Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/4vYnatYDvNavuodtZ02DYb-q90k.roa
File: 4vYnatYDvNavuodtZ02DYb-q90k.roa (raw, json)
Hash identifier: WIMQyk/TO8+3N5sCfUPr2PiCUL4DrRLV9AAegn8QoP4=
Subject key identifier: E2:F6:27:6A:D6:03:BC:D6:AF:BA:87:6D:67:4D:83:61:BF:AA:F7:49
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 2B0865F1
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/4vYnatYDvNavuodtZ02DYb-q90k.roa
Signing time: Sat 01 Jan 2022 13:58:03 +0000
ROA not before: Sat 01 Jan 2022 13:58:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200670
IP address blocks: 85.31.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 721970673 (0x2b0865f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 13:58:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2f6276ad603bcd6afba876d674d8361bfaaf749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:33:3b:1a:61:23:22:2c:36:44:1c:fd:04:1c:
09:f2:1e:77:54:72:45:02:ff:26:d7:fc:d5:80:a5:
e4:6c:5d:8e:ab:df:fd:aa:01:87:e3:96:dc:04:f7:
c6:65:07:ac:3a:63:50:c7:84:06:2a:4e:b3:32:06:
61:c8:a1:6d:d5:f2:64:62:a6:25:6c:66:44:e1:fd:
46:68:f4:a3:6f:05:ff:16:aa:bc:36:8b:0b:39:28:
bc:7e:8c:7f:19:cd:37:65:bf:a7:3b:d9:75:18:1b:
fd:d5:3f:c9:93:5e:80:d2:d9:bf:6a:1f:97:89:77:
95:bd:b3:93:99:da:99:3d:c8:4c:34:e6:df:44:80:
02:0e:34:ee:11:0f:8f:55:3a:93:37:2d:02:72:f4:
26:b8:3e:9f:16:14:83:a9:a9:42:80:a5:bb:15:ac:
6a:d7:bd:49:70:6c:ff:64:e9:c4:ae:19:37:f3:5d:
f6:69:cb:1c:f0:4a:a5:a9:3f:ed:21:26:28:10:23:
4d:62:a0:15:e1:42:72:5b:9a:69:ca:5c:c4:44:76:
26:91:e7:7d:19:35:c4:8b:29:d3:f9:4b:d0:fc:b7:
73:fc:1a:0f:67:c7:b0:29:a1:d0:29:86:f1:af:1c:
e9:e6:ee:bd:27:9f:25:68:f6:19:9d:c8:7b:cc:50:
34:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F6:27:6A:D6:03:BC:D6:AF:BA:87:6D:67:4D:83:61:BF:AA:F7:49
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/4vYnatYDvNavuodtZ02DYb-q90k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.243.0/24
Signature Algorithm: sha256WithRSAEncryption
70:88:50:b6:87:b9:9c:7f:bd:ae:68:34:52:69:81:d5:23:1d:
3c:75:f0:ff:f8:e6:db:6b:40:85:98:9b:64:6f:15:9c:40:ff:
08:b2:8f:f5:2c:c2:48:29:35:f7:03:e6:83:f6:bf:0e:19:41:
76:12:17:f3:69:e0:93:a7:ab:bd:2d:9b:7b:4e:0d:9a:98:ae:
6c:d0:da:cc:ed:3a:05:e1:da:71:fb:bc:e8:55:f3:fd:c8:5d:
a6:73:d2:7a:8f:7e:d8:d4:60:98:6a:cb:a1:43:00:8c:b9:6f:
7a:d8:4d:98:73:cf:38:f7:fc:5c:44:68:20:67:82:77:a1:d7:
0a:b3:2f:d3:61:a5:97:14:1f:7e:0c:54:2b:38:52:db:ec:cf:
eb:6a:2d:04:bb:57:36:54:40:ca:84:a5:e3:9a:10:f0:a6:2c:
c4:f4:2b:b0:36:61:e0:87:90:71:8a:8b:c1:39:c4:fc:98:06:
fe:eb:f8:da:2a:ee:8a:85:ed:d6:7c:f2:b0:2b:55:e0:fd:b7:
15:31:7d:a6:8c:71:35:23:a7:73:53:bb:15:fb:d2:1c:35:5f:
3d:39:55:8e:20:34:0e:81:28:66:e2:55:91:44:88:c4:0b:89:
39:01:7f:9f:88:73:51:47:a6:cb:ec:a6:7b:ac:62:bf:59:a7:
64:25:09:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org