Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/161b52-24f2-4535-8382-e7fe9c47660f/1/E4d4HCM0solXtaDolXRI1gIa5U4.roa
File: E4d4HCM0solXtaDolXRI1gIa5U4.roa (raw, json)
Hash identifier: 5TBb/0UmBX1rHrhluADz4wGe/Xjo7eyin6h3TlS/4Q8=
Subject key identifier: 13:87:78:1C:23:34:B2:89:57:B5:A0:E8:95:74:48:D6:02:1A:E5:4E
Certificate issuer: /CN=cf10ad912ef942aacb4d10add39903c6e9fbb03a
Certificate serial: 1DD89A
Authority key identifier: CF:10:AD:91:2E:F9:42:AA:CB:4D:10:AD:D3:99:03:C6:E9:FB:B0:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxCtkS75QqrLTRCt05kDxun7sDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/161b52-24f2-4535-8382-e7fe9c47660f/1/E4d4HCM0solXtaDolXRI1gIa5U4.roa
Signing time: Sat 01 Jan 2022 01:02:16 +0000
ROA not before: Sat 01 Jan 2022 01:02:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 194.31.59.0/24 maxlen: 24
194.31.64.0/24 maxlen: 24
194.31.79.0/24 maxlen: 24
194.31.87.0/24 maxlen: 24
2a0f:a440::/29 maxlen: 29
2a12:1dc0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1955994 (0x1dd89a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf10ad912ef942aacb4d10add39903c6e9fbb03a
Validity
Not Before: Jan 1 01:02:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1387781c2334b28957b5a0e8957448d6021ae54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bd:ec:19:71:d4:91:40:8a:37:75:54:26:18:
f5:84:1a:4f:3e:c7:23:16:ed:7d:f6:7d:ff:d6:75:
e0:3f:cc:fd:37:eb:82:7d:a7:b0:72:59:9b:92:eb:
6d:a6:7d:e9:00:78:b5:30:2c:58:3a:1a:1b:0a:92:
a5:e7:fc:a6:e6:24:99:18:07:c6:b3:3e:98:ab:bd:
fe:ce:24:f8:4d:68:33:dd:07:a7:78:7d:e6:30:4f:
52:d0:0f:aa:cb:f7:46:1c:40:4d:57:6b:45:18:ed:
a3:01:e2:ce:de:7e:8f:73:69:9c:95:9d:13:60:4b:
3c:e7:a5:95:86:bb:56:26:b5:c0:1b:ee:d4:63:02:
4c:49:8a:af:dd:8e:08:24:3a:14:e3:16:e2:49:ba:
8d:1c:99:27:13:6f:79:8f:b0:49:99:06:41:8b:93:
70:ce:99:bc:c5:b6:55:75:15:87:a6:1f:85:9e:03:
df:90:34:fe:37:ec:c1:79:53:97:2f:94:a4:db:56:
22:d1:0f:fb:2c:52:7d:d9:4d:45:31:1e:e7:c8:4d:
b8:7d:df:69:f8:db:33:c7:1d:87:f2:2d:ef:52:fc:
5d:03:31:54:43:d3:e9:7e:9b:fd:f6:d9:93:d0:33:
40:05:7c:39:29:b1:ff:8e:b4:36:f0:23:bf:21:70:
22:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:87:78:1C:23:34:B2:89:57:B5:A0:E8:95:74:48:D6:02:1A:E5:4E
X509v3 Authority Key Identifier:
keyid:CF:10:AD:91:2E:F9:42:AA:CB:4D:10:AD:D3:99:03:C6:E9:FB:B0:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxCtkS75QqrLTRCt05kDxun7sDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/161b52-24f2-4535-8382-e7fe9c47660f/1/E4d4HCM0solXtaDolXRI1gIa5U4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/161b52-24f2-4535-8382-e7fe9c47660f/1/zxCtkS75QqrLTRCt05kDxun7sDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.59.0/24
194.31.64.0/24
194.31.79.0/24
194.31.87.0/24
IPv6:
2a0f:a440::/29
2a12:1dc0::/29
Signature Algorithm: sha256WithRSAEncryption
10:1d:10:5b:3e:d2:6b:52:5b:66:85:9a:d6:b3:98:f8:0b:49:
0c:6f:67:e7:41:1b:5a:c1:86:57:7f:31:91:96:71:92:a3:b1:
c1:5e:b7:40:8c:c6:ae:e6:bd:9a:fb:20:9a:8b:4f:b8:39:a0:
28:29:a5:c9:62:1a:05:ed:52:4d:ce:55:52:6f:8c:fe:f0:7a:
d2:e4:59:80:63:57:ca:5a:3e:f7:80:3d:39:d2:87:aa:62:87:
69:c9:60:2b:53:d2:b2:d6:6b:05:46:78:d3:86:83:f3:1a:f0:
e5:65:17:14:e0:2c:13:76:e8:54:62:ec:6f:ad:0e:8b:46:63:
45:65:ba:de:cc:45:44:f1:71:8e:30:92:dc:8e:4b:23:b5:49:
21:e0:08:25:77:f5:f1:71:22:cb:be:20:ef:03:7f:9d:48:89:
eb:09:f9:2a:7c:08:fa:35:8b:a3:b6:1a:db:ac:d8:27:a5:91:
f3:c5:bd:92:53:b5:2b:59:69:68:aa:d9:c1:a4:49:5c:c0:3f:
a1:48:8f:7a:8e:13:62:b4:26:57:07:59:51:3d:9a:8a:aa:1b:
95:c7:8a:b6:2a:1e:b0:52:97:f9:aa:00:e2:b3:c6:bc:ee:33:
60:b9:85:0a:86:c6:5e:42:52:71:9c:dc:0f:ac:c8:5f:76:a7:
c2:12:8e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:41 2024 by rpki-client on console-ams.rpki-client.org