Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/I8nyhWDrJLB7V0Pl2-P-Slz3IjU.roa
File: I8nyhWDrJLB7V0Pl2-P-Slz3IjU.roa (raw, json)
Hash identifier: atU7sPYV1e9iwmgjI/dqXkGp8XL/NlnxaQYUnG1l3C0=
Subject key identifier: 23:C9:F2:85:60:EB:24:B0:7B:57:43:E5:DB:E3:FE:4A:5C:F7:22:35
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 01841DD9EB046A07BD775ACE5B8484C2B331
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/I8nyhWDrJLB7V0Pl2-P-Slz3IjU.roa
Signing time: Fri 28 Oct 2022 09:08:51 +0000
ROA not before: Fri 28 Oct 2022 09:08:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49581
IP address blocks: 81.31.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1d:d9:eb:04:6a:07:bd:77:5a:ce:5b:84:84:c2:b3:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Oct 28 09:08:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23c9f28560eb24b07b5743e5dbe3fe4a5cf72235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f7:63:bd:9e:03:58:90:9b:37:53:78:fe:61:
eb:f3:77:03:50:da:c0:d3:c0:8c:67:4f:cb:7f:a2:
8f:25:cf:38:49:6e:04:5f:50:72:d2:01:b2:3a:fa:
26:bc:b1:41:67:20:4c:1f:95:9f:1b:1a:02:a5:68:
bc:e1:b5:ac:e8:b8:d4:9c:e9:75:79:57:dd:99:85:
a9:3f:a7:bb:72:72:e0:1e:09:28:fa:93:50:69:0f:
68:62:16:a1:73:70:ae:66:82:d7:7e:ea:17:54:50:
c1:ec:ba:da:8f:93:99:22:25:fc:a3:1f:cc:66:1d:
cb:48:27:ec:71:81:10:a5:8b:5b:b8:cb:7d:15:30:
36:02:25:97:f5:f0:2d:a6:24:a4:03:ee:87:f5:d4:
96:60:8f:49:61:e6:ee:58:fa:c7:22:2f:b8:de:fa:
77:ee:58:02:54:82:bc:14:81:ac:8c:dd:aa:b1:bc:
0a:2a:2d:6c:e4:3d:12:fd:66:d7:b2:e7:5b:85:97:
af:53:06:7f:7b:9e:51:88:c2:96:65:40:c7:32:6f:
df:71:21:5b:7d:07:1a:a0:77:07:33:31:c9:af:4a:
56:5d:31:49:a7:47:6d:f5:1e:01:a1:fa:ea:14:ac:
b4:3d:b4:b0:c6:76:d9:30:1c:ca:81:15:a5:9d:39:
e2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C9:F2:85:60:EB:24:B0:7B:57:43:E5:DB:E3:FE:4A:5C:F7:22:35
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/I8nyhWDrJLB7V0Pl2-P-Slz3IjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.231.0/24
Signature Algorithm: sha256WithRSAEncryption
63:4b:84:de:e2:69:4d:87:d9:3f:b8:fd:14:42:d1:f4:bd:c6:
41:3a:22:7a:92:bb:33:f9:55:b3:6d:d6:90:72:79:9e:5d:fc:
1f:3e:5d:b2:72:5f:06:f9:7d:f5:4d:4d:1f:90:27:7e:91:ff:
8e:09:a4:65:9e:f5:e5:aa:26:c9:b0:cb:b0:5f:a9:55:bf:3c:
e2:f3:f2:25:dc:76:26:f6:35:9e:98:cc:36:29:d9:8c:f7:16:
7c:d1:d5:e0:19:6b:29:a7:f7:d3:6c:05:13:a7:4e:9a:76:bb:
27:c3:3d:00:29:28:eb:d7:3b:fd:30:d9:87:ba:38:62:78:9b:
ed:70:b3:07:e8:ac:02:8b:05:c3:4b:ff:27:9b:6b:ba:b8:81:
77:ad:44:7f:1a:58:f8:c6:80:f2:2b:e3:c1:df:df:25:72:55:
2c:0d:d0:e3:87:09:fb:3c:69:ba:85:00:b0:8a:f2:45:0a:3f:
c7:3c:62:e1:db:ff:35:6c:6f:55:cf:d0:80:38:e1:77:45:3c:
dd:03:bf:d5:76:56:a2:9a:3d:7b:69:60:e0:25:6b:28:76:86:
38:22:7f:d4:7d:43:b9:e9:af:8f:58:4e:d5:75:b5:ba:58:72:
87:7b:09:cd:22:ce:7d:74:d6:1b:bc:4d:d5:35:91:b7:86:2a:
b3:c3:1b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:33 2024 by rpki-client on console-ams.rpki-client.org