Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/aI_Kndwb16rEDlYXErIohcUKEWA.roa
File: aI_Kndwb16rEDlYXErIohcUKEWA.roa (raw, json)
Hash identifier: Eru4u5ntVDkLKg9M8cC4A6WqjN2MelfJASgD7LbTcc0=
Subject key identifier: 68:8F:CA:9D:DC:1B:D7:AA:C4:0E:56:17:12:B2:28:85:C5:0A:11:60
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 01846FC43FBC7F165EF35D9F13F95D08A839
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/aI_Kndwb16rEDlYXErIohcUKEWA.roa
Signing time: Sun 13 Nov 2022 06:54:03 +0000
ROA not before: Sun 13 Nov 2022 06:54:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 81.31.232.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:6f:c4:3f:bc:7f:16:5e:f3:5d:9f:13:f9:5d:08:a8:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Nov 13 06:54:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=688fca9ddc1bd7aac40e561712b22885c50a1160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:19:6d:61:21:7d:31:13:ac:42:85:9f:53:9c:
2c:0f:10:02:d6:92:ac:77:f4:e6:25:5e:54:9d:67:
89:09:28:52:ec:1d:49:da:b4:eb:f4:95:92:c0:ab:
b5:4c:a4:c6:d5:54:c2:c3:21:6f:14:24:0d:bc:18:
34:22:35:26:82:fe:da:9e:82:63:bb:9c:38:1d:15:
ba:cd:7a:8d:a7:53:8e:b8:66:60:7a:bf:ee:2e:b4:
fa:20:86:d2:d7:a2:5a:cd:23:a2:65:b2:d8:97:a1:
20:3e:72:61:a4:50:6d:47:55:33:50:54:d2:de:6e:
c7:fa:aa:f6:7c:9b:49:5c:75:f6:5c:77:a1:2c:64:
7e:76:fe:db:29:73:84:5b:d8:e6:57:0f:55:66:86:
16:a9:fa:2e:0f:7e:5b:d9:09:59:00:5d:d6:4a:b8:
b0:8d:8f:db:dc:dc:c7:ff:ad:a0:9e:6d:c5:bf:10:
6d:4a:23:3f:37:21:18:08:4d:a4:1c:b8:83:c5:6e:
99:99:e4:f2:63:9d:d3:39:ad:4a:f8:69:ae:ac:42:
9a:a8:59:fc:e7:0f:d0:22:0c:f4:74:a1:b1:dc:f9:
cc:96:aa:94:cb:fd:ef:ac:1c:86:99:91:26:e7:1b:
bf:33:14:7a:74:91:e1:93:e7:49:37:b3:aa:2b:a2:
bd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8F:CA:9D:DC:1B:D7:AA:C4:0E:56:17:12:B2:28:85:C5:0A:11:60
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/aI_Kndwb16rEDlYXErIohcUKEWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.232.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:50:82:f3:f0:11:0b:af:83:fa:a1:07:bc:9b:38:a4:c3:9d:
90:7c:a8:e2:de:bd:b4:55:5a:4f:d5:be:ef:77:5a:60:dc:9e:
18:dd:b6:cc:93:7a:7a:e2:71:ef:51:0a:b4:2f:1d:62:e7:2c:
bb:8d:5e:62:61:d5:ef:b2:6f:6a:8b:fd:9b:60:28:ac:1f:5c:
bc:66:ad:9a:3b:a2:d2:90:18:c6:ba:5e:25:be:22:9d:df:6d:
be:20:6a:94:75:61:fe:a6:04:87:48:b7:00:9a:5a:68:c1:8c:
c9:d3:51:b1:22:e3:b4:c7:44:b6:2f:22:95:1c:25:37:b6:a4:
2a:7f:bf:af:35:fe:2c:79:26:9b:61:82:12:fa:03:f3:f5:89:
3c:25:0a:8d:68:4f:01:49:3c:90:65:de:65:ee:9e:da:47:6b:
c1:a1:bf:87:73:d0:55:0a:ae:b3:85:30:c9:99:eb:0f:dc:68:
9d:76:dd:d3:ab:9c:9d:6f:34:d0:f2:17:d3:d7:f6:9d:9b:42:
94:d1:3b:38:9f:cc:92:27:82:a6:b5:60:e8:92:21:a2:4d:1e:
5c:e7:57:c5:e7:08:bd:f8:bd:dc:1b:8a:e8:dc:a0:03:18:5b:
17:a0:1e:61:4f:31:32:23:9a:f5:96:e6:d8:af:c0:9f:ed:33:
0c:e4:e8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:53 2024 by rpki-client on console-fra.rpki-client.org