Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/S0m2rE-rVyHA3pB3rKMvB6pou8Y.roa
File: S0m2rE-rVyHA3pB3rKMvB6pou8Y.roa (raw, json)
Hash identifier: RVWyb6bNqN4KxwJgC3i+WoLDZOkDcsDODGa3sh66xg0=
Subject key identifier: 4B:49:B6:AC:4F:AB:57:21:C0:DE:90:77:AC:A3:2F:07:AA:68:BB:C6
Certificate issuer: /CN=515585aca423697c62236e2b5f91b41e4be7ae58
Certificate serial: BE915D
Authority key identifier: 51:55:85:AC:A4:23:69:7C:62:23:6E:2B:5F:91:B4:1E:4B:E7:AE:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UVWFrKQjaXxiI24rX5G0Hkvnrlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/S0m2rE-rVyHA3pB3rKMvB6pou8Y.roa
Signing time: Sat 01 Jan 2022 11:55:49 +0000
ROA not before: Sat 01 Jan 2022 11:55:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56546
IP address blocks: 31.41.21.0/24 maxlen: 24
31.41.22.0/24 maxlen: 24
31.41.23.0/24 maxlen: 24
31.41.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12489053 (0xbe915d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=515585aca423697c62236e2b5f91b41e4be7ae58
Validity
Not Before: Jan 1 11:55:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b49b6ac4fab5721c0de9077aca32f07aa68bbc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:53:6b:22:29:f7:1b:0c:48:1c:87:cc:19:a3:
e6:d2:87:a4:92:02:4f:11:d8:d5:e8:7f:58:bd:9b:
2b:7b:07:fe:d7:2a:29:b9:9b:84:0b:69:21:8e:82:
1e:27:e4:40:b4:f8:23:35:00:25:94:76:72:a2:f0:
bd:7d:7a:58:1a:c0:69:ae:8e:c7:9c:82:05:d9:15:
e7:0c:be:f7:6b:60:a5:a8:ef:32:2b:a8:a7:4b:77:
9f:3c:43:77:3f:fa:d6:29:f2:76:d3:dc:fd:f4:bd:
1d:bc:be:57:08:89:d4:5c:72:7b:b3:74:e3:a7:76:
09:e8:d0:32:6c:c4:08:a8:52:97:28:7a:ae:12:09:
7e:dd:72:b4:3b:9a:7d:bc:3b:90:fa:c7:cc:36:66:
04:f3:25:cc:e7:e1:ac:88:ff:10:61:ca:20:1e:f1:
43:12:9b:c6:cf:b0:d7:96:46:88:b0:30:a3:8d:94:
ce:db:45:06:62:1d:c7:a6:68:f8:6b:1c:78:70:0a:
ce:75:7f:e6:e6:7c:dd:ed:0c:65:7f:6f:0b:ea:eb:
ae:28:5a:da:d7:de:41:1b:60:c7:37:bd:73:10:de:
35:df:af:26:e1:03:eb:ce:20:5c:1d:06:30:06:8c:
d2:6b:f5:54:19:70:17:01:61:34:ae:7b:8a:00:bb:
4e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:49:B6:AC:4F:AB:57:21:C0:DE:90:77:AC:A3:2F:07:AA:68:BB:C6
X509v3 Authority Key Identifier:
keyid:51:55:85:AC:A4:23:69:7C:62:23:6E:2B:5F:91:B4:1E:4B:E7:AE:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVWFrKQjaXxiI24rX5G0Hkvnrlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/S0m2rE-rVyHA3pB3rKMvB6pou8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.20.0/22
Signature Algorithm: sha256WithRSAEncryption
80:02:85:e4:05:bc:8d:d7:63:bf:0b:62:46:a4:30:db:05:db:
ab:95:9e:61:15:87:b6:7f:9e:2c:04:b7:fe:bf:28:77:52:ca:
5b:60:db:f5:9d:9f:3c:df:10:5b:e6:57:e5:24:52:55:ff:be:
db:82:33:58:f2:f5:77:3c:d6:e3:99:d0:49:bc:cf:7a:76:36:
af:ae:8b:36:bf:14:67:43:a5:7d:a6:42:ce:6d:c3:c2:e7:08:
88:63:02:58:d7:02:d0:76:8c:16:ac:62:92:ad:88:30:9a:c9:
43:9f:77:49:e0:71:cc:fa:ce:91:70:34:9e:b2:16:3a:be:05:
b5:fc:9d:d8:78:da:b8:fc:a1:0d:29:ec:1b:ae:a8:1f:8d:24:
e4:f8:fb:98:ef:dc:31:99:fe:b9:f4:31:0a:a2:6b:56:63:70:
89:99:e9:7f:f0:e7:07:dd:57:0d:dd:76:75:28:69:af:6c:69:
8c:9e:4c:6b:24:8a:6d:64:64:9c:eb:ff:9a:5f:0a:f8:0e:15:
c0:f3:cd:2c:9e:04:3d:80:a4:1f:f4:1d:13:84:56:c3:6b:d5:
da:85:00:86:cc:07:4e:40:e8:74:6f:33:fe:e4:50:4d:7d:82:
72:e8:10:d9:96:15:ad:40:1a:c7:e3:78:05:79:38:ae:fd:9d:
af:24:cd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:51 2024 by rpki-client on console-ams.rpki-client.org