Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/k1QQHMMvFgKqqXG15qjUFUoL88k.roa
File: k1QQHMMvFgKqqXG15qjUFUoL88k.roa (raw, json)
Hash identifier: JbiQD1fj0xgiar4FLqub849rxTly9/ETaTfSZ2gpWUs=
Subject key identifier: 93:54:10:1C:C3:2F:16:02:AA:A9:71:B5:E6:A8:D4:15:4A:0B:F3:C9
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0182CEE081C0A8A5A196301AA7F5F7AAB9D8
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/k1QQHMMvFgKqqXG15qjUFUoL88k.roa
Signing time: Wed 24 Aug 2022 08:03:15 +0000
ROA not before: Wed 24 Aug 2022 08:03:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210546
IP address blocks: 212.192.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ce:e0:81:c0:a8:a5:a1:96:30:1a:a7:f5:f7:aa:b9:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 24 08:03:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9354101cc32f1602aaa971b5e6a8d4154a0bf3c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2e:69:dd:03:7b:93:b9:c6:5b:3c:a6:be:3c:
8f:80:fc:98:09:52:27:1b:81:67:53:5c:de:89:12:
60:1c:49:ab:95:13:d8:37:f8:de:1b:17:4d:82:64:
52:2c:dc:5b:70:24:d6:38:cf:77:f3:b0:2a:ac:9d:
5a:9b:d3:fb:b3:46:71:b2:0f:44:73:79:57:f6:6a:
9f:87:17:e2:30:b1:06:b6:da:a1:d2:eb:7c:ba:f4:
1b:2f:37:7a:ca:0c:35:31:24:ea:5e:1f:e6:fe:7a:
97:b8:80:85:72:55:22:18:e6:ce:39:7c:2b:ab:06:
8f:0c:74:70:90:71:39:d6:7a:80:67:d2:85:8a:c0:
8e:da:3e:0f:2e:93:ed:ac:e7:84:1c:e4:0e:9d:62:
fa:c4:9c:08:22:96:b1:53:e5:23:57:cc:c8:44:5f:
5f:82:80:80:1e:97:d1:59:5a:cc:11:ee:7c:48:36:
19:29:99:64:81:4a:34:20:8b:e8:7d:1f:a0:b3:18:
c3:f6:0f:6a:ba:f1:14:23:e2:fa:e2:93:2b:33:b5:
77:b3:58:ea:c8:32:95:ad:46:05:22:e2:94:e0:38:
b5:ce:93:ad:e9:7b:af:d8:d8:40:c1:36:a1:ff:2c:
08:b7:93:7c:5a:7e:ce:ed:8a:12:83:55:a5:71:ce:
21:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:54:10:1C:C3:2F:16:02:AA:A9:71:B5:E6:A8:D4:15:4A:0B:F3:C9
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/k1QQHMMvFgKqqXG15qjUFUoL88k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.31.0/24
Signature Algorithm: sha256WithRSAEncryption
53:88:85:f8:2b:d4:3d:76:5e:3a:15:2f:7b:2f:88:fd:da:00:
9c:a1:74:77:94:b7:c3:3b:0c:c9:4b:a8:4c:71:0a:9e:1e:bb:
bc:05:23:8b:f0:e2:6b:9f:cb:7c:41:a7:43:50:62:76:7d:e3:
d3:30:c5:92:16:b4:f3:d8:f8:c8:7d:47:52:94:71:a1:88:c9:
84:0e:45:7f:ed:a4:66:52:0c:39:7c:55:0f:2c:59:64:68:a4:
9c:8b:99:4c:d3:ea:fa:fb:2e:39:2a:f6:23:7d:6b:a3:af:5b:
c6:8f:41:ce:fb:bc:b3:c4:96:d4:aa:3d:84:81:32:11:c1:ef:
13:6c:d0:2a:ff:e0:0d:e2:c5:a7:66:21:79:ff:8a:c4:ce:2b:
d5:80:49:e8:5c:38:87:62:3b:e9:7b:59:e4:4b:28:e1:7d:b8:
6d:21:09:42:63:3f:a9:05:ab:ea:c5:4f:a5:c6:0b:c4:d7:ea:
cd:3c:a4:dd:de:95:73:38:c7:bd:33:13:0d:62:58:6f:eb:7b:
b4:0e:49:73:cd:4c:be:47:6f:c2:82:87:19:a9:04:8e:4e:c7:
69:89:43:1e:0f:0b:7f:86:7c:5a:5e:83:18:23:02:ed:e8:d8:
e6:e6:92:31:69:73:09:82:90:82:90:eb:97:87:33:ee:6e:96:
c7:19:3c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:44 2024 by rpki-client on console-ams.rpki-client.org