Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/3nngEMB12V_ljtxVGHeNpjb1ToM.roa
File: 3nngEMB12V_ljtxVGHeNpjb1ToM.roa (raw, json)
Hash identifier: ldUW/TJt7ewZCsd6AlPTM4Urlv1wKrPVxROp08BwBWo=
Subject key identifier: DE:79:E0:10:C0:75:D9:5F:E5:8E:DC:55:18:77:8D:A6:36:F5:4E:83
Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial: 38040257
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/3nngEMB12V_ljtxVGHeNpjb1ToM.roa
Signing time: Sat 08 Jan 2022 06:57:10 +0000
ROA not before: Sat 08 Jan 2022 06:57:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49517
IP address blocks: 31.184.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 939786839 (0x38040257)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Validity
Not Before: Jan 8 06:57:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de79e010c075d95fe58edc5518778da636f54e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:73:d0:76:59:7c:e4:29:ab:18:5a:81:41:fb:
61:41:88:ef:b7:d8:8b:e1:22:75:54:c4:ed:ad:5e:
c2:de:69:44:6b:e7:6f:d9:39:03:a1:1b:e2:54:46:
b8:aa:32:f2:ca:8c:d7:94:d6:99:59:73:f4:6a:09:
53:4a:72:1f:86:9c:49:66:12:be:70:09:4e:dc:03:
26:62:cf:d9:71:55:9b:43:1a:2d:a5:d1:cd:50:27:
f9:8a:95:97:1d:ca:69:a8:02:33:04:b5:96:65:7f:
06:78:11:23:00:c0:49:af:5f:88:ac:f3:16:09:16:
21:76:e3:f7:48:2d:1f:9a:be:e3:63:f9:40:94:78:
c3:f8:5a:7c:5b:08:94:d0:5a:48:8d:78:d5:87:33:
48:fe:6a:93:78:fc:13:83:e4:33:2c:10:bf:f0:40:
73:e7:76:5d:42:9a:f8:f3:e3:bd:17:f5:3a:f0:e0:
b2:4a:40:e1:ca:88:32:70:52:ba:d8:fa:22:bd:92:
34:c0:c8:93:3e:96:a6:53:23:d0:dc:ec:50:b1:d1:
dc:56:67:2e:00:c6:81:4f:9c:d9:99:85:d7:38:29:
fc:33:c2:cd:3c:36:c5:ec:0a:36:7b:30:65:39:76:
65:35:8e:e8:3e:20:bc:5c:55:0c:dd:c1:4e:68:31:
4e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:79:E0:10:C0:75:D9:5F:E5:8E:DC:55:18:77:8D:A6:36:F5:4E:83
X509v3 Authority Key Identifier:
keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/3nngEMB12V_ljtxVGHeNpjb1ToM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.184.174.0/24
Signature Algorithm: sha256WithRSAEncryption
46:ff:c4:a7:8a:bd:27:c8:fd:09:64:b0:4e:98:4f:b8:b1:26:
2a:eb:3a:61:32:27:e1:4f:e8:be:68:ff:ff:be:48:98:df:53:
97:d7:ff:19:10:33:63:fc:b1:94:e7:c7:c4:56:78:4c:fa:89:
0d:ad:7c:4d:47:70:16:2d:c6:8b:35:fa:3f:e2:71:34:c4:25:
1f:24:56:57:ef:84:31:ab:68:e3:7e:07:b5:1a:6a:28:13:4a:
44:52:00:27:12:e1:18:a0:91:04:b9:ce:80:9e:0a:2e:6a:b6:
95:89:6b:34:45:8e:ec:21:3a:a3:fe:36:8f:f0:7d:35:95:00:
bd:70:72:e7:2c:95:da:41:5e:f7:9e:17:bc:1a:bb:ec:39:24:
82:7f:16:dc:a6:c5:76:0d:75:30:44:b1:a1:ee:99:df:47:d0:
64:4f:fb:af:32:a9:32:7d:15:0d:11:05:aa:d1:76:f3:cf:7f:
10:5d:43:eb:76:51:e7:a8:2f:37:0a:3f:20:44:18:c1:d3:d2:
60:ea:ae:ae:d6:f2:dc:2b:6f:f6:96:91:a8:f1:98:5e:b2:90:
57:ce:0d:33:3b:51:4b:fe:d8:7a:86:57:d5:07:6e:d4:f1:d9:
d6:96:b3:13:bf:b5:12:75:59:e7:2b:c1:82:43:0e:ab:44:a6:
be:e7:74:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:25 2023 by rpki-client on console-fra.rpki-client.org