Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/VKlBKKxmXqUl2WqvyNM2v6tDgpA.roa
File: VKlBKKxmXqUl2WqvyNM2v6tDgpA.roa (raw, json)
Hash identifier: mdo+mZXt8OBPEVEpHSiSVFJmoq+FxRhBYL+TOZKjVM4=
Subject key identifier: 54:A9:41:28:AC:66:5E:A5:25:D9:6A:AF:C8:D3:36:BF:AB:43:82:90
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01852BC9D6D81516DB88561E783B525E6A77
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/VKlBKKxmXqUl2WqvyNM2v6tDgpA.roa
Signing time: Mon 19 Dec 2022 19:08:46 +0000
ROA not before: Mon 19 Dec 2022 19:08:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207709
IP address blocks: 31.210.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2b:c9:d6:d8:15:16:db:88:56:1e:78:3b:52:5e:6a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Dec 19 19:08:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=54a94128ac665ea525d96aafc8d336bfab438290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:57:64:61:99:a0:a5:13:39:41:ae:01:2c:a1:
14:dd:e9:28:2c:e4:c3:9c:11:60:d0:ed:a2:56:45:
e7:65:df:65:5f:8c:50:1e:bb:bb:c9:52:53:f8:c3:
34:77:d1:2a:ff:7f:b0:c5:07:6b:56:49:fe:ad:74:
8f:4a:92:47:a7:45:6a:db:cc:8c:fb:e7:f4:6a:c8:
5b:4f:d7:ba:f5:8e:b0:16:d2:77:b3:18:de:25:82:
ea:83:22:75:cd:66:9d:f1:17:f8:74:de:3e:5e:0c:
5c:2b:59:3d:3e:79:36:68:40:9e:e5:53:1b:48:f0:
36:5a:e0:59:56:a3:47:d0:65:e4:b1:bc:95:b7:01:
2e:67:2a:c8:93:c1:85:4b:1d:27:85:4d:b4:36:2e:
0f:5c:fa:83:a6:24:c9:bf:79:ff:f0:88:ec:fe:c1:
c9:b4:ba:a5:e0:da:07:7c:ea:7b:f3:0e:a8:54:d5:
3b:61:45:35:62:38:00:60:ef:d0:9f:d0:12:cf:0a:
c0:02:15:92:41:a3:3b:31:ae:9c:b3:74:d8:ee:32:
61:89:0c:2d:50:1b:ce:1b:81:b6:46:2c:07:d1:05:
6c:76:6b:fa:6c:74:b1:5d:27:33:65:c5:39:e1:d3:
0b:0c:9c:1a:1c:24:6b:4a:3a:62:b2:90:c5:d4:08:
77:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A9:41:28:AC:66:5E:A5:25:D9:6A:AF:C8:D3:36:BF:AB:43:82:90
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/VKlBKKxmXqUl2WqvyNM2v6tDgpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.54.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:77:b8:36:f1:e3:1d:53:c3:89:26:0d:d5:53:db:4d:cb:1e:
c0:bd:78:37:95:94:1e:c0:e5:c5:4e:05:bd:de:58:98:7e:36:
78:bc:ad:d2:cf:b7:9c:0a:fa:31:05:fe:fe:ef:37:b3:d2:af:
dd:15:51:d3:63:f6:98:c4:f6:b2:91:dd:3d:a5:fd:7f:83:dd:
f0:c0:36:b7:d3:00:74:85:69:aa:7d:92:53:89:93:f7:b2:04:
d6:9c:49:a9:49:2b:8a:a0:9c:40:3c:9c:52:a2:7d:5d:46:4f:
93:1f:4b:83:31:12:e9:22:36:67:45:16:7e:8e:b8:38:9f:05:
b6:59:30:21:75:40:37:9d:ee:10:b2:e0:86:71:ab:c8:9b:d8:
ba:53:56:b1:19:d8:18:f5:a6:66:36:57:6c:51:90:f5:09:97:
03:b4:73:5a:41:cd:b5:02:a8:a2:88:60:c2:91:1c:c2:02:82:
b0:f2:01:18:e2:b7:1f:0e:46:ce:94:9e:1a:0b:ec:3e:ac:75:
fb:9c:22:d3:dd:15:3c:61:9f:18:ef:b4:08:d4:4c:3b:c0:46:
18:e9:c0:41:25:fe:4c:b7:3b:47:90:4f:92:e7:81:53:e2:8d:
33:4f:e6:44:c5:b1:ed:43:fc:a9:fe:14:a0:14:72:b3:40:7e:
66:d6:ef:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org