Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/VklFra5k3GjVpUFSgEHSFNLAc0I.roa
File: VklFra5k3GjVpUFSgEHSFNLAc0I.roa (raw, json)
Hash identifier: mTxfGuXEJn0dVuVbSNP5AadvcDnefJZqOe48wJo15/w=
Subject key identifier: 56:49:45:AD:AE:64:DC:68:D5:A5:41:52:80:41:D2:14:D2:C0:73:42
Certificate issuer: /CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824
Certificate serial: 07C7029E
Authority key identifier: A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/VklFra5k3GjVpUFSgEHSFNLAc0I.roa
Signing time: Sat 01 Jan 2022 08:57:11 +0000
ROA not before: Sat 01 Jan 2022 08:57:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39741
IP address blocks: 31.25.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130482846 (0x7c7029e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824
Validity
Not Before: Jan 1 08:57:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=564945adae64dc68d5a541528041d214d2c07342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2b:73:f0:b3:3f:e9:af:73:17:cd:0f:48:19:
ab:36:27:0d:98:c5:4c:22:f5:d1:65:91:41:09:e7:
3e:ac:c8:c8:24:18:6c:ea:dd:52:bc:31:fe:dd:d1:
80:d1:8d:f1:0f:75:5e:41:3b:c2:74:25:c7:ec:b5:
a6:3d:5b:0b:32:66:e1:b3:33:ec:2f:2f:e6:6d:f9:
f7:70:f8:21:a1:11:83:cc:4f:73:b1:0f:ee:0d:d6:
24:25:bc:d3:9e:66:2d:b0:3f:c7:c9:17:bc:88:39:
40:4b:62:51:06:fe:59:3e:b3:d7:ba:1b:3c:b8:64:
72:4b:ef:a6:30:cc:96:de:e8:4e:6d:59:27:f5:d6:
03:02:5f:2e:54:3b:64:e1:d9:83:bb:15:55:11:a3:
8c:45:dd:11:a9:75:c1:80:d2:74:e2:ae:74:94:a7:
07:92:fa:ee:06:32:cd:ee:04:cc:dd:a1:78:38:82:
cb:6b:9a:4c:9b:57:45:24:03:7a:97:c3:c8:47:8e:
81:e6:5b:b6:8e:61:93:39:85:58:3e:48:e3:7a:8f:
68:2a:01:58:3c:f9:91:06:14:62:0c:10:28:5f:06:
13:59:e8:1c:6b:2f:e3:ee:c6:37:59:5d:05:20:4b:
62:aa:8b:06:1e:b0:ee:98:d7:e0:9f:be:27:6c:e0:
3d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:49:45:AD:AE:64:DC:68:D5:A5:41:52:80:41:D2:14:D2:C0:73:42
X509v3 Authority Key Identifier:
keyid:A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/VklFra5k3GjVpUFSgEHSFNLAc0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.246.0/24
Signature Algorithm: sha256WithRSAEncryption
76:89:e8:3c:a0:2a:b6:c9:c2:e8:4a:2f:c1:f6:0a:60:69:79:
bb:b4:dc:e8:f7:ee:47:5e:70:39:74:ad:de:c2:ca:78:8f:1a:
0d:ff:75:8c:98:99:c1:4c:b8:a9:7f:ed:68:d4:30:2d:98:16:
c1:b6:d0:05:c2:b1:7d:4c:7d:6d:c6:1b:97:25:1a:53:a8:01:
94:7e:7f:8a:00:05:a8:e8:43:83:b8:f6:d2:d4:35:14:02:54:
b6:a4:cd:2f:e3:76:1f:5b:05:55:25:12:6f:7f:a7:1d:ff:ee:
f8:20:32:37:fe:97:0d:46:df:8e:d0:89:65:14:2c:cb:f9:41:
95:6f:15:e5:13:a2:cb:9a:33:9b:90:fb:0f:a8:a2:aa:3c:8e:
cc:4f:74:13:41:db:54:73:bf:1c:ee:e4:3f:50:ba:05:d0:d9:
f5:12:72:e8:7f:e6:19:f4:33:3b:55:be:8d:06:ae:2f:01:12:
13:6d:f8:b4:d7:e8:17:bd:e8:96:40:7b:5c:b3:5f:70:ae:71:
46:42:fe:8d:4a:b5:25:10:3a:32:a7:d4:f4:c8:bf:9e:10:e3:
54:b4:0f:b4:e9:6b:f2:6a:94:12:d2:cb:fc:2e:ea:ea:a5:38:
39:62:79:a5:da:cb:89:93:3e:90:89:7c:0d:b4:55:0d:f2:66:
7f:dd:7a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:12 2023 by rpki-client on console-fra.rpki-client.org