Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/ilr1WURjwajSuIJ7_pTPVd-GBWY.roa
File: ilr1WURjwajSuIJ7_pTPVd-GBWY.roa (raw, json)
Hash identifier: WxahCnrBYF3N0e3cUlLQslnqsTUr0mYLf4mRQr7iHA4=
Subject key identifier: 8A:5A:F5:59:44:63:C1:A8:D2:B8:82:7B:FE:94:CF:55:DF:86:05:66
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 08FC6810
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/ilr1WURjwajSuIJ7_pTPVd-GBWY.roa
Signing time: Fri 18 Feb 2022 11:30:38 +0000
ROA not before: Fri 18 Feb 2022 11:30:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48330
IP address blocks: 31.40.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150759440 (0x8fc6810)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Feb 18 11:30:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a5af5594463c1a8d2b8827bfe94cf55df860566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bb:4f:f2:2e:c2:db:ff:7b:83:ad:ca:86:8e:
b4:81:e3:15:52:82:17:0e:b7:85:c2:62:a4:08:f6:
93:ca:b6:68:85:16:a9:93:33:4c:cd:81:be:62:85:
38:f6:2b:32:f0:d5:e9:b8:7d:82:8d:cc:fc:63:fd:
93:ea:d1:56:5f:19:ae:2c:a4:0d:0d:b1:7d:a3:fb:
92:7d:95:32:5e:49:64:76:4a:a5:42:1f:75:cf:f6:
7a:44:94:68:80:0e:76:f1:c4:33:06:e3:d0:b7:6e:
b3:1b:d2:fd:4c:89:4a:b0:da:4b:71:e7:39:bc:f5:
f3:30:52:ad:a7:68:91:f3:f6:e8:be:d5:36:24:02:
27:c7:ae:21:01:3b:5d:3f:14:51:de:79:dc:6b:ac:
05:ce:14:22:87:61:da:07:78:02:6e:01:4c:7c:4b:
14:46:67:e3:e0:9a:91:07:af:ca:83:08:f3:cb:a6:
1e:5e:47:31:df:52:34:d7:79:14:21:d6:ba:20:de:
b5:48:cf:38:81:60:de:89:24:cd:01:51:b5:7e:44:
48:62:4b:4e:45:ed:2a:4a:3d:8c:a5:a5:3d:6b:e0:
ff:30:b1:2b:c2:c1:7c:e6:d0:88:f4:93:72:7d:a3:
19:b0:0d:6c:ca:e0:43:71:5c:a0:6a:48:54:1e:c3:
c8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5A:F5:59:44:63:C1:A8:D2:B8:82:7B:FE:94:CF:55:DF:86:05:66
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/ilr1WURjwajSuIJ7_pTPVd-GBWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.164.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:67:f9:df:f5:a3:65:d6:9e:87:11:7b:27:50:1e:b6:83:ef:
81:ea:41:66:ba:96:23:b4:79:8f:d1:55:85:8e:5b:e2:fa:d4:
9b:43:3a:34:8d:af:b4:5b:cb:0f:23:14:e4:c2:d6:75:1d:b6:
83:00:a6:a8:e8:9d:7d:68:8b:1b:fa:e0:b6:58:f5:ad:5f:95:
2e:d5:c0:24:e4:a1:74:5d:83:34:59:96:02:03:b1:28:ed:c5:
c0:cd:fc:e1:a8:ee:42:4f:2f:2f:a2:03:82:e2:8a:7e:21:fb:
7c:e5:b7:ab:12:4c:1d:20:2f:18:3b:75:e2:95:11:65:e6:31:
16:40:ea:4b:2a:99:5c:f5:cf:38:f9:bb:5d:c4:e2:40:06:b6:
e1:dd:97:24:97:2b:23:cb:44:cd:40:78:9a:e3:d7:d9:7f:99:
0a:b3:0f:c2:21:1f:69:e9:15:e5:ac:e1:a1:85:91:fa:f9:07:
c6:28:e3:bb:df:38:7d:42:b5:d0:9c:f6:64:ef:06:a4:68:9d:
83:5c:c3:93:03:4e:4c:15:aa:c6:f3:19:ab:3d:e8:4f:8c:17:
78:77:be:3c:e8:61:2c:e2:14:1b:88:d3:58:a8:04:b0:b1:2a:
48:54:62:09:d2:b0:41:22:ed:3f:58:50:28:c5:4a:1f:71:df:
84:b1:cc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:04 2023 by rpki-client on console-fra.rpki-client.org