Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/AqTV5SqGji49vzApsDJku18p24I.roa
File: AqTV5SqGji49vzApsDJku18p24I.roa (raw, json)
Hash identifier: U0LttvzlJjFqBZNl8zmq8bA1v8by2Tme5RZIkrhIjzU=
Subject key identifier: 02:A4:D5:E5:2A:86:8E:2E:3D:BF:30:29:B0:32:64:BB:5F:29:DB:82
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 088893DE
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/AqTV5SqGji49vzApsDJku18p24I.roa
Signing time: Sat 01 Jan 2022 15:00:00 +0000
ROA not before: Sat 01 Jan 2022 15:00:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204791
IP address blocks: 31.40.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143168478 (0x88893de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Jan 1 15:00:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02a4d5e52a868e2e3dbf3029b03264bb5f29db82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cb:f2:e2:49:bf:47:34:95:c0:c1:75:69:55:
be:aa:ca:3c:8a:09:70:b3:7c:01:a2:e7:3f:40:58:
0e:59:85:d9:2c:37:a8:d2:63:ae:86:7d:d4:8b:24:
4f:62:21:58:73:a6:fe:4c:14:ef:75:85:00:60:c6:
82:8d:8c:93:5a:c8:c9:0d:f8:71:81:18:f5:c4:e0:
7e:d8:09:6d:ac:4c:3b:2d:c5:80:51:2b:f6:a5:e1:
ca:4a:6a:fc:bc:32:e3:6e:95:45:5d:2b:d7:d0:c7:
2a:e5:ce:9a:b7:4a:20:be:db:5a:9e:eb:f9:32:16:
3c:3f:e2:05:b2:63:f1:cd:66:4d:e9:85:ef:2a:11:
28:fe:3e:5f:bd:d4:82:28:b4:36:ae:e1:9d:a9:f1:
6d:e5:ee:78:a2:a6:62:51:01:78:e8:d2:3c:18:2d:
d1:64:bc:5b:5c:f1:67:f0:03:a0:1b:ba:06:e1:a4:
00:70:da:dc:f1:ea:39:30:bb:a2:de:49:c4:96:87:
cf:b6:a1:d4:a5:bd:88:78:d4:87:5c:9d:88:64:9c:
39:e0:3d:84:a5:a4:84:e9:2b:cc:d5:41:f3:84:fc:
e2:80:30:5e:d2:8f:e0:b6:9a:55:db:3a:a3:5a:7b:
3d:15:26:92:7c:b5:b7:cf:32:90:89:8c:6d:ff:b0:
4f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A4:D5:E5:2A:86:8E:2E:3D:BF:30:29:B0:32:64:BB:5F:29:DB:82
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/AqTV5SqGji49vzApsDJku18p24I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.130.0/24
Signature Algorithm: sha256WithRSAEncryption
33:52:21:0d:23:f6:4e:5c:ff:48:ee:c8:16:a9:8f:b6:a3:7d:
f2:e7:82:61:78:d5:1b:cf:6a:eb:47:92:de:49:9d:25:f7:e1:
b4:e1:c0:6b:32:fb:1f:58:d4:68:d5:68:5b:a2:72:e9:f8:a5:
94:ef:c0:25:49:95:b1:f1:c0:60:f9:e2:5d:a6:b9:a9:c8:be:
33:9e:5a:ad:e2:2f:ac:fe:96:02:18:c1:fd:29:9e:d5:34:05:
01:2c:23:60:dd:82:9e:d8:fb:68:c0:87:38:4e:1a:a0:38:8e:
fc:25:b2:73:8f:87:ca:22:99:da:5d:d5:c8:f0:46:30:57:d6:
09:86:26:5b:81:67:b4:25:22:8a:cf:39:19:5f:b2:86:16:6d:
7f:77:f9:3f:d7:75:92:ed:0c:4d:6a:1a:04:b2:03:0a:d4:a6:
86:32:5c:a6:c9:76:0c:e5:33:55:67:16:2d:4e:46:7b:c5:c6:
03:fc:24:f5:18:0c:e2:93:6f:70:1f:70:c9:c3:77:2a:e2:52:
e9:02:32:50:ce:40:47:80:d2:90:f6:7d:03:59:5b:2c:fe:6e:
e7:b7:d8:9d:b3:d7:db:2c:07:4e:e8:b6:42:de:e2:c2:85:3b:
42:99:c1:11:b6:7c:78:89:87:50:61:56:a8:28:dd:88:a9:de:
fd:68:fb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:41 2023 by rpki-client on console-ams.rpki-client.org