Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/hEZlzWTl1Ci6lbHR1t-uNlVfl6I.roa
File: hEZlzWTl1Ci6lbHR1t-uNlVfl6I.roa (raw, json)
Hash identifier: P2baC9+FC5zne2FVO3Of1yY2f5R9hX5oPMtLHQseWhk=
Subject key identifier: 84:46:65:CD:64:E5:D4:28:BA:95:B1:D1:D6:DF:AE:36:55:5F:97:A2
Certificate issuer: /CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Certificate serial: 01855DD951540714A9660AEAD9A2A9D996D3
Authority key identifier: 58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/hEZlzWTl1Ci6lbHR1t-uNlVfl6I.roa
Signing time: Thu 29 Dec 2022 12:26:41 +0000
ROA not before: Thu 29 Dec 2022 12:26:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49581
IP address blocks: 81.31.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5d:d9:51:54:07:14:a9:66:0a:ea:d9:a2:a9:d9:96:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Validity
Not Before: Dec 29 12:26:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=844665cd64e5d428ba95b1d1d6dfae36555f97a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f0:e1:9a:a6:42:16:27:54:a8:5b:2e:2f:37:
bb:4a:45:9d:2c:62:c1:30:e8:d7:e4:a8:70:bb:12:
7d:a7:40:b1:71:63:d0:7b:58:8d:3a:e1:ca:c3:6a:
b8:d7:3e:99:c6:97:32:54:83:14:92:26:79:c9:0f:
1a:f8:d9:e5:04:10:60:45:fc:94:af:d9:01:e0:16:
79:96:17:94:ca:5e:2d:39:6c:9a:c9:1f:44:4f:3b:
a0:03:97:24:4b:ad:3c:ad:c4:89:aa:ad:1c:a3:4d:
fc:f7:8b:2d:00:56:bd:79:b8:8f:25:65:bf:59:53:
fc:26:db:8b:00:98:00:b4:b4:f4:44:0e:6e:ab:cc:
1d:24:0d:50:23:cc:4e:76:88:51:85:b2:1a:d8:27:
c2:05:68:7a:3b:e9:2d:6a:48:4c:50:00:5a:cf:ea:
a7:fa:6a:d7:dc:63:79:ab:c5:ba:30:eb:40:05:1b:
b4:38:13:2e:16:46:26:99:76:62:9b:07:d5:fa:ce:
7f:a7:c6:9d:6f:bc:7b:17:08:de:ba:07:5d:b5:58:
b8:1d:74:ab:50:3d:d8:d2:6a:a7:a1:eb:23:f5:16:
5d:ef:c1:47:e5:1d:65:07:fe:f4:8d:ae:8d:19:26:
f7:d9:c1:d4:81:b6:8a:2a:1c:e1:2b:b6:dd:e4:0d:
b9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:46:65:CD:64:E5:D4:28:BA:95:B1:D1:D6:DF:AE:36:55:5F:97:A2
X509v3 Authority Key Identifier:
keyid:58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/hEZlzWTl1Ci6lbHR1t-uNlVfl6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.199.0/24
Signature Algorithm: sha256WithRSAEncryption
23:8e:f8:3f:cd:d2:38:4b:7d:67:bb:3f:8b:79:94:27:38:3a:
31:b1:9b:3e:8e:96:54:78:c6:8f:77:17:22:b1:0f:c2:a7:44:
33:92:ac:af:ab:45:cc:ca:2e:af:c5:db:e7:ce:26:0d:5b:e8:
db:3b:3f:3a:09:f1:f5:fe:74:d7:21:33:9e:2b:9e:ad:a9:d2:
98:8a:7c:03:7f:16:5c:c8:cd:a4:e8:2d:db:23:ff:dc:d3:47:
91:e5:7d:4e:97:70:35:4b:12:8d:42:13:30:23:46:5a:6d:ca:
dd:d6:ca:c4:b8:0e:90:ad:5b:3b:f1:b8:fa:14:97:9b:57:75:
0e:4d:b8:41:62:da:93:fd:04:5a:b7:d6:35:1a:27:a6:89:22:
d2:b3:7f:b4:0c:f7:2a:29:57:4d:bc:5c:7d:76:aa:c1:ca:c2:
e6:7b:de:0d:11:d7:ad:92:5f:e7:c0:80:3b:50:4a:a3:dc:38:
c2:cb:45:33:69:7f:82:cd:6b:49:fb:99:d1:15:d9:42:be:20:
dd:fa:7b:c9:4b:89:c4:46:ae:a5:ea:b1:67:bd:b4:1b:4f:c3:
37:3a:3f:23:47:75:ea:0e:be:e9:33:65:5e:ed:ea:80:e2:12:
29:4a:d5:3c:72:e3:43:cc:c8:24:88:de:a4:d2:5e:8f:0e:fb:
6e:c7:d4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:40 2024 by rpki-client on console-ams.rpki-client.org