Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pLiQhvNzlHHe3paZJsfrsOrGk4o.roa
File: pLiQhvNzlHHe3paZJsfrsOrGk4o.roa (raw, json)
Hash identifier: pT5VT7vpSY0BaNeE38J7C6Z9nq6Eoq+qaNTtSpkTzxM=
Subject key identifier: A4:B8:90:86:F3:73:94:71:DE:DE:96:99:26:C7:EB:B0:EA:C6:93:8A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1ED6E4DC
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pLiQhvNzlHHe3paZJsfrsOrGk4o.roa
Signing time: Wed 01 Jun 2022 07:59:20 +0000
ROA not before: Wed 01 Jun 2022 07:59:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22653
IP address blocks: 31.169.124.0/24 maxlen: 24
31.169.125.0/24 maxlen: 24
31.169.127.0/24 maxlen: 24
31.169.126.0/24 maxlen: 24
194.55.226.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
194.55.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 517399772 (0x1ed6e4dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 1 07:59:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4b89086f3739471dede969926c7ebb0eac6938a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e5:6c:72:70:63:94:db:e9:b5:04:4e:8b:73:
ab:19:43:b0:25:c8:e6:ed:9d:85:15:1d:20:a4:33:
04:a6:1c:4a:fc:23:55:6b:9c:5d:ed:5b:cb:20:9b:
29:5b:b3:e2:04:2d:5e:8f:bf:1c:ad:04:67:d1:54:
af:57:34:58:c5:2c:c2:13:4e:16:96:a9:70:c1:6e:
9a:8d:12:b3:5f:7a:c8:93:a9:92:c0:63:1a:e8:63:
5e:c9:9b:84:c5:e2:6b:02:0b:ba:20:33:27:63:c1:
6b:50:5e:e1:ed:5b:0c:b2:62:36:df:5f:c2:6b:bf:
a9:2d:d0:bd:1a:89:b3:fe:a7:15:6c:83:79:b7:6e:
9f:4d:c6:44:18:0b:7e:9b:47:89:4b:9c:a9:46:9e:
9d:b5:d4:d6:2c:ee:88:dc:7a:3b:18:53:91:b0:da:
4f:79:c7:84:e7:2e:fd:a1:ff:f1:15:e4:5f:86:d9:
5d:07:40:03:52:07:14:b2:d1:2b:42:6a:33:d2:7c:
6b:75:84:0a:95:ee:08:08:71:af:f6:94:90:59:f8:
be:07:67:29:23:11:9c:cd:54:0c:d1:b7:b4:f8:c1:
f4:21:d8:a2:8b:ae:16:47:92:3d:b0:67:f8:fa:ca:
99:34:3c:b0:de:48:f2:af:fe:50:2b:22:db:5a:4f:
3d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B8:90:86:F3:73:94:71:DE:DE:96:99:26:C7:EB:B0:EA:C6:93:8A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pLiQhvNzlHHe3paZJsfrsOrGk4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.124.0/22
194.55.224.0/22
Signature Algorithm: sha256WithRSAEncryption
40:85:0f:da:92:56:7a:bc:c3:93:58:2b:da:a6:2f:fe:7d:88:
ef:6e:c7:c2:0c:bc:35:05:05:57:b4:34:3d:b5:f1:ac:fa:01:
f3:2d:bf:f8:93:0e:f3:29:5f:30:79:a2:42:7b:b1:0b:ea:53:
36:4a:34:48:1b:52:8d:bc:24:45:9c:14:58:9e:10:25:43:f4:
90:a3:80:32:8c:af:f9:95:29:b5:fd:1b:b2:4e:bc:ef:4f:a6:
f5:fe:64:ed:ce:8a:73:9d:9e:cc:1d:19:15:c8:61:11:82:53:
b5:5c:79:af:2e:36:cb:eb:f6:3a:f8:d5:4d:28:80:75:63:7b:
90:73:8b:b9:61:98:c5:b2:60:c5:e2:5d:33:01:56:d6:20:6c:
5a:16:e1:30:0c:5e:1a:38:99:b2:25:b5:02:d7:5b:15:ed:2c:
92:9e:44:82:c9:aa:d3:ee:19:4a:a8:f9:08:56:4a:8d:51:a2:
c0:6e:09:87:5f:2d:e3:37:a9:64:8f:ca:a4:8a:fe:25:cb:2a:
dc:a1:89:79:35:5b:31:45:d8:22:f5:45:da:57:54:99:99:b5:
10:fd:1a:ed:50:b2:05:c4:22:af:12:96:da:06:68:8a:6d:6f:
af:ac:e4:39:41:86:89:e4:4c:53:4f:f7:d7:e3:3e:07:b0:e2:
14:8a:c6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:48 2023 by rpki-client on console-fra.rpki-client.org