Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/wQRT2sgkjxHMcUOMIQBAT0EuV5E.roa
File: wQRT2sgkjxHMcUOMIQBAT0EuV5E.roa (raw, json)
Hash identifier: fAKOKfIlI84nuzdQ2XxOhit/oo97Z/i8KPbbi9IGkK4=
Subject key identifier: C1:04:53:DA:C8:24:8F:11:CC:71:43:8C:21:00:40:4F:41:2E:57:91
Certificate issuer: /CN=31eb9b2db4a3bddf8c92fc50b9713043dd56dc38
Certificate serial: 01840F758B72C8611A9F58358F69E23906EA
Authority key identifier: 31:EB:9B:2D:B4:A3:BD:DF:8C:92:FC:50:B9:71:30:43:DD:56:DC:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MeubLbSjvd-MkvxQuXEwQ91W3Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/wQRT2sgkjxHMcUOMIQBAT0EuV5E.roa
Signing time: Tue 25 Oct 2022 14:04:32 +0000
ROA not before: Tue 25 Oct 2022 14:04:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8075
IP address blocks: 202.22.167.0/24 maxlen: 24
202.22.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0f:75:8b:72:c8:61:1a:9f:58:35:8f:69:e2:39:06:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31eb9b2db4a3bddf8c92fc50b9713043dd56dc38
Validity
Not Before: Oct 25 14:04:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c10453dac8248f11cc71438c2100404f412e5791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ac:30:f1:2e:15:29:35:f2:ee:bb:f7:36:2b:
6a:d8:fc:72:8a:fb:b8:ba:b8:10:68:9a:84:c7:8a:
7c:b1:b7:53:e8:3f:5f:7a:25:3b:fe:15:79:4e:fa:
46:e5:c8:6d:39:cd:67:67:d6:91:2e:a4:66:56:02:
9c:32:9f:18:2a:2d:a9:00:ec:83:cc:99:c3:b9:4e:
29:8a:fe:91:5b:d6:38:34:7c:56:a0:b9:c3:88:d9:
b0:57:4c:ff:eb:75:bf:18:59:22:9f:be:c5:42:b5:
86:15:3e:f9:9f:33:29:76:00:e3:0f:c8:03:a4:80:
c3:1e:f7:61:dd:11:c4:1c:f6:86:40:3e:d0:7f:4a:
fb:87:de:7f:a2:36:b7:40:08:2f:83:fe:b2:7e:24:
69:88:c8:10:4c:9a:f3:d1:e6:d2:9e:cd:74:b8:27:
e0:ab:0a:1f:00:86:f3:38:c7:a1:7c:0b:17:18:8c:
e4:db:b8:3f:5d:2a:0a:aa:61:c5:86:94:db:e7:82:
9b:d0:52:e9:f7:de:23:a1:d8:e0:5d:7a:d9:a6:b2:
54:06:33:ec:29:a6:6b:34:b4:4a:a7:b8:9b:46:5a:
de:02:4b:57:cc:81:44:b7:29:f0:55:51:34:43:24:
1d:82:3d:7a:d3:c5:c6:6b:21:b7:7b:68:02:18:ce:
c1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:04:53:DA:C8:24:8F:11:CC:71:43:8C:21:00:40:4F:41:2E:57:91
X509v3 Authority Key Identifier:
keyid:31:EB:9B:2D:B4:A3:BD:DF:8C:92:FC:50:B9:71:30:43:DD:56:DC:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MeubLbSjvd-MkvxQuXEwQ91W3Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/wQRT2sgkjxHMcUOMIQBAT0EuV5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/MeubLbSjvd-MkvxQuXEwQ91W3Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.22.167.0/24
202.22.173.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:c6:f5:73:41:43:5d:6b:7b:a6:29:05:9d:fb:5e:98:5c:7e:
73:30:1a:06:2e:92:d9:e2:a9:99:3c:f2:2a:f9:f7:70:2b:71:
4e:69:60:16:02:04:76:f1:89:5c:df:72:ef:3c:69:f6:7d:12:
7e:61:ac:11:51:37:ff:75:45:b7:e8:9e:fb:c6:d8:d1:df:10:
c2:0b:3a:63:bd:ab:8c:a5:ec:f0:be:c6:27:5a:73:87:de:64:
b4:27:d3:b8:7f:e7:8e:c0:88:df:6a:b6:55:cd:cc:88:c6:a8:
22:8c:c7:a5:3a:3c:a6:43:dc:22:e9:ef:6f:db:fd:11:45:70:
45:ab:6a:ff:dc:8a:46:6f:22:4b:cd:ea:17:46:71:06:b6:ab:
d1:0b:df:52:94:93:93:77:0a:f7:73:31:4f:31:2f:a5:7f:7f:
f6:44:cd:7e:87:17:ac:1d:45:09:b6:7e:e4:b9:58:70:77:d9:
b5:4a:77:3b:39:d9:da:85:a1:3e:cc:2c:9a:86:b8:73:95:cf:
f2:c5:63:9d:f7:b6:69:ee:b0:0c:ac:4c:30:02:49:68:e6:e3:
66:9f:48:dd:ab:93:f0:9d:11:60:67:96:18:ae:8d:d0:b4:5c:
8b:f1:1a:66:7d:df:4d:fc:79:c8:71:64:42:1c:55:02:76:a1:
23:04:e3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:24 2024 by rpki-client on console-fra.rpki-client.org