Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/u1PtycuaDlHZE2wUg1b-OAH4euU.roa
File: u1PtycuaDlHZE2wUg1b-OAH4euU.roa (raw, json)
Hash identifier: 09r95tgwhx/w9uDXcuWq32tiPQA7ss21joz1a+Fdv9g=
Subject key identifier: BB:53:ED:C9:CB:9A:0E:51:D9:13:6C:14:83:56:FE:38:01:F8:7A:E5
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 4919CCB1
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/u1PtycuaDlHZE2wUg1b-OAH4euU.roa
Signing time: Thu 03 Mar 2022 08:34:08 +0000
ROA not before: Thu 03 Mar 2022 08:34:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52000
IP address blocks: 31.184.242.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1226427569 (0x4919ccb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Mar 3 08:34:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bb53edc9cb9a0e51d9136c148356fe3801f87ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:21:fc:ad:cb:b3:44:3a:d2:82:d3:c7:7c:d1:
97:2b:7c:a4:57:14:a3:8b:af:93:43:ba:db:dc:00:
fa:cb:0e:3a:09:79:b5:75:9c:92:0e:82:fe:91:9f:
78:24:c0:83:a6:f9:a5:8f:ac:dd:17:7a:ae:a7:26:
3c:1c:63:6a:ed:49:25:1a:7a:e6:7c:d0:fd:0d:a2:
4f:17:3b:86:d1:5c:43:ee:d8:27:c1:bb:b2:50:6b:
fe:58:9c:dd:dc:51:14:96:74:03:87:96:90:ba:95:
6c:44:ca:b9:82:33:9a:9d:5c:be:79:37:11:c8:37:
4e:e6:f3:7c:a8:43:e5:f6:98:29:6b:74:6e:88:01:
18:b8:d3:43:15:3c:98:31:25:7a:1a:60:0b:c4:86:
be:e3:f8:52:1d:e8:db:42:b5:eb:1e:17:ac:be:08:
aa:7f:08:78:17:74:05:52:f0:7a:a2:ae:85:1f:56:
b7:0a:e7:b7:53:06:f4:af:3b:af:73:ba:82:74:45:
e4:08:8d:d5:88:70:f0:4f:77:02:35:d2:0c:c5:a4:
02:47:85:1c:eb:2b:16:55:17:4d:dd:9f:4a:c6:f3:
2e:17:29:af:e1:d0:16:6c:00:f8:a8:8b:d4:1a:3f:
9e:b1:87:8a:1f:40:9b:13:d6:0c:d2:ef:44:8c:c5:
6c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:53:ED:C9:CB:9A:0E:51:D9:13:6C:14:83:56:FE:38:01:F8:7A:E5
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/u1PtycuaDlHZE2wUg1b-OAH4euU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.184.242.0/24
Signature Algorithm: sha256WithRSAEncryption
10:8e:dd:a8:1d:df:31:0b:92:4c:61:4a:42:88:67:ac:bd:f7:
28:95:b4:c6:a6:66:89:fd:09:a3:f1:0a:3b:b7:40:28:9d:8c:
48:8c:db:51:71:c5:40:c0:a6:9d:2c:d8:6d:7e:9a:78:b0:78:
b6:08:02:bb:c1:0e:67:0c:8d:f7:f9:5d:7f:bb:d3:80:c4:7d:
42:a8:f0:99:e1:47:f5:92:fe:33:cb:3b:5c:5d:fe:37:8b:d7:
d9:dd:5d:e3:04:a5:70:64:88:fd:2b:dc:70:49:6b:19:8a:a7:
61:82:62:b8:7a:be:a9:47:41:e6:2c:72:97:34:81:d4:77:93:
ab:8b:48:08:62:e5:5f:dc:72:7c:db:98:ca:b5:84:4e:f9:7f:
bc:89:fe:ab:f0:80:9b:b1:bd:2c:48:72:2a:8f:92:8f:b6:a0:
7c:e1:ed:e3:b0:d9:41:de:b6:f6:da:d2:a7:e0:9a:b7:4b:a2:
ac:e6:bc:56:78:78:cd:ed:a0:ba:fa:29:73:44:be:5f:94:e4:
1c:61:73:94:e0:eb:dd:52:f6:12:3d:3e:63:20:73:ad:71:03:
a3:e8:b8:0b:ae:6c:1e:6a:70:85:41:e7:39:ef:36:8c:63:31:
39:05:20:fe:db:60:94:c7:cf:ef:48:66:2f:68:9e:be:5e:52:
dd:fb:94:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:56 2023 by rpki-client on console-fra.rpki-client.org