Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/nZiqlna-1nY6FChw9N09Okm44OY.roa
File: nZiqlna-1nY6FChw9N09Okm44OY.roa (raw, json)
Hash identifier: BIyOOKiOoH8sAftToJW+coFQYmicrfEmw2wxswHH08U=
Subject key identifier: 9D:98:AA:96:76:BE:D6:76:3A:14:28:70:F4:DD:3D:3A:49:B8:E0:E6
Certificate issuer: /CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Certificate serial: 04DF217D
Authority key identifier: C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/nZiqlna-1nY6FChw9N09Okm44OY.roa
Signing time: Sat 01 Jan 2022 03:53:26 +0000
ROA not before: Sat 01 Jan 2022 03:53:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21110
IP address blocks: 31.222.56.0/24 maxlen: 24
31.222.55.0/24 maxlen: 24
31.222.57.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81731965 (0x4df217d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Validity
Not Before: Jan 1 03:53:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d98aa9676bed6763a142870f4dd3d3a49b8e0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b4:5c:9c:41:9c:e6:89:12:85:95:23:78:70:
ae:b1:fd:a6:d8:9f:89:e5:d6:37:ff:80:37:a0:63:
0a:1b:90:6a:7e:8e:10:b0:2e:21:b7:ac:bc:aa:59:
e0:20:cf:bb:ef:01:18:37:df:03:96:88:2f:4c:47:
b4:73:b6:c2:6c:b3:8a:0d:ba:82:03:10:61:c5:21:
ff:f5:3b:f5:92:11:0c:bb:06:52:ff:77:97:dc:a5:
a2:72:f8:d0:f0:b4:13:7e:64:ba:39:d6:48:7e:1b:
cc:54:3b:84:1e:0a:c6:64:30:66:ff:c3:ef:30:e3:
95:96:98:b2:c8:57:7b:75:bc:97:66:1c:94:77:88:
24:b0:32:e1:66:ef:26:6a:3b:62:7f:3a:d1:8d:39:
bc:ed:c8:da:5c:88:09:80:db:ce:64:da:86:83:69:
97:27:1b:64:f9:37:e1:93:ec:e1:86:57:98:f2:76:
c4:f4:0f:3d:1b:44:90:39:67:87:80:2b:e2:3f:dc:
53:f7:69:07:0f:4f:29:f2:58:7e:6f:01:ca:8c:78:
e2:c8:72:43:a6:84:11:68:8f:72:5c:42:df:ee:fd:
29:33:a6:0a:3a:ed:71:ab:df:ee:a6:15:a7:06:48:
7c:22:b6:8a:8c:81:da:b4:2f:a3:de:ea:cb:81:81:
d3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:98:AA:96:76:BE:D6:76:3A:14:28:70:F4:DD:3D:3A:49:B8:E0:E6
X509v3 Authority Key Identifier:
keyid:C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/nZiqlna-1nY6FChw9N09Okm44OY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.55.0-31.222.57.255
Signature Algorithm: sha256WithRSAEncryption
19:f8:dd:e5:3b:ac:d8:db:c6:87:e6:aa:99:a9:ef:aa:3c:ad:
a6:6b:f7:2c:ee:cc:60:de:df:35:23:54:44:c1:b5:4b:8c:86:
e0:73:95:22:25:93:86:82:02:09:8d:86:92:ab:c7:eb:65:53:
41:31:3a:e0:87:39:0f:d4:dd:c6:dc:a4:93:61:b5:f2:1c:9a:
7d:c8:27:9b:86:85:6d:e4:79:e8:ac:90:0f:0f:ad:d0:79:a0:
d3:9c:a8:8c:b6:94:3b:25:ad:85:7d:4a:dc:84:a7:0e:bd:bb:
b0:49:cd:8c:09:60:11:e6:26:74:53:64:64:86:8f:b3:f9:b0:
18:4d:5a:c1:5e:e2:aa:df:68:3a:e8:f2:e9:4d:e9:f9:cc:db:
6b:56:a8:4a:07:20:1d:f7:b7:6a:ef:71:04:b2:96:ff:77:d9:
26:04:10:aa:ef:b5:fd:3e:5a:1c:82:68:58:ef:b8:67:48:c2:
79:e0:8c:ef:73:f6:7d:a6:f7:40:d8:97:3d:9b:36:86:c0:44:
28:0a:32:5c:c5:ca:d5:98:05:9c:d1:96:20:89:32:fb:b1:c8:
55:e1:32:97:7e:62:37:11:e8:8d:fe:14:5d:6a:24:74:6c:7f:
98:82:94:10:00:49:ff:c0:5a:45:f3:a9:ab:49:ce:10:d5:76:
82:0a:0d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:03 2024 by rpki-client on console-ams.rpki-client.org