Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/hLEQkbTG4hlpHoxc2ECY3vFHh_8.roa
File: hLEQkbTG4hlpHoxc2ECY3vFHh_8.roa (raw, json)
Hash identifier: JT0WKPvG1nvPc6ixH6IZ9pZShxLs7tn7PkV0O9pPcik=
Subject key identifier: 84:B1:10:91:B4:C6:E2:19:69:1E:8C:5C:D8:40:98:DE:F1:47:87:FF
Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial: 37F12D41
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/hLEQkbTG4hlpHoxc2ECY3vFHh_8.roa
Signing time: Sat 01 Jan 2022 05:53:44 +0000
ROA not before: Sat 01 Jan 2022 05:53:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41620
IP address blocks: 31.184.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 938552641 (0x37f12d41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Validity
Not Before: Jan 1 05:53:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=84b11091b4c6e219691e8c5cd84098def14787ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:24:29:ed:5e:d3:fd:9b:d3:7f:87:3d:b6:2b:
e4:f8:4e:85:3a:a2:99:7b:3e:d8:85:b4:aa:12:c3:
32:1a:4a:2d:cd:4b:04:33:7c:fe:22:3d:9c:f5:e5:
63:d8:57:a3:2c:31:4e:86:15:e8:ca:5e:6d:6d:d7:
37:b0:5d:dc:12:be:e6:e9:eb:f9:ad:a3:96:a1:a8:
cd:a0:12:11:98:3c:03:ac:73:4f:e3:97:2d:bd:ee:
40:3a:e6:ce:9d:47:ac:b7:29:3f:6d:63:a7:9c:8e:
42:b9:42:24:5c:aa:83:99:5e:69:d2:7a:bd:dd:b2:
01:95:73:51:80:f1:22:15:c9:99:7e:4f:b1:ba:a9:
5e:47:2b:b5:47:d6:95:48:99:e2:3e:8d:fd:12:d3:
b3:88:06:60:f6:0f:d0:b7:96:55:7c:1d:61:65:3a:
10:00:31:26:63:03:a4:05:19:77:2d:9c:e8:5b:68:
7c:b0:bb:8a:f8:5f:1a:e1:e7:63:fe:dc:a6:f0:24:
14:6a:64:52:ba:52:8e:8d:0b:70:82:80:ad:ef:cf:
1d:12:1f:0a:27:2f:d3:67:71:bd:4d:26:7e:74:7c:
6f:50:3b:97:5c:81:58:29:0b:cd:73:3d:eb:55:6c:
01:58:33:7d:83:6f:65:4d:1c:48:92:2e:1f:d4:90:
05:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B1:10:91:B4:C6:E2:19:69:1E:8C:5C:D8:40:98:DE:F1:47:87:FF
X509v3 Authority Key Identifier:
keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/hLEQkbTG4hlpHoxc2ECY3vFHh_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.184.134.0/24
Signature Algorithm: sha256WithRSAEncryption
48:bf:f9:4c:3a:bc:f8:ac:9e:c5:7c:67:02:c9:17:67:bf:f1:
04:57:06:2b:57:af:ea:6b:3e:89:aa:0a:53:f0:82:5d:22:f9:
87:f5:56:2a:9f:6c:53:1f:fa:1e:d9:f5:75:6d:7b:5b:59:2d:
a6:bd:8a:fd:26:26:10:91:5a:a3:78:cb:32:6e:fc:a4:ca:3d:
09:f6:26:e9:68:a2:41:e9:7a:df:6a:61:80:e9:81:35:0f:cc:
13:7f:a4:66:2a:e0:a7:54:16:e9:58:09:5d:a3:ee:96:3c:18:
f4:a6:97:c3:60:21:a2:cc:3d:58:01:45:aa:21:6b:05:2d:6b:
31:74:ee:a2:a4:2c:9c:4e:9f:03:2f:2c:03:45:e5:81:27:2a:
9b:a2:7b:a4:c6:c8:62:8b:1b:d5:50:f4:53:82:42:55:f0:c9:
aa:b2:25:d5:94:88:5c:f7:46:f6:ba:d6:e8:24:3e:27:7e:77:
c6:83:9c:02:ed:99:56:46:45:9a:88:da:5b:e9:7e:5e:1a:9b:
94:09:e7:16:45:1b:f1:38:e0:92:75:7b:cb:22:bf:5c:3e:a1:
51:db:e6:a7:4c:69:fa:a7:a8:ef:6a:60:a3:36:d6:47:4f:ef:
c4:89:58:cc:99:32:26:01:28:ad:75:eb:e3:95:66:c6:5a:38:
95:7e:69:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:32 2025 by rpki-client