Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/0ieU2io1K44_BMj-zUIiVgsXkYY.roa
File: 0ieU2io1K44_BMj-zUIiVgsXkYY.roa (raw, json)
Hash identifier: sz+YR+kvRBNegb4uYC8neblFaznAy15ZLHs7AQ0xNKQ=
Subject key identifier: D2:27:94:DA:2A:35:2B:8E:3F:04:C8:FE:CD:42:22:56:0B:17:91:86
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 096379D4
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/0ieU2io1K44_BMj-zUIiVgsXkYY.roa
Signing time: Tue 05 Apr 2022 09:40:18 +0000
ROA not before: Tue 05 Apr 2022 09:40:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209747
IP address blocks: 31.40.158.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157514196 (0x96379d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Apr 5 09:40:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d22794da2a352b8e3f04c8fecd4222560b179186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:98:e4:b7:ee:b9:74:79:99:e8:84:9c:8e:84:
ce:f1:da:7f:ba:ae:18:5f:f4:4d:f8:ed:fe:83:59:
6c:a2:0a:e9:c6:13:ed:92:d7:c4:7d:00:11:18:f6:
c2:0c:9d:ee:f9:17:ba:ef:be:1c:4c:f3:51:bc:6a:
b8:c5:43:9f:c7:f3:b5:09:9b:81:4d:81:8d:af:da:
58:a8:30:3b:9b:a8:11:2f:06:7c:84:76:08:1f:77:
d5:74:44:ec:dc:0a:76:b6:c2:55:5d:f0:cc:39:37:
eb:60:0b:c9:95:93:4b:a1:9b:44:59:b2:d6:f6:b1:
fd:f1:68:a9:18:00:89:06:a6:31:49:d9:26:3b:10:
dd:a9:18:ff:b8:ba:cb:5f:cd:46:15:f0:86:c8:6d:
21:a1:5c:73:33:0d:ff:e2:7c:49:d7:5f:48:56:1e:
b5:a9:3b:55:6a:52:05:e9:7d:71:74:57:1b:0d:a3:
85:10:88:31:1c:7a:9f:28:e2:c1:5b:05:71:00:c8:
cb:7d:06:c4:2c:8e:e7:c5:68:86:05:8b:6d:8f:cc:
d3:f0:42:16:56:9e:ee:ed:09:39:d6:41:72:9b:cd:
33:cf:62:95:de:39:7f:42:51:1a:89:9f:3f:55:08:
61:e4:4c:f9:15:41:48:ed:b8:49:60:d7:91:e3:87:
8f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:27:94:DA:2A:35:2B:8E:3F:04:C8:FE:CD:42:22:56:0B:17:91:86
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/0ieU2io1K44_BMj-zUIiVgsXkYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.158.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:87:65:d3:fe:58:fb:a8:f8:44:8e:20:cc:4a:a5:f8:f5:e8:
49:a4:91:7c:67:6b:f3:f4:36:a7:3d:88:23:7e:6e:27:ff:14:
2f:c1:09:54:4e:c2:a6:03:b6:02:e4:f6:75:22:cf:02:85:3e:
32:3e:54:ac:ec:38:44:b9:16:d8:06:23:b6:a1:77:51:da:57:
c0:78:2e:3a:a3:2f:10:12:69:48:76:e3:7b:b9:cd:53:8b:de:
65:9e:c3:8d:fe:fd:4a:a7:cb:dd:b4:1a:75:c4:41:6e:73:71:
c7:4a:91:22:ca:ca:c4:8b:9a:cf:bf:6c:de:61:4f:5f:1e:24:
a9:0d:dd:f1:ba:a3:ce:2c:36:99:60:92:dc:95:f6:80:3a:24:
ac:72:1f:0a:c5:45:dd:f8:cd:95:e2:4d:6a:8f:11:df:6c:c5:
df:79:5f:6d:23:b0:1c:c4:e7:bb:d5:41:7c:74:f1:7a:10:14:
f5:3f:16:6b:a9:a1:0d:7c:25:d0:03:83:7c:55:a0:42:90:7e:
96:1b:7e:12:c6:43:2c:38:88:e3:d3:1f:02:69:53:a6:62:30:
8f:6b:98:80:3c:24:9b:d3:71:9f:cd:31:54:88:99:b6:b2:3a:
4f:43:62:82:24:5c:3d:b5:14:f9:a8:00:02:70:71:cf:25:84:
91:4b:8a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:04 2023 by rpki-client on console-fra.rpki-client.org