Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0yATz2bsU4HtRoFVV0uOQPSxNfE.roa
File: 0yATz2bsU4HtRoFVV0uOQPSxNfE.roa (raw, json)
Hash identifier: uYrcG+QNkbzt/JmPIU64f5VsMIZFVW/GnOInDjJ5thA=
Subject key identifier: D3:20:13:CF:66:EC:53:81:ED:46:81:55:57:4B:8E:40:F4:B1:35:F1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1C7AFFFB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0yATz2bsU4HtRoFVV0uOQPSxNfE.roa
Signing time: Sat 01 Jan 2022 01:02:42 +0000
ROA not before: Sat 01 Jan 2022 01:02:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61437
IP address blocks: 31.13.233.0/24 maxlen: 24
31.13.232.0/22 maxlen: 22
31.13.232.0/24 maxlen: 24
31.13.235.0/24 maxlen: 24
31.13.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 477822971 (0x1c7afffb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 01:02:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d32013cf66ec5381ed468155574b8e40f4b135f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1f:7c:46:9d:59:7f:f5:e1:f8:3c:ae:aa:b4:
1d:8b:d8:f3:3e:cd:b8:ce:13:c4:93:e2:4f:90:bd:
24:48:c1:24:40:0d:ab:87:43:35:87:02:36:70:06:
b5:68:8c:3a:fa:82:38:0c:79:29:16:5c:b5:e1:dc:
22:4f:0f:38:0a:27:53:22:8d:b7:a3:15:fb:f6:ea:
84:74:1b:13:61:70:92:b8:90:71:81:8a:37:0e:8c:
39:07:83:ae:96:60:68:4f:76:2a:c3:79:ce:2c:f6:
1a:71:89:62:e2:f7:d0:14:72:68:2b:19:08:9a:37:
d5:cb:6a:25:e3:a0:86:ff:61:ff:58:27:30:c0:17:
c5:f0:6a:68:64:cb:40:36:7a:d3:c2:40:26:08:2d:
36:e1:5f:1e:03:b2:43:28:e1:9f:f2:2d:d5:07:c2:
c9:59:a5:39:f8:b5:59:47:b1:5b:7f:47:19:b8:a5:
7e:04:ab:5f:ef:9b:57:d6:37:67:41:f9:e1:ce:03:
62:7c:e7:8a:9a:f7:be:d5:b0:2b:04:75:37:8e:5b:
94:35:48:df:2d:59:c2:33:45:92:a1:85:4d:e9:92:
14:de:93:65:cf:de:d1:88:1c:b1:cf:45:75:1a:ae:
fc:32:cb:c0:a9:27:7a:b1:0b:e1:3a:a5:16:1b:2e:
f5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:20:13:CF:66:EC:53:81:ED:46:81:55:57:4B:8E:40:F4:B1:35:F1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0yATz2bsU4HtRoFVV0uOQPSxNfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.232.0/22
Signature Algorithm: sha256WithRSAEncryption
71:0f:86:7f:f1:a1:04:47:f5:08:f3:54:03:10:e5:25:ea:b1:
95:dc:ae:7b:6a:5f:64:1f:f9:bc:f5:6b:28:0b:0b:62:2a:03:
20:c8:25:43:64:25:a8:50:69:62:93:90:a4:25:91:d9:f7:36:
75:52:71:bb:da:d2:55:02:db:e8:d3:ce:2c:ba:83:fa:ee:1d:
28:58:e6:b1:04:b1:2f:c5:d2:32:b9:ff:54:83:96:fe:bf:b2:
00:de:a8:82:22:b8:3d:3a:cd:d4:f1:75:af:f0:5a:7a:d0:2b:
a7:9c:fa:c4:dc:7d:f2:fc:cd:81:55:69:80:f7:30:ca:f3:69:
5d:2e:a0:30:0e:96:3b:02:6b:80:82:3f:75:d0:4d:0a:a8:9f:
d7:ae:4d:ff:c5:87:16:d6:6a:44:e2:b2:ed:86:8c:b5:62:3d:
b1:c3:30:de:cd:3d:8e:d9:e5:b3:8f:bf:b0:30:ac:ff:50:f9:
ab:b1:8c:59:a5:27:c6:9e:15:a9:df:43:a4:83:ba:58:a0:db:
dd:db:3b:3b:cd:87:4f:1a:bd:79:4b:f2:b8:68:0a:e4:d1:6c:
08:2a:36:92:d2:de:8d:df:69:37:9d:df:21:1f:7a:3f:a7:e9:
92:ae:98:fd:d0:47:77:a2:a6:e6:77:2b:75:f2:c3:92:c4:63:
ce:8c:6d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:30 2023 by rpki-client on console-ams.rpki-client.org