Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/3JP1fLEVlUmyY0OOd5HLW2Zt1d8.roa
File: 3JP1fLEVlUmyY0OOd5HLW2Zt1d8.roa (raw, json)
Hash identifier: mX3+GnE+0XnuEMi3z/sCExY7igXLA0kXNTYVW6fmbKY=
Subject key identifier: DC:93:F5:7C:B1:15:95:49:B2:63:43:8E:77:91:CB:5B:66:6D:D5:DF
Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial: 37F3BC47
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/3JP1fLEVlUmyY0OOd5HLW2Zt1d8.roa
Signing time: Sat 01 Jan 2022 05:53:45 +0000
ROA not before: Sat 01 Jan 2022 05:53:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57292
IP address blocks: 31.184.130.0/23 maxlen: 24
31.184.130.0/24 maxlen: 24
31.184.131.0/24 maxlen: 24
31.184.132.0/24 maxlen: 24
31.184.132.0/23 maxlen: 24
31.184.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 938720327 (0x37f3bc47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Validity
Not Before: Jan 1 05:53:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc93f57cb1159549b263438e7791cb5b666dd5df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e6:2f:09:96:bd:43:ae:aa:b7:04:8c:87:bc:
28:a5:70:d6:4a:19:cf:1c:84:3d:52:58:a4:24:56:
47:1a:24:7c:cc:09:24:90:a0:36:30:5c:70:ba:ab:
7f:72:fd:fa:51:6b:db:dc:29:35:cd:c7:6d:03:a9:
86:84:33:63:67:f8:56:2e:b9:1b:42:4b:a6:3b:f1:
5e:fc:23:b4:39:02:60:b8:ce:4f:50:ba:f4:9d:c0:
5f:fe:f5:12:32:c9:d0:74:50:32:4b:e7:37:a7:5a:
75:1c:d3:6c:a6:37:9e:86:66:1f:07:b4:07:ab:1f:
27:49:9a:4d:a4:f0:f1:d6:3e:72:7e:e8:c4:34:fb:
a5:00:3d:45:76:e4:cd:bb:9a:19:32:1a:9c:83:d1:
d6:4a:ec:70:4f:93:80:26:f9:57:db:50:e0:74:cc:
82:68:de:a9:7d:68:a0:23:e5:b5:fe:90:c2:1b:66:
59:a0:48:66:f0:25:a1:78:d4:6a:34:9a:a3:f3:eb:
ff:c2:96:72:07:9a:42:13:3c:05:7d:f6:6c:e9:f4:
28:fe:57:65:6b:a4:7b:e3:70:f2:82:09:94:51:f1:
b5:65:3c:2b:0e:37:6b:2d:9e:ae:72:21:c4:28:be:
64:05:39:c9:26:59:c4:49:b5:41:a3:6a:65:ee:73:
d0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:93:F5:7C:B1:15:95:49:B2:63:43:8E:77:91:CB:5B:66:6D:D5:DF
X509v3 Authority Key Identifier:
keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/3JP1fLEVlUmyY0OOd5HLW2Zt1d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.184.130.0-31.184.133.255
Signature Algorithm: sha256WithRSAEncryption
2d:93:f9:a9:e9:3b:79:3c:ca:dd:b3:00:91:15:95:63:d2:b0:
a3:8a:8e:c0:10:02:84:b7:38:d7:ee:fc:d1:88:1f:f6:cf:ae:
bf:89:73:63:f3:8c:55:35:58:5f:61:fb:8e:63:de:a3:90:99:
5b:12:1d:72:7c:fe:62:ca:a7:c4:ec:66:e3:39:9c:e5:4f:22:
ca:87:9b:99:7f:4c:16:57:c4:b3:32:3c:04:a6:96:14:fc:ff:
d3:aa:e5:f0:ac:02:10:62:25:23:c9:30:7c:cb:3f:d7:e8:ad:
84:ed:16:d2:d8:45:4a:51:4c:55:1e:83:49:31:4c:1e:06:83:
d6:cd:a5:5a:b3:02:55:52:c1:2c:de:f9:bd:da:4f:19:6e:f3:
ed:44:03:ac:fd:e4:c4:82:9a:d9:33:72:e1:92:ec:48:bb:f7:
0a:9e:01:f6:21:9a:64:c9:03:de:e4:a0:e8:71:b3:a5:2f:ec:
62:59:da:6e:54:cd:d5:e0:d0:1f:d4:70:98:79:cd:4d:1d:00:
7a:ec:a2:81:84:4c:0f:66:05:91:82:30:da:55:ae:06:91:5f:
1a:1e:81:29:ad:77:78:b0:6a:5a:de:80:a7:34:53:1b:ca:fb:
12:5e:21:96:b9:da:25:80:d8:36:be:f1:1f:59:37:bb:ac:c1:
ed:93:17:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:09 2023 by rpki-client on console-ams.rpki-client.org