Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/RT_SW3cV47FibM7fwFBJ8lTDhMM.roa
File: RT_SW3cV47FibM7fwFBJ8lTDhMM.roa (raw, json)
Hash identifier: hUUG2TQQArz7TvbTHGwYEfe4EYPD7XmiztgkIW7Bhdw=
Subject key identifier: 45:3F:D2:5B:77:15:E3:B1:62:6C:CE:DF:C0:50:49:F2:54:C3:84:C3
Certificate issuer: /CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Certificate serial: 01A0F422
Authority key identifier: 58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/RT_SW3cV47FibM7fwFBJ8lTDhMM.roa
Signing time: Sat 01 Jan 2022 08:53:05 +0000
ROA not before: Sat 01 Jan 2022 08:53:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 81.31.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27325474 (0x1a0f422)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Validity
Not Before: Jan 1 08:53:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=453fd25b7715e3b1626ccedfc05049f254c384c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9f:f0:54:f3:e9:2e:26:74:98:c0:af:c1:2f:
db:54:18:99:9a:13:19:14:39:4f:73:78:8a:27:5d:
f3:9b:a2:45:b8:01:a9:3d:66:bf:d6:27:77:41:e1:
92:39:15:76:1c:49:b3:48:ab:bf:21:e5:59:b3:49:
8e:f1:ed:e0:c3:b7:3c:30:e8:ea:36:27:50:4e:27:
ba:c6:08:d1:eb:f9:e4:49:07:5e:1a:3a:f3:97:e8:
f6:36:43:c3:a3:06:c2:76:ec:8d:34:23:57:ca:14:
7f:6b:12:33:0d:e9:3c:fe:12:b9:8a:13:4f:37:e5:
b7:81:e7:f9:8f:cd:77:2e:e8:23:bc:25:65:7a:c6:
1f:de:28:72:bc:b1:a5:56:67:10:2b:aa:72:43:1d:
fa:ba:4d:23:91:a1:f4:9c:3b:5c:b4:ea:2f:30:45:
df:0f:a2:e6:a0:ff:10:bc:a3:85:5f:37:f4:cf:2c:
3e:90:1f:93:06:34:e6:7f:a7:56:4a:f0:f9:de:f7:
1f:3d:12:b7:78:bb:dd:41:5e:ea:b4:20:7d:2f:cd:
dd:62:e0:1b:e4:c0:f8:4c:a9:45:e7:2f:a0:e2:f0:
ff:db:43:db:62:43:36:18:58:84:7b:2a:c5:16:02:
8c:56:4b:b2:93:b7:7c:bf:e9:ed:5c:af:5f:bc:09:
0c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:3F:D2:5B:77:15:E3:B1:62:6C:CE:DF:C0:50:49:F2:54:C3:84:C3
X509v3 Authority Key Identifier:
keyid:58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/RT_SW3cV47FibM7fwFBJ8lTDhMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.199.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:e9:f1:4c:5f:de:37:6d:14:81:a6:48:b6:38:6d:2f:05:c3:
c7:11:42:df:ee:8e:b2:0a:fa:07:bc:04:d8:d4:5f:be:db:74:
10:cb:ff:f5:af:c2:86:ed:6b:1d:63:ba:62:30:b3:f9:ab:da:
98:63:fe:e8:e9:64:27:e3:03:31:99:35:48:f7:17:40:7b:51:
b3:61:fa:6f:c2:dd:f8:80:08:a6:3a:64:9a:e1:0e:42:43:e0:
ec:90:ae:b7:cc:c4:55:34:c6:fb:38:19:5a:bb:37:3b:ce:92:
4b:4b:d6:3e:97:74:c4:13:be:35:e5:59:18:1d:b0:90:b5:b1:
31:fe:43:2d:0c:e3:8a:c2:f4:09:a2:63:46:43:b5:a8:8f:d4:
19:37:3e:11:c2:2d:7f:51:96:52:2a:b9:cc:e6:64:93:59:51:
04:e0:20:fd:dc:d7:96:1f:82:a0:b5:a8:74:49:b7:3b:d7:5f:
5a:d0:e8:99:49:14:5a:93:64:f0:61:3c:80:81:5c:11:92:a6:
c1:98:d9:ad:ed:33:6e:f3:18:db:65:28:64:4c:65:02:85:a7:
79:f9:90:98:7d:7e:cd:f4:24:ee:d9:3f:f0:d1:00:6a:82:67:
69:b7:d3:96:db:c1:85:31:9e:19:cd:ce:c8:9e:44:56:5f:7f:
84:25:fb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:12 2023 by rpki-client on console-ams.rpki-client.org