Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/5nMyFxwsAzaiKPAukc2d9mzjuXM.roa
File: 5nMyFxwsAzaiKPAukc2d9mzjuXM.roa (raw, json)
Hash identifier: Kr2FdHb5iizsWT4dCydqNoUyU9sxtp17sRtF1Q7SI5A=
Subject key identifier: E6:73:32:17:1C:2C:03:36:A2:28:F0:2E:91:CD:9D:F6:6C:E3:B9:73
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 0E224DE4
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/5nMyFxwsAzaiKPAukc2d9mzjuXM.roa
Signing time: Sat 01 Jan 2022 03:02:58 +0000
ROA not before: Sat 01 Jan 2022 03:02:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201542
IP address blocks: 94.31.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237129188 (0xe224de4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 1 03:02:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e67332171c2c0336a228f02e91cd9df66ce3b973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ff:14:6b:46:05:92:b9:c4:52:59:ef:33:3b:
08:bd:db:cf:ed:76:29:e2:bd:91:fe:cc:8d:9c:10:
3a:88:a9:ab:8b:0c:19:c1:0d:25:e2:85:e3:51:99:
de:87:56:6d:7f:2e:55:79:66:e8:8c:f0:45:0f:70:
29:4c:6e:3a:39:c5:7a:cd:71:84:06:27:09:64:d5:
5d:16:b1:d7:46:8d:5c:1e:a6:a0:47:b6:cf:b0:68:
7d:48:ec:41:c7:80:97:16:86:2c:0e:c6:c5:7e:bb:
5d:12:b2:6a:46:32:9c:2a:e1:e8:cc:34:f8:da:21:
8a:11:da:b4:d0:d4:3d:79:e3:c5:94:9c:a1:f7:7a:
cf:82:93:2d:ee:cd:8f:c2:21:c2:3b:8b:b1:a0:84:
fd:e2:8c:a6:c8:3b:6b:26:a3:4f:2d:00:c1:4a:db:
a1:38:22:d6:ce:95:9f:b0:ab:11:3b:30:05:c2:07:
cf:45:a1:19:ef:f3:ac:db:b9:27:2e:72:ba:0d:bc:
1e:e2:da:67:ff:d6:aa:9e:e7:3a:7e:eb:0d:03:a5:
93:ed:ef:dc:23:a0:20:c2:9a:5b:5e:88:e8:8b:e2:
72:2d:da:da:59:51:6b:ce:6c:e3:6c:dc:91:ca:7e:
25:5e:f4:14:d1:c6:8d:31:6c:5e:8b:b5:f8:c8:04:
06:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:73:32:17:1C:2C:03:36:A2:28:F0:2E:91:CD:9D:F6:6C:E3:B9:73
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/5nMyFxwsAzaiKPAukc2d9mzjuXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.31.51.0/24
Signature Algorithm: sha256WithRSAEncryption
97:1a:d3:2c:2e:83:21:27:24:80:50:41:83:b2:c8:de:fa:8c:
5d:08:a4:57:77:ec:ff:5f:ef:eb:98:44:9c:0c:82:e7:96:e5:
bb:01:69:22:43:29:3e:a0:74:f7:41:86:1e:d6:30:34:2d:a7:
1c:17:03:a9:bc:a4:bc:50:4d:76:1b:aa:96:78:7f:e2:d0:c9:
19:ef:41:61:46:c6:ce:d4:37:75:74:e4:6c:e8:f5:12:ec:79:
af:3a:58:fd:d1:77:ce:90:1c:36:6c:f9:74:2e:93:df:07:98:
fc:53:62:37:50:dd:8c:98:31:ba:5c:b2:bf:ca:34:2c:3a:51:
ec:a7:ca:44:f4:93:b2:93:2a:23:65:c4:41:8c:5f:d1:6f:6c:
56:28:22:db:12:2c:6d:41:ef:9d:32:b2:4c:4f:19:e1:cc:ad:
d4:4f:64:b1:f1:03:d0:b0:9b:da:98:17:c4:65:89:46:ad:46:
ab:25:8d:15:3e:93:ee:81:d7:03:d3:97:4e:67:2f:f8:a1:67:
7b:8f:0b:e8:3d:10:a2:4d:23:a7:33:f9:92:9b:3f:1d:f2:09:
5a:63:fe:96:92:35:19:86:d0:50:0a:d2:f0:25:d7:29:82:96:
3c:d8:01:e8:2c:60:67:db:a3:59:b0:33:6c:5b:a8:ea:e8:29:
79:35:b4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:18 2024 by rpki-client on console-ams.rpki-client.org