Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/CrH2z7yL5FiN0Qx1OloSYQUsZak.roa
File: CrH2z7yL5FiN0Qx1OloSYQUsZak.roa (raw, json)
Hash identifier: gDWzp324aCGsDfg8QSSNLzLgqktxkr4ZoRdbgHhxXfI=
Subject key identifier: 0A:B1:F6:CF:BC:8B:E4:58:8D:D1:0C:75:3A:5A:12:61:05:2C:65:A9
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01850FF1EB381B21F187978EDD6B3E5F7029
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/CrH2z7yL5FiN0Qx1OloSYQUsZak.roa
Signing time: Wed 14 Dec 2022 09:23:10 +0000
ROA not before: Wed 14 Dec 2022 09:23:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57152
IP address blocks: 31.210.43.0/24 maxlen: 24
31.210.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0f:f1:eb:38:1b:21:f1:87:97:8e:dd:6b:3e:5f:70:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Dec 14 09:23:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ab1f6cfbc8be4588dd10c753a5a1261052c65a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ec:35:bc:ec:cd:9a:ee:62:b0:b7:d1:5e:08:
15:cf:4e:3a:19:f3:d2:e7:7b:01:55:31:52:3b:84:
77:e9:7f:98:44:c6:2b:a9:a6:dd:7e:4c:ba:25:b1:
e7:37:88:53:45:6f:a6:33:eb:b3:db:2c:cd:e3:da:
63:5a:4e:59:89:40:3e:26:9a:0c:d0:ae:59:89:ac:
39:e6:80:4c:62:50:88:73:85:7e:b0:4d:f4:ce:04:
f4:40:4c:88:1e:90:4e:51:65:aa:0f:7f:fb:3c:63:
55:82:37:9f:04:3c:33:9c:a8:46:25:8b:07:95:31:
ef:a8:7e:13:7b:40:4d:d5:4d:cf:41:42:0c:d5:cb:
d9:87:38:1c:a1:1a:e1:ab:b4:c7:2e:67:54:a0:5f:
74:46:c5:e5:0f:0f:e7:82:db:73:1e:86:ee:11:0a:
6e:2e:c5:1d:4c:96:b6:ec:91:75:f0:70:ea:00:8d:
17:53:6e:1e:13:83:38:e6:d7:8e:51:c1:28:5e:9b:
98:53:6f:13:59:d7:d0:fd:2f:80:57:95:02:0a:40:
c5:31:41:b9:53:46:c8:74:78:7c:45:be:0c:70:49:
2e:40:09:d4:01:4f:3a:cb:46:74:1a:d0:47:45:f3:
39:ae:d8:f0:5c:aa:b4:7f:8d:87:db:54:68:09:f8:
49:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B1:F6:CF:BC:8B:E4:58:8D:D1:0C:75:3A:5A:12:61:05:2C:65:A9
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/CrH2z7yL5FiN0Qx1OloSYQUsZak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.43.0/24
31.210.54.0/24
Signature Algorithm: sha256WithRSAEncryption
95:29:c5:df:cd:74:64:28:41:a9:66:86:de:8a:e4:87:da:93:
fb:46:10:bf:a8:e4:70:d7:1d:2d:37:20:67:24:9b:e0:00:6e:
06:49:bd:3e:a4:f7:06:e2:86:cd:13:f9:3e:0d:3c:c6:26:5b:
41:87:1c:5e:54:2c:7c:33:95:e9:8a:52:e3:4f:9d:2e:d0:a5:
64:17:bb:9b:78:ae:04:4a:fe:47:cb:b7:1a:fc:aa:8a:31:b7:
c3:fc:8a:45:fe:09:b2:88:23:83:46:e5:87:b2:80:90:b0:31:
31:c7:f5:b6:b2:1c:0a:54:15:d8:3b:33:80:21:e9:f1:a7:ff:
59:e5:a8:c9:14:ab:4d:16:a5:9f:4a:78:70:8f:2b:a3:0e:27:
1e:b4:2b:91:b6:52:5b:97:6d:eb:86:e6:3a:f8:60:46:e6:9c:
21:19:e6:43:ab:16:b6:00:9a:fc:02:f9:f3:4c:b9:1e:a5:a7:
0d:3a:d8:59:07:60:a8:aa:4d:9d:a5:7e:b9:1b:9b:71:d1:6b:
29:5f:73:6e:40:18:df:5f:9e:15:60:5d:cd:3b:f7:5e:40:dd:
35:e7:63:dc:a5:03:6a:5b:9f:4b:bb:c4:c9:f5:0b:1c:eb:81:
16:3b:61:ea:c7:1c:58:34:7a:61:91:32:ac:d1:db:89:31:b9:
a3:40:c9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org