Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/3aDsBYm3OzUXf_aql90pOwTmH8w.roa
File: 3aDsBYm3OzUXf_aql90pOwTmH8w.roa (raw, json)
Hash identifier: yFYS+1Hb03eTUuzFJd+GcM0niK+12iz9INATWP0pdlo=
Subject key identifier: DD:A0:EC:05:89:B7:3B:35:17:7F:F6:AA:97:DD:29:3B:04:E6:1F:CC
Certificate issuer: /CN=4081f85602b1168925d83eb3ca61609f357956a6
Certificate serial: 611A9C
Authority key identifier: 40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/3aDsBYm3OzUXf_aql90pOwTmH8w.roa
Signing time: Thu 06 Jan 2022 18:14:15 +0000
ROA not before: Thu 06 Jan 2022 18:14:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39650
IP address blocks: 31.130.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6363804 (0x611a9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4081f85602b1168925d83eb3ca61609f357956a6
Validity
Not Before: Jan 6 18:14:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dda0ec0589b73b35177ff6aa97dd293b04e61fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:93:7f:bc:10:72:c4:24:71:a3:53:c4:9a:52:
1b:ab:ac:9a:ce:62:19:76:9b:57:3e:1d:11:96:b6:
43:a7:3c:5e:90:a5:50:25:a9:ab:5f:e5:ab:f2:f8:
4b:e3:b4:48:57:8e:8a:dc:57:58:f8:01:63:54:d7:
20:d8:65:40:07:91:67:a3:c5:82:88:5d:77:dd:53:
e2:ee:9c:66:82:c1:45:8c:b7:0b:a9:5b:91:2e:3e:
e9:47:45:c9:7b:1c:0b:1a:4d:ff:2e:13:c1:b2:8c:
85:3f:9e:31:b8:9b:30:2e:72:1c:7e:d1:36:6c:f6:
4a:7a:78:c1:4a:56:25:12:96:61:29:0d:27:4e:a5:
4d:0e:ce:ea:e8:d6:a6:0c:7e:4c:41:68:96:df:51:
ba:98:ad:b5:c3:ee:a1:35:67:fa:9f:aa:ff:4d:93:
06:5c:d4:32:8d:84:b5:bd:76:0c:7e:1d:51:c0:35:
b2:03:e6:53:37:3d:f6:97:7b:a2:fc:1c:ba:5a:5c:
01:66:07:9b:ea:f8:26:2f:02:de:bd:44:4a:74:2d:
e6:8c:c5:df:fb:ef:bb:64:12:6f:45:b4:f7:cc:e4:
16:09:1e:78:ae:b9:29:53:b8:a5:8a:ab:62:d3:bb:
66:9f:50:0d:ea:81:5a:35:e8:3d:bd:5c:4d:4e:2d:
0f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A0:EC:05:89:B7:3B:35:17:7F:F6:AA:97:DD:29:3B:04:E6:1F:CC
X509v3 Authority Key Identifier:
keyid:40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/3aDsBYm3OzUXf_aql90pOwTmH8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.176.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:ec:7d:c2:bf:0e:ca:c3:61:9b:83:fe:b1:2c:b4:38:d9:59:
ed:5d:18:6c:a6:fa:65:e4:76:e9:e4:49:57:a8:15:6a:9e:75:
2f:49:52:95:6a:d0:16:25:8e:a0:06:d4:69:73:86:fc:a9:5b:
1a:b6:45:50:da:8a:70:f5:53:46:16:e7:8e:78:84:49:1d:55:
3f:40:1d:2a:b8:88:4d:4a:88:91:6c:fe:55:9f:0c:8b:b1:f7:
92:e9:1c:d8:8b:7f:f9:bb:ec:2b:a5:a3:b7:1b:dd:bc:b6:6d:
a7:06:8b:65:be:40:69:9f:49:1b:1e:6a:7f:a0:c5:7a:3e:15:
38:35:07:4a:7c:1b:2d:28:7d:3f:5f:a1:66:53:97:7d:82:b4:
57:08:19:80:40:8d:37:44:97:9a:cc:9d:72:ad:3d:7d:5d:bb:
49:e7:6c:a8:b2:01:c2:a9:3c:c6:c7:d0:75:6a:e9:c4:4f:23:
89:24:95:eb:11:64:95:de:2c:67:6b:4e:6d:10:26:34:3c:b7:
b1:7b:1e:ad:d3:7d:d8:2e:c7:6f:ed:11:91:91:a6:63:5b:34:
42:1a:aa:f8:be:9c:b1:63:24:1e:ec:f7:96:43:77:b2:c7:c3:
e7:8b:b6:d7:33:73:fc:65:7e:86:0b:0a:c0:0c:9c:76:72:55:
66:c8:ec:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:25 2024 by rpki-client on console-fra.rpki-client.org