0:f1:d3:f8:2a:58:61:eb:f0:1b:ed:34:79:
f9:f2:b5:04:e3:e4:25:a3:18:83:b6:2e:15:49:80:
a0:55:7b:d7:60:d2:c0:8a:16:48:d4:26:72:53:83:
80:fa:91:8c:45:32:72:c6:3a:11:bb:75:24:1f:43:
85:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C1:22:55:C6:93:17:58:6D:A6:06:35:34:AA:C1:D9:D6:2B:CE:B6
X509v3 Authority Key Identifier:
keyid:1E:80:C5:A7:0A:23:63:84:05:4F:35:84:91:50:92:C4:17:14:EE:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/3cEiVcaTF1htpgY1NKrB2dYrzrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.8.0/21
Signature Algorithm: sha256WithRSAEncryption
0a:02:49:7d:d1:99:8d:63:c4:b9:84:14:d8:19:36:b7:86:3a:
4d:d9:0a:87:e4:e5:ab:86:a6:54:84:a7:b4:c7:19:f6:2c:d6:
4b:18:95:66:8e:1a:93:66:2c:8a:49:79:de:4b:0a:00:74:da:
4e:dd:53:c0:de:f9:d6:85:8c:cc:ae:a4:4c:38:b9:dc:74:ed:
8a:83:90:12:88:d4:04:79:87:d2:81:af:8c:fe:5a:46:91:a0:
1d:dc:95:00:a4:88:98:44:20:3f:78:b4:95:33:11:31:63:01:
9c:33:5f:9c:02:99:61:a4:e0:0a:f7:62:48:a7:12:64:89:b2:
88:f0:31:4a:f8:4d:ee:40:0e:a7:dd:5a:97:d6:51:d3:8a:71:
09:0d:52:4a:05:0e:60:5b:77:8e:05:b5:31:c1:9d:86:60:f0:
5b:3e:b5:06:d0:67:7e:68:e4:cd:7b:c4:df:b3:6d:a3:d0:ee:
23:98:9a:97:36:bf:d0:e1:c6:39:dc:5e:fe:6c:26:e4:64:3f:
f1:e6:7e:7c:b9:6a:36:21:1e:63:5f:4a:f0:5d:03:91:04:66:
0b:48:63:1f:af:83:e7:7f:15:19:09:aa:ca:6c:8a:bf:2e:8c:
32:1a:fc:24:55:c1:df:9f:9e:8f:d8:ed:ba:a7:75:c0:72:e7:
b5:a3:28:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:33 2024 by rpki-client on console-ams.rpki-client.org