Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/svOBYi9cA86-yUOUB1-2CYGXnIk.roa
File: svOBYi9cA86-yUOUB1-2CYGXnIk.roa (raw, json)
Hash identifier: mcyMmUHqU/P1Pt934vg2RFC1eh+UqFd6i7G/SAd74c0=
Subject key identifier: B2:F3:81:62:2F:5C:03:CE:BE:C9:43:94:07:5F:B6:09:81:97:9C:89
Certificate issuer: /CN=31eb9b2db4a3bddf8c92fc50b9713043dd56dc38
Certificate serial: 0B94B3C7
Authority key identifier: 31:EB:9B:2D:B4:A3:BD:DF:8C:92:FC:50:B9:71:30:43:DD:56:DC:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MeubLbSjvd-MkvxQuXEwQ91W3Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/svOBYi9cA86-yUOUB1-2CYGXnIk.roa
Signing time: Thu 17 Feb 2022 10:21:31 +0000
ROA not before: Thu 17 Feb 2022 10:21:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 202.22.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194294727 (0xb94b3c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31eb9b2db4a3bddf8c92fc50b9713043dd56dc38
Validity
Not Before: Feb 17 10:21:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2f381622f5c03cebec94394075fb60981979c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3e:64:b7:ef:88:a5:5b:26:29:1b:f0:6f:78:
71:ab:43:37:b1:06:c7:43:0e:b0:c3:e0:b2:09:07:
5f:a9:c5:66:96:8e:98:cc:78:cb:82:4f:23:b2:54:
2d:0d:3a:c2:70:ee:96:e8:75:a0:c3:58:a1:54:87:
cb:74:18:dc:0f:f8:72:dc:8d:d9:97:aa:08:05:79:
67:3e:04:81:8e:63:c0:ab:77:24:87:60:cb:1b:18:
b5:50:47:89:01:eb:f5:8c:4a:4b:d6:cc:1b:ab:60:
9b:f8:58:8a:36:bd:67:4a:0d:6c:12:14:24:fe:1b:
1f:f3:b7:f4:a2:fa:75:07:5c:80:18:bb:10:9b:09:
c0:05:be:16:de:82:b7:c2:bf:33:b6:33:b1:44:e9:
ad:fc:1f:7b:0b:39:6f:eb:d3:66:22:19:d1:d8:48:
83:76:1b:15:a4:f0:f0:7c:18:e0:10:f9:24:80:9b:
a8:60:d9:26:54:40:81:c9:16:61:36:ff:6b:fd:f9:
1f:8a:eb:e7:ec:63:8c:f5:c9:f7:e4:52:98:0a:a6:
4f:9a:63:97:10:22:46:49:82:08:d1:8d:38:6a:37:
a5:79:4e:3d:df:03:03:b1:7c:71:15:ac:10:91:1f:
b9:08:44:4a:8e:6e:46:26:9e:b9:4a:a9:a0:3e:d9:
74:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F3:81:62:2F:5C:03:CE:BE:C9:43:94:07:5F:B6:09:81:97:9C:89
X509v3 Authority Key Identifier:
keyid:31:EB:9B:2D:B4:A3:BD:DF:8C:92:FC:50:B9:71:30:43:DD:56:DC:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MeubLbSjvd-MkvxQuXEwQ91W3Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/svOBYi9cA86-yUOUB1-2CYGXnIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/MeubLbSjvd-MkvxQuXEwQ91W3Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.22.167.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:2f:9a:5e:e3:ce:70:4f:15:84:fe:aa:68:a3:66:da:9c:1f:
b5:45:00:ed:75:9d:0b:6f:0e:63:3b:e4:fa:eb:43:46:3d:c9:
d0:94:c0:10:1a:69:19:c2:f6:4c:7b:2c:46:b3:8e:78:35:8d:
4c:ab:28:64:3d:56:66:d7:a3:4a:62:82:fe:78:5a:b3:bb:75:
6e:9c:c2:43:2e:ed:d5:e3:52:16:2f:41:42:52:a0:23:15:6e:
54:16:cd:eb:4b:68:3a:cf:9d:a6:ab:07:5e:21:de:b6:1e:e2:
b4:cd:80:2d:2d:76:db:a3:be:9d:ce:af:3c:98:1f:f0:5b:d2:
f1:a7:2e:34:be:d1:6f:36:7a:55:cc:a2:43:87:74:14:ca:f7:
89:12:73:fb:1c:e6:3d:f5:1d:fa:a7:ac:fd:2a:b8:36:5d:e4:
35:15:57:9f:04:a1:9d:63:85:6a:99:79:9f:6f:0d:ae:f3:25:
79:ff:bf:0f:a4:a1:5c:2b:28:e2:bc:fc:78:15:da:df:ce:5f:
75:03:f4:e5:5b:34:e3:ee:62:81:88:c7:c2:f8:10:0f:ca:7f:
b7:ed:f9:55:8a:40:4f:47:ca:e2:40:11:79:ae:7f:ce:52:71:
d9:7e:d9:bd:a5:77:d1:77:34:3d:a5:fa:13:ea:35:54:cf:50:
f2:55:1f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:18 2023 by rpki-client on console-fra.rpki-client.org