Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/no9jmKDp9zZx9tTjSisbdj_gJnY.roa
File: no9jmKDp9zZx9tTjSisbdj_gJnY.roa (raw, json)
Hash identifier: d+O5jfIuDKhmR6a5GaO9O9JCZezja+9+NWmVfYa4Eeo=
Subject key identifier: 9E:8F:63:98:A0:E9:F7:36:71:F6:D4:E3:4A:2B:1B:76:3F:E0:26:76
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 34213029
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/no9jmKDp9zZx9tTjSisbdj_gJnY.roa
Signing time: Sat 01 Jan 2022 09:02:49 +0000
ROA not before: Sat 01 Jan 2022 09:02:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16200
IP address blocks: 81.31.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 874590249 (0x34213029)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Jan 1 09:02:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e8f6398a0e9f73671f6d4e34a2b1b763fe02676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4f:77:a0:2a:d1:49:88:63:fb:4d:6c:02:54:
34:33:11:1c:03:f5:c1:48:fd:ab:23:5a:1a:65:8e:
ff:af:c4:2c:16:da:12:2d:e6:f6:3f:dd:67:b7:65:
8a:b5:df:c8:e1:10:15:4c:4e:72:50:4c:bc:01:e0:
01:1d:97:3f:01:9a:b1:9e:b3:cc:90:f3:eb:31:e1:
58:2f:73:b1:56:25:d2:55:5e:f7:0a:3b:ed:eb:27:
08:8b:e2:5f:f4:5b:98:ab:77:ac:22:20:4f:e4:c6:
bf:ec:7c:9e:28:01:3e:e4:55:e4:92:64:38:12:a7:
31:85:52:6e:8f:0f:6d:7b:9e:04:76:c3:da:8d:59:
c3:1f:58:40:49:87:73:ef:d4:ed:48:65:bd:44:f9:
9b:f2:2c:1a:98:c7:64:66:3c:56:fa:b7:71:dd:74:
15:7e:75:e3:9e:97:89:15:54:8b:86:f9:92:08:b7:
9c:00:63:53:c9:a6:21:d9:38:20:5e:08:7d:c9:d9:
16:47:47:4c:bd:56:19:08:9d:ac:d3:70:22:e1:41:
73:04:5c:bd:c2:a8:77:58:d2:25:5b:44:70:06:1a:
d1:22:bb:b7:e3:04:b0:35:05:95:04:d3:86:1a:f3:
72:ab:ce:a6:44:c3:2a:44:55:72:05:39:40:38:ac:
bc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8F:63:98:A0:E9:F7:36:71:F6:D4:E3:4A:2B:1B:76:3F:E0:26:76
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/no9jmKDp9zZx9tTjSisbdj_gJnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.243.0/24
Signature Algorithm: sha256WithRSAEncryption
71:41:2c:05:0e:2d:81:92:17:e2:b9:37:40:0e:17:fb:e7:2f:
18:08:ef:f6:ce:e8:1d:94:95:76:ba:98:d2:fd:af:a8:a1:a6:
ce:c5:d2:93:bd:74:bb:1e:fe:2b:57:c9:f2:37:cc:fe:93:32:
60:b3:b2:2d:73:4e:1a:e4:24:10:da:7d:21:b1:9a:a7:8c:41:
e6:9c:7b:4e:0f:5d:53:0b:c3:cf:2f:e6:a4:53:db:13:fe:fc:
5c:f0:96:c6:c5:8a:85:64:0a:3f:92:c7:49:f4:0f:93:1c:79:
d7:09:0b:3a:46:7d:92:15:cd:e5:55:5c:1b:b4:2b:ef:2d:08:
31:3b:fd:d3:e1:ed:c2:36:11:87:92:84:bf:d7:57:53:88:f3:
24:c2:08:53:69:57:57:1f:04:a6:62:af:1a:4e:77:48:78:4d:
52:b4:4e:8f:f3:07:7f:18:bb:7a:0a:15:a7:43:43:ea:d9:92:
5d:26:29:2e:aa:9e:ad:17:e4:44:e7:68:f9:2e:4f:06:af:fb:
5a:66:5d:de:ef:c0:6f:30:c6:6c:52:be:47:c2:b8:d1:00:16:
8a:d6:bd:33:72:b9:f4:e9:cf:0b:0f:f8:8b:b1:bf:f1:e1:78:
5e:c7:02:5c:36:7d:2a:da:a6:0f:22:bf:82:ae:64:93:b9:8f:
5a:37:bd:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:09 2023 by rpki-client on console-fra.rpki-client.org