Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/3EY-AhZzmdp-_VcAwpIzvr3Phr4.roa
File: 3EY-AhZzmdp-_VcAwpIzvr3Phr4.roa (raw, json)
Hash identifier: 3yEX6LHB4+HlpZO2VH/eK3CYoFJU728fXcwq1817r/Y=
Subject key identifier: DC:46:3E:02:16:73:99:DA:7E:FD:57:00:C2:92:33:BE:BD:CF:86:BE
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0184B1409752B89C04B0F01513B501DA7F43
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/3EY-AhZzmdp-_VcAwpIzvr3Phr4.roa
Signing time: Sat 26 Nov 2022 00:05:11 +0000
ROA not before: Sat 26 Nov 2022 00:05:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210718
IP address blocks: 193.31.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:b1:40:97:52:b8:9c:04:b0:f0:15:13:b5:01:da:7f:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Nov 26 00:05:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc463e02167399da7efd5700c29233bebdcf86be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:11:96:d9:3b:14:1b:ce:ad:a9:ec:14:5a:03:
af:1c:b2:80:09:34:6a:e8:34:30:66:40:a0:bb:49:
46:10:a0:1e:77:80:76:37:d7:64:3d:1d:b8:c1:b3:
08:f0:45:0c:3a:21:9a:eb:04:0f:52:98:67:77:26:
ad:89:10:62:bd:49:7a:3e:bb:53:4d:1d:1e:57:11:
25:a2:b7:f0:99:13:b9:d1:ac:06:20:6c:fd:f8:66:
09:20:db:b6:96:33:1c:b7:64:55:94:e2:4a:67:3f:
17:ca:f4:13:40:0c:db:7b:2e:29:54:a6:9e:9a:a1:
18:a2:42:cf:94:14:77:2e:67:7b:13:bc:98:46:85:
81:66:da:6e:6e:af:4a:85:ee:ac:32:dd:1e:97:02:
2b:ba:4f:50:f0:ae:2b:d8:c2:34:34:df:24:3d:3c:
fe:be:9b:f0:90:4a:c9:c4:73:7b:47:86:fd:8b:5a:
3a:5b:30:b2:db:70:0e:07:55:dc:30:9a:57:80:8d:
a4:fb:57:75:28:cf:c6:ac:27:dc:a9:e5:b7:8e:30:
49:d5:16:de:a5:d2:ab:3c:44:03:c3:6e:31:81:6b:
8c:c7:1f:0e:ff:23:84:fd:ab:6d:a7:da:ea:14:19:
a0:41:66:c2:d1:92:6f:c2:b6:53:c2:ec:44:04:38:
46:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:46:3E:02:16:73:99:DA:7E:FD:57:00:C2:92:33:BE:BD:CF:86:BE
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/3EY-AhZzmdp-_VcAwpIzvr3Phr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.28.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:e1:39:cb:3e:23:62:8f:88:db:52:05:21:87:dc:4c:71:bc:
62:4b:b6:f8:f8:c2:0d:82:b8:93:d6:6a:46:8a:ca:5d:09:54:
1d:f3:43:a9:15:14:42:34:93:e8:17:29:c9:0c:63:ec:3e:ea:
ef:44:ee:f8:47:09:88:08:ef:e9:fb:b3:28:2b:12:ed:a2:27:
7b:d0:bd:0d:c7:97:9e:80:4a:d8:c2:1f:57:c7:a3:b4:80:f3:
04:2b:34:ca:28:01:db:1e:49:e1:d4:56:4f:97:33:81:af:a7:
ba:9c:ac:1d:39:f3:f7:c1:07:a3:54:56:d9:d1:11:0e:e3:93:
f2:21:90:0d:25:d0:02:da:c4:09:55:aa:2f:57:d4:a7:8e:14:
5e:b5:a8:17:1a:b6:6b:a9:88:16:46:9d:7a:87:df:de:a8:7b:
c5:58:cd:ab:12:13:b2:85:cf:e5:da:2b:c1:b2:ae:2d:8d:23:
49:52:64:37:08:a4:db:e6:69:d4:ab:3d:2e:72:d7:1c:dd:c8:
45:c4:3b:aa:40:fc:51:4b:08:36:2e:ad:77:6e:9d:6a:71:e1:
19:a9:b5:2a:cc:d5:42:4a:c3:19:89:4b:c1:71:8e:e6:55:68:
5d:e5:4f:4f:05:47:c1:41:42:c6:3d:d7:3c:5f:ea:de:be:27:
6b:0b:23:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:39 2024 by rpki-client on console-ams.rpki-client.org