Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/vBlF6XCLCnc2jbVWWArlWoysejA.roa
File: vBlF6XCLCnc2jbVWWArlWoysejA.roa (raw, json)
Hash identifier: Klmjd82sTwWRZFxlTSb3ZUnQ3+kO3uc273s9KDjHySQ=
Subject key identifier: BC:19:45:E9:70:8B:0A:77:36:8D:B5:56:58:0A:E5:5A:8C:AC:7A:30
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 01841C3C5261135511EDACB4DE49EC9445E4
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/vBlF6XCLCnc2jbVWWArlWoysejA.roa
Signing time: Fri 28 Oct 2022 01:37:06 +0000
ROA not before: Fri 28 Oct 2022 01:37:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 31.43.164.0/24 maxlen: 24
185.255.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1c:3c:52:61:13:55:11:ed:ac:b4:de:49:ec:94:45:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Oct 28 01:37:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc1945e9708b0a77368db556580ae55a8cac7a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f1:22:0b:43:f7:23:80:54:f9:a1:e5:05:2e:
64:51:bc:a2:08:f1:d3:4e:ba:7a:19:c2:b2:2c:b4:
fd:4b:84:1e:8a:db:05:40:21:53:8c:61:83:cc:6a:
02:5b:02:78:f7:1c:3a:6a:3b:65:d7:ee:c3:2d:c1:
dc:f3:6a:0e:b9:74:ac:4e:95:f8:93:85:c7:55:95:
b8:b4:cb:de:34:92:19:e0:1f:00:ab:3f:fb:9c:21:
56:d0:44:7e:ba:1e:1e:dc:c2:c9:1a:b1:a0:cf:3c:
d2:ab:71:55:73:f3:aa:bd:a2:7d:08:c3:48:af:f7:
59:8e:37:d0:17:63:c7:a0:01:e0:c6:9d:db:a3:bb:
62:c2:35:70:99:7c:cd:4a:b5:0f:61:64:c0:28:6d:
5b:86:73:da:3f:d5:13:95:64:ef:ba:7c:1a:5f:02:
74:d8:36:e5:fe:4c:67:23:90:1e:18:67:a3:3a:3a:
3f:82:50:15:90:c0:82:ae:4a:55:13:6d:5f:15:77:
d9:24:3f:f7:c3:5f:4c:eb:6f:54:c8:fe:13:fd:86:
df:26:68:a4:0b:63:a7:c7:82:eb:80:8e:78:20:76:
54:e3:19:61:20:3e:98:40:3b:7e:bf:f4:a2:9f:dc:
6c:bb:b3:6a:26:6a:b6:d9:58:d2:5b:13:52:f1:33:
f0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:19:45:E9:70:8B:0A:77:36:8D:B5:56:58:0A:E5:5A:8C:AC:7A:30
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/vBlF6XCLCnc2jbVWWArlWoysejA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.164.0/24
185.255.6.0/24
Signature Algorithm: sha256WithRSAEncryption
96:11:5e:e8:d5:c8:5c:78:51:d1:c5:71:5b:44:2b:a7:3a:5d:
61:3b:71:1f:cf:b7:bd:a1:cc:16:0b:84:89:60:d5:55:7c:51:
dd:13:83:6b:bb:7d:36:84:c1:a5:b2:99:4c:0e:2b:9b:25:d0:
c4:2a:a0:69:14:44:06:65:2e:8e:5e:aa:21:8e:3a:46:24:46:
39:6e:7a:bf:0e:02:61:47:a2:c4:e3:5f:59:48:c2:f6:28:11:
72:b3:92:b8:79:7f:cd:e8:66:d8:1b:cf:19:97:97:81:c8:9e:
17:a2:1a:03:90:71:30:85:72:6e:99:42:f2:4b:e1:6f:32:d0:
7d:17:ba:a2:f2:4f:30:4e:59:1e:3c:0e:f5:15:f3:c4:1b:a9:
29:ed:87:33:da:30:bf:34:37:8b:f8:67:9c:f0:23:3c:00:2f:
4d:ea:6e:e3:02:c9:5b:5f:d4:c7:ff:72:42:31:92:c1:d5:f7:
af:1a:51:74:42:8f:64:91:8a:50:48:d3:d0:4a:cf:ca:3d:b7:
84:eb:6f:82:34:9e:ad:20:a8:5a:0b:ff:88:94:de:58:4c:ee:
bf:36:be:86:6b:3a:a7:9c:d9:f4:fe:5e:fc:93:2f:5d:b6:59:
4f:b5:c3:5d:76:15:74:fb:94:d8:5e:77:36:90:93:75:84:e8:
4f:a2:8a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org