Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/B-n6UhxMlEjJa4-7rG4szBBLjxk.roa
File: B-n6UhxMlEjJa4-7rG4szBBLjxk.roa (raw, json)
Hash identifier: 4AQCENHZWkYDZ1vOgeKKpvUynOs1EUb+szEde5QAOyk=
Subject key identifier: 07:E9:FA:52:1C:4C:94:48:C9:6B:8F:BB:AC:6E:2C:CC:10:4B:8F:19
Certificate issuer: /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Certificate serial: 0281089E
Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/B-n6UhxMlEjJa4-7rG4szBBLjxk.roa
Signing time: Wed 16 Feb 2022 23:53:52 +0000
ROA not before: Wed 16 Feb 2022 23:53:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207422
IP address blocks: 31.129.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42010782 (0x281089e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Validity
Not Before: Feb 16 23:53:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=07e9fa521c4c9448c96b8fbbac6e2ccc104b8f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:04:50:35:4c:22:18:77:c6:c9:1d:51:4f:c4:
8f:10:29:20:68:83:a9:26:05:fe:9b:e2:21:b7:b1:
21:62:13:ad:e5:6a:27:04:45:1f:1b:5c:80:3d:95:
06:f0:c7:bb:bb:7b:01:c8:4e:d1:25:24:98:be:df:
b2:e5:29:8b:2e:26:f0:af:ab:b3:74:55:57:1b:c2:
94:f7:ed:e1:cf:ca:69:a6:62:11:f9:63:6c:6c:2c:
69:b6:6d:ec:76:ad:55:c7:7c:aa:14:b3:81:fc:56:
bd:0d:5a:e9:65:5e:29:ee:31:59:cb:7d:08:f6:d7:
7a:ad:01:10:72:f3:aa:6b:ba:90:ef:e6:56:d7:0f:
bf:a5:9f:a4:48:72:b3:d1:d1:31:d6:6f:7b:33:e8:
45:65:fc:ab:be:36:10:97:a7:de:fa:e2:75:ee:99:
b0:9a:a1:1e:fc:4d:9c:66:c4:22:dc:85:45:1c:b9:
31:fa:72:53:de:6e:f8:0a:95:f2:fc:f6:d8:05:6d:
5f:95:e3:9c:82:50:f0:cd:7f:6e:ef:06:40:d6:24:
d5:45:56:b5:30:3d:f8:d9:8b:b0:bf:a5:b0:bb:3a:
3d:88:bd:db:56:7c:ef:1e:a1:ce:a4:19:1a:4f:b4:
b3:46:13:d0:91:db:ec:dd:cd:9a:c7:09:74:d0:80:
3c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E9:FA:52:1C:4C:94:48:C9:6B:8F:BB:AC:6E:2C:CC:10:4B:8F:19
X509v3 Authority Key Identifier:
keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/B-n6UhxMlEjJa4-7rG4szBBLjxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.244.0/24
Signature Algorithm: sha256WithRSAEncryption
51:b1:af:9f:cb:bf:d1:05:32:cc:31:39:18:99:23:a6:a0:c2:
b8:56:e8:9d:c7:53:b7:c0:95:c9:fd:02:b3:f9:0d:36:3c:81:
fc:c2:ea:d3:03:af:43:ce:48:27:c1:c8:3a:55:95:cc:7d:a9:
33:57:96:30:07:71:98:f4:59:50:b7:22:1a:69:5a:16:b9:a1:
12:38:b0:db:7b:05:96:8c:3a:f6:31:b8:7c:41:30:88:4a:db:
a1:2f:66:37:73:78:e8:ce:83:ae:34:3a:56:e8:2b:46:d2:56:
ef:2c:9d:f5:f1:2c:ed:50:77:e3:e5:38:c8:e6:e3:1f:9f:9e:
f6:71:c5:b8:eb:55:ee:24:72:3e:48:a5:c0:55:83:c1:10:5e:
00:26:c5:92:5d:54:c8:2b:c8:96:2d:76:94:3a:23:5b:6c:92:
d1:65:d1:c3:ff:71:0b:8f:30:96:b2:cc:30:de:d4:dc:e3:29:
6c:8a:c9:e3:f5:46:10:14:fb:52:4e:f3:bc:e0:f0:d3:c0:64:
e8:ab:00:79:66:24:d1:93:86:82:ba:61:0e:5e:ce:3a:64:eb:
5a:fc:33:40:b2:35:29:8a:e3:35:e1:91:ce:ea:fa:05:46:34:
f5:18:e5:78:99:b2:6d:35:ae:2d:6e:99:b2:09:5b:8c:cf:bc:
2d:a4:12:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:23 2023 by rpki-client on console-fra.rpki-client.org