Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/SKJWK9IJe7SIXYYHiW9R2a2h0OU.roa
File: SKJWK9IJe7SIXYYHiW9R2a2h0OU.roa (raw, json)
Hash identifier: g4Dnq9NhDU9Wv+2lTd/B0QS4XVgcve6i9jSIaA8X88Q=
Subject key identifier: 48:A2:56:2B:D2:09:7B:B4:88:5D:86:07:89:6F:51:D9:AD:A1:D0:E5
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 48748B34
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/SKJWK9IJe7SIXYYHiW9R2a2h0OU.roa
Signing time: Sat 01 Jan 2022 03:00:35 +0000
ROA not before: Sat 01 Jan 2022 03:00:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198620
IP address blocks: 31.184.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1215597364 (0x48748b34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 03:00:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48a2562bd2097bb4885d8607896f51d9ada1d0e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5b:89:29:f0:a3:b3:3d:20:c8:c2:e6:de:1b:
ac:74:9d:c9:1d:ad:13:30:24:0e:77:d3:41:5a:55:
ef:23:e7:83:71:7a:42:0e:bb:cd:21:ac:32:1a:c1:
24:10:1b:74:30:f9:de:21:39:1c:2a:4e:60:37:b2:
5d:46:69:f8:d1:23:c9:74:95:36:36:9a:41:16:33:
98:c2:49:09:d6:57:be:44:85:0f:60:f7:23:f7:75:
54:af:60:58:de:c8:cc:c3:54:7e:42:25:b2:9f:09:
20:d3:a5:f1:03:b2:cf:7f:74:b0:ad:80:e2:5b:3f:
ac:66:91:7f:76:58:d1:38:ca:3a:83:bf:27:0f:0d:
a5:e0:aa:54:12:3f:46:e8:08:6b:20:48:fb:26:56:
0a:db:67:6d:8a:05:b2:75:cf:f4:d1:0e:c3:2d:8d:
fe:de:49:45:a9:56:31:7e:ac:f3:a0:f4:41:fd:dc:
ad:fe:63:75:16:54:b3:22:d6:1e:b2:8a:da:b5:2e:
de:5c:45:69:84:bd:95:02:a2:be:54:c9:59:5b:5e:
23:24:5b:00:5d:49:3e:07:01:08:5c:1d:7e:a5:e4:
10:5f:5b:af:43:a3:b9:36:6c:4d:a6:66:26:53:43:
3e:61:03:62:d0:bd:73:c9:c1:07:83:33:96:ac:97:
de:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A2:56:2B:D2:09:7B:B4:88:5D:86:07:89:6F:51:D9:AD:A1:D0:E5
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/SKJWK9IJe7SIXYYHiW9R2a2h0OU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.184.236.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:f0:0a:57:19:1b:b8:8e:04:6b:95:3f:a2:29:61:5f:10:fb:
93:c2:08:16:ce:26:21:87:65:32:c8:52:50:ec:de:43:51:bc:
fe:1c:9d:c1:f2:a4:fe:39:b1:0b:d9:45:98:61:62:43:28:3d:
ee:9e:4d:ae:b6:49:41:32:d7:58:01:84:63:4a:fe:3b:e8:37:
2b:9b:96:e2:66:05:fa:28:0c:68:06:f2:64:92:3f:c5:0d:5b:
a0:7c:fc:1f:20:a1:b5:e9:8c:1f:78:b9:48:d0:de:40:ba:57:
8e:29:c4:5b:eb:a2:ed:f4:81:5f:c9:0e:e2:df:be:56:8d:e7:
74:06:0b:08:c0:21:6e:8a:3f:83:d6:70:79:6f:d9:9c:39:bf:
5c:48:f4:06:ea:99:0a:71:c8:56:ff:60:a5:32:b0:1b:01:ea:
b1:b2:fe:be:fa:bc:48:c2:6d:93:d0:87:ee:a5:0b:57:3a:20:
b2:4d:4a:0a:69:98:ea:3a:23:4d:f4:84:5f:35:8b:2c:c4:e0:
52:86:b4:d2:f4:6c:a4:61:a0:84:31:10:fa:8e:aa:c3:96:a3:
de:d4:0c:5e:58:a4:9e:36:f4:9f:df:54:1d:b6:90:e7:a8:8e:
dd:6e:3a:5a:97:33:4a:a2:9c:9f:92:0a:c2:f5:32:9e:5e:6e:
5e:0d:34:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:43 2023 by rpki-client on console-ams.rpki-client.org