Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5314cd-1d64-498a-8187-21dd62b91ea3/1/ryEugEnenLbUt6NyqqCXGeWc64U.roa
File: ryEugEnenLbUt6NyqqCXGeWc64U.roa (raw, json)
Hash identifier: ehpr32fixkQQD4D7iWbw9LBricN4uUjn0JDsBcu8IAk=
Subject key identifier: AF:21:2E:80:49:DE:9C:B6:D4:B7:A3:72:AA:A0:97:19:E5:9C:EB:85
Certificate issuer: /CN=8fad478776df320a8667e75e69e09efb73938b64
Certificate serial: 018434C66C55A54DF75CB31DCF93CAF5E785
Authority key identifier: 8F:AD:47:87:76:DF:32:0A:86:67:E7:5E:69:E0:9E:FB:73:93:8B:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j61Hh3bfMgqGZ-deaeCe-3OTi2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5314cd-1d64-498a-8187-21dd62b91ea3/1/ryEugEnenLbUt6NyqqCXGeWc64U.roa
Signing time: Tue 01 Nov 2022 19:58:49 +0000
ROA not before: Tue 01 Nov 2022 19:58:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48551
IP address blocks: 31.193.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:34:c6:6c:55:a5:4d:f7:5c:b3:1d:cf:93:ca:f5:e7:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fad478776df320a8667e75e69e09efb73938b64
Validity
Not Before: Nov 1 19:58:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af212e8049de9cb6d4b7a372aaa09719e59ceb85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bd:5f:7a:69:fd:33:9d:ad:71:00:d3:78:49:
69:72:ca:8e:b0:83:6f:f7:00:3a:71:cd:67:b3:a0:
e3:b8:eb:31:65:50:13:cb:6b:ba:fb:f7:5b:94:83:
bc:4c:6b:1d:34:6c:9a:a2:e0:7f:78:02:f7:18:1f:
9c:29:57:e9:9c:71:11:b1:e8:df:bc:d2:56:da:51:
4b:54:29:3c:0a:48:61:a2:56:3c:04:91:8e:a8:a9:
34:ea:83:9f:3d:d3:6d:cf:4c:97:d0:f7:6e:a4:36:
c0:4f:fd:71:99:44:73:84:da:11:43:72:11:d5:7d:
81:1d:44:6b:1c:15:e7:76:e1:f5:b8:47:ca:e6:cd:
bf:b5:ab:02:40:eb:70:fe:81:31:d8:a3:2c:0d:91:
5e:93:23:ac:19:76:e7:58:01:5d:6a:c4:a7:d9:ba:
7c:48:fb:63:3f:4a:15:dc:5b:e3:9d:54:d0:f2:f0:
78:0c:52:d3:6d:fe:3d:ec:6a:c9:56:a1:a6:ee:be:
6d:0e:c9:74:64:e4:8d:74:00:86:ae:a3:e9:3f:c1:
b9:ed:20:75:8e:4c:38:e3:1a:fb:4f:0e:84:6d:e4:
4b:08:45:28:8c:25:4d:45:98:64:e2:a0:03:94:30:
a9:d0:c9:78:7e:1b:c1:f6:e0:78:63:42:de:47:14:
c1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:21:2E:80:49:DE:9C:B6:D4:B7:A3:72:AA:A0:97:19:E5:9C:EB:85
X509v3 Authority Key Identifier:
keyid:8F:AD:47:87:76:DF:32:0A:86:67:E7:5E:69:E0:9E:FB:73:93:8B:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j61Hh3bfMgqGZ-deaeCe-3OTi2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5314cd-1d64-498a-8187-21dd62b91ea3/1/ryEugEnenLbUt6NyqqCXGeWc64U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5314cd-1d64-498a-8187-21dd62b91ea3/1/j61Hh3bfMgqGZ-deaeCe-3OTi2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.186.0/24
Signature Algorithm: sha256WithRSAEncryption
99:f6:b6:e4:83:e4:b4:02:3c:52:da:b8:5b:d6:ce:46:f9:33:
8a:e6:53:45:64:59:d3:17:80:85:16:fb:00:6f:ac:87:0a:07:
aa:21:f5:f0:66:11:a7:ec:d8:8a:ae:f2:0a:06:c1:35:32:39:
05:82:93:99:56:52:31:b7:15:e9:e8:4a:56:ce:90:35:0f:93:
6a:d6:e1:ec:d9:00:14:c8:7b:a1:da:c7:38:a5:e3:12:a0:72:
ce:d5:25:06:30:09:67:af:9d:4c:e6:fa:c9:1f:0f:30:68:55:
2b:10:83:99:fc:78:db:fa:c0:fe:00:4b:a4:64:16:b2:1b:20:
51:d7:c2:69:04:18:76:e6:29:fd:ce:3a:eb:15:42:7a:72:fa:
19:9a:4d:ea:42:55:17:3f:16:0a:10:9c:a7:52:de:0c:50:bc:
5a:e7:c4:84:91:f7:4f:b0:16:ef:9f:3a:c4:0f:1f:8d:8d:e3:
df:83:93:42:e5:2a:35:a0:2b:78:1f:1f:eb:18:bf:a8:12:44:
38:cb:fc:9e:32:47:3e:9f:dc:2f:58:b8:31:7c:74:ef:6b:52:
11:8d:56:1c:c9:cc:93:33:42:0c:d7:3d:94:47:e0:63:4c:e6:
5e:63:38:86:03:d7:b1:a5:b3:28:1f:55:fb:40:22:ed:20:07:
74:cd:d6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:34 2024 by rpki-client on console-fra.rpki-client.org