Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/ZqRjcMMsux0FXwmoL5yeNXe8Dj8.roa
File: ZqRjcMMsux0FXwmoL5yeNXe8Dj8.roa (raw, json)
Hash identifier: 9rVT7csNo22yT0ZLyquXsDXq+360X5xLFULTugQelgs=
Subject key identifier: 66:A4:63:70:C3:2C:BB:1D:05:5F:09:A8:2F:9C:9E:35:77:BC:0E:3F
Certificate issuer: /CN=34077b41e98873e7f06fb1df3f5d39c721b1343f
Certificate serial: 127E637D
Authority key identifier: 34:07:7B:41:E9:88:73:E7:F0:6F:B1:DF:3F:5D:39:C7:21:B1:34:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/ZqRjcMMsux0FXwmoL5yeNXe8Dj8.roa
Signing time: Sat 01 Jan 2022 10:05:34 +0000
ROA not before: Sat 01 Jan 2022 10:05:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8449
IP address blocks: 31.192.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 310272893 (0x127e637d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34077b41e98873e7f06fb1df3f5d39c721b1343f
Validity
Not Before: Jan 1 10:05:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66a46370c32cbb1d055f09a82f9c9e3577bc0e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:06:3d:d9:60:f0:c4:12:01:6d:53:eb:41:73:
df:55:96:18:dd:98:42:11:0c:a6:0e:ab:4e:c6:ba:
55:07:aa:bb:a0:e0:c2:ae:2d:f5:81:c1:69:5f:42:
68:1b:38:3f:31:c3:d8:4c:52:79:1a:f4:de:b2:fe:
d0:46:fe:0a:0f:c0:c5:ca:88:e0:64:b9:cd:5f:9a:
e6:ce:66:40:91:01:90:6f:09:0b:8f:c1:a8:78:d6:
90:3a:94:26:77:23:cb:2e:5e:48:35:26:2b:f5:25:
48:e1:65:aa:0b:4f:d0:53:05:f1:09:6d:02:6d:de:
ec:b8:5c:3e:41:11:2b:6c:ec:9d:c9:33:e6:c7:dd:
e3:27:e5:bd:01:8f:d8:08:c1:f0:c6:07:bf:0a:d3:
ef:bc:cf:b0:0b:f1:2e:46:a2:29:b9:ce:bb:b9:0d:
7f:bb:84:e2:9a:3a:40:d7:f9:14:4a:cf:8b:4a:c3:
77:e4:19:a0:fb:24:79:e8:cf:82:61:2c:c4:6e:28:
67:f3:60:9a:e2:04:b1:69:91:b5:55:a5:3b:85:13:
bd:96:8b:ce:71:79:d5:37:12:03:f0:db:bc:54:bc:
94:f7:a6:0f:14:a8:ed:36:6c:b1:66:3a:86:57:f3:
02:b5:cc:62:25:bb:ce:a7:73:fa:11:2d:58:8d:f2:
96:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A4:63:70:C3:2C:BB:1D:05:5F:09:A8:2F:9C:9E:35:77:BC:0E:3F
X509v3 Authority Key Identifier:
keyid:34:07:7B:41:E9:88:73:E7:F0:6F:B1:DF:3F:5D:39:C7:21:B1:34:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/ZqRjcMMsux0FXwmoL5yeNXe8Dj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.192.249.0/24
Signature Algorithm: sha256WithRSAEncryption
25:ae:d9:42:c0:d4:23:a0:11:ae:22:60:1d:c7:e1:58:00:d7:
19:e2:0d:46:5c:58:08:0d:26:c7:97:3e:62:af:00:26:95:a0:
4a:2a:56:50:8c:3c:cc:e6:44:8a:7c:e7:26:49:6e:ae:39:80:
1d:0e:77:0b:30:df:a9:35:fc:58:1c:fe:89:06:65:81:da:16:
a8:06:91:a1:6c:6e:6d:72:bf:16:3f:0a:2d:30:9d:10:7e:10:
d4:d3:02:8e:8c:21:9a:0d:c5:67:5e:8b:2f:0f:ca:73:8b:7a:
91:f0:1f:4d:a3:1c:fa:b5:cd:08:43:dd:32:38:96:01:42:90:
ff:6e:78:ca:07:18:3a:af:fa:5b:7d:2a:83:03:f3:5c:5f:58:
22:1b:8f:43:e6:7a:79:c0:ae:bb:ad:95:ca:46:cb:7d:db:36:
c7:49:92:e3:49:67:6b:d5:af:be:16:61:c2:a2:fd:44:79:ca:
d9:71:11:b0:50:1f:13:af:41:61:37:f1:17:c6:5c:a5:68:9c:
3c:99:1e:81:ae:40:0a:4d:50:83:43:07:35:36:fd:52:fc:6f:
61:c1:4c:32:ca:c4:b9:4b:6f:57:ed:d2:ea:9f:c9:f7:7f:01:
7e:11:98:87:33:21:6d:7f:20:23:9f:0f:5c:21:b8:b1:ef:82:
c3:c1:66:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:54 2023 by rpki-client on console-fra.rpki-client.org