Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/A7QpRzmNFCV1U7EELwsTMbo-7xs.roa
File: A7QpRzmNFCV1U7EELwsTMbo-7xs.roa (raw, json)
Hash identifier: Y6yT+5O2sWFzyuOSpw7BmMJqzT2gMrKEuhf/9Xou43M=
Subject key identifier: 03:B4:29:47:39:8D:14:25:75:53:B1:04:2F:0B:13:31:BA:3E:EF:1B
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 0181CE580D20FD262F3FE85B82834C0EEF0D
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/A7QpRzmNFCV1U7EELwsTMbo-7xs.roa
Signing time: Tue 05 Jul 2022 12:31:25 +0000
ROA not before: Tue 05 Jul 2022 12:31:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 31.43.164.0/24 maxlen: 24
31.43.165.0/24 maxlen: 24
185.255.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ce:58:0d:20:fd:26:2f:3f:e8:5b:82:83:4c:0e:ef:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Jul 5 12:31:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03b42947398d14257553b1042f0b1331ba3eef1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9c:3e:18:41:b1:59:e2:00:99:b1:d9:5d:6f:
d9:de:d7:7c:35:81:73:05:2e:3e:a6:7a:b4:ed:7e:
af:c9:d9:3a:0e:03:47:6c:0f:f2:c9:64:96:05:9a:
a7:27:07:33:0c:1a:9f:65:62:e1:04:5d:37:34:6b:
db:0f:bd:ac:56:39:ed:2e:a2:ae:31:4c:f2:9f:b0:
17:7e:0f:fd:f8:50:7b:25:ea:41:1b:d9:34:fa:f7:
03:2e:0c:61:df:18:8a:25:82:8b:3b:53:fd:6f:87:
ff:99:9c:87:63:41:81:c7:cd:4c:55:3a:98:de:a0:
32:32:4b:da:ae:24:a9:1d:13:43:b2:12:34:4b:f2:
73:8d:39:72:56:91:9f:9f:33:35:84:f6:80:22:71:
c7:29:2f:d7:68:a2:37:3c:dc:50:6a:16:6a:b6:66:
f8:ba:41:79:28:48:bf:f3:3c:be:2f:bb:46:9e:90:
35:92:ec:df:d1:89:87:c1:1f:d3:c4:07:05:99:e4:
fa:1c:46:8a:13:f7:59:4d:e3:98:e6:0c:e7:14:2a:
0c:58:8d:36:9b:45:cf:13:46:5a:3f:3c:dd:cb:23:
de:84:9a:c5:41:d1:df:24:73:f7:b6:20:5a:36:a3:
74:d0:dc:13:f2:ce:96:9b:d4:29:17:07:5a:f3:aa:
99:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B4:29:47:39:8D:14:25:75:53:B1:04:2F:0B:13:31:BA:3E:EF:1B
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/A7QpRzmNFCV1U7EELwsTMbo-7xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.164.0/23
185.255.6.0/24
Signature Algorithm: sha256WithRSAEncryption
58:6c:26:6b:42:0f:87:94:9e:aa:0b:55:4f:db:01:0e:35:0a:
70:50:4a:66:51:b5:5b:e1:98:0b:7e:9f:88:d7:23:d2:d3:db:
ea:01:fd:0e:01:79:20:b7:8f:c8:12:c7:ff:ec:31:07:f9:6c:
ce:c4:00:42:a4:fe:b3:5b:19:35:bc:4f:9f:f5:95:8a:91:3e:
01:9b:c9:c1:d3:78:86:e3:71:5a:4c:ea:69:bb:4f:fc:24:d5:
4d:97:05:8a:b9:2c:0e:66:aa:78:af:ef:85:c0:c0:23:fb:dc:
50:c7:aa:ef:3c:aa:91:5a:65:7b:81:83:cd:d4:6d:c7:e3:91:
53:57:e7:87:aa:a6:5b:97:8e:d3:9f:bd:d0:b7:a0:d7:98:71:
93:76:c3:7c:e9:92:28:4b:bc:f5:6e:da:ba:a4:06:b6:e5:ad:
a6:a3:ba:53:5d:34:6b:14:44:dc:5e:71:a1:1e:00:74:f8:74:
40:53:0e:68:bd:07:85:41:f0:76:9d:b2:8d:e4:17:e7:95:fc:
44:57:23:64:7b:45:28:68:53:b7:65:c9:c9:df:e1:08:8f:d9:
d4:b2:72:5b:5f:86:32:e2:c1:fe:12:be:48:fb:e0:a3:af:97:
51:14:68:04:c8:49:e0:a2:87:b4:87:fe:8b:57:27:aa:b6:83:
e0:33:e6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:48 2024 by rpki-client on console-ams.rpki-client.org