Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/qE0RVtm5WX0xZS5aLrLucVqu3do.roa
File: qE0RVtm5WX0xZS5aLrLucVqu3do.roa (raw, json)
Hash identifier: 0Da20LRz4aVnLCtT7kVh39WDkF35tMJX5IMSf+iWyls=
Subject key identifier: A8:4D:11:56:D9:B9:59:7D:31:65:2E:5A:2E:B2:EE:71:5A:AE:DD:DA
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 0889AFF9
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/qE0RVtm5WX0xZS5aLrLucVqu3do.roa
Signing time: Sat 01 Jan 2022 15:00:02 +0000
ROA not before: Sat 01 Jan 2022 15:00:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208397
IP address blocks: 31.40.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143241209 (0x889aff9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Jan 1 15:00:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a84d1156d9b9597d31652e5a2eb2ee715aaeddda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6b:f1:94:cb:93:8c:e3:8c:8f:6e:08:dc:92:
78:fd:d4:25:fd:61:23:73:32:59:cc:a6:8f:13:d9:
52:73:d5:83:08:87:34:c4:33:e6:83:bc:32:4c:53:
a9:0a:45:51:9e:c2:46:d1:b9:da:ed:c9:0a:5b:bc:
a7:e1:0c:8a:9f:66:1f:89:4f:b1:14:80:0b:dd:e8:
57:b3:e0:28:05:4b:30:00:92:2c:f3:bb:ec:ea:d0:
1e:56:f3:9b:f5:05:37:d7:21:85:16:cd:26:41:ef:
fe:8a:b9:23:29:5c:de:46:a0:5e:05:68:26:a5:1a:
ba:e1:d1:1b:2e:db:92:92:3a:69:eb:4b:f3:c8:a8:
ae:4c:9c:02:72:95:01:f8:70:43:05:15:ea:42:a5:
11:63:2f:db:06:e6:f9:9d:a2:ed:36:36:15:7a:37:
f2:4c:8b:51:d1:3d:08:a1:01:19:57:c8:54:6b:fe:
11:59:a3:cc:d1:ab:c6:df:c3:d9:d1:81:a2:9c:36:
3f:47:e9:82:65:8f:d2:02:70:d5:bd:f2:99:9e:dc:
bf:d4:f7:36:7e:ce:74:15:54:22:cf:db:99:f0:ab:
44:97:8c:8f:1f:12:db:d3:d1:7e:b1:3a:72:d8:08:
ee:9b:4a:ee:ff:3a:57:2d:96:3f:85:d0:17:d4:e1:
29:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4D:11:56:D9:B9:59:7D:31:65:2E:5A:2E:B2:EE:71:5A:AE:DD:DA
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/qE0RVtm5WX0xZS5aLrLucVqu3do.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.157.0/24
Signature Algorithm: sha256WithRSAEncryption
91:31:4f:b5:14:1c:ae:35:7a:04:31:b4:fd:c2:bc:cd:b0:52:
86:e4:97:27:e4:39:82:0d:f2:51:46:b9:05:3d:8d:4a:50:92:
81:c7:1f:26:54:11:59:13:f7:5e:df:33:51:65:93:90:b7:5f:
5e:3d:e6:1e:f4:8a:5e:87:dc:82:7c:b8:ab:c3:8f:95:96:6e:
0f:a1:82:8a:50:80:bf:bc:dd:ab:ad:5d:e8:95:e4:2a:d3:7b:
37:c5:d1:07:09:28:a3:ff:e3:71:7c:3e:fb:70:a1:fa:42:5f:
27:44:d4:81:c7:c5:82:31:e5:3f:68:a1:59:9d:0f:db:e8:59:
68:ce:7b:c8:c4:97:a6:c0:65:bc:4e:ea:54:41:16:67:f6:55:
11:18:44:c4:0f:d4:38:3b:8b:50:b7:d5:ef:f4:df:36:ba:3e:
ef:5c:0f:3b:00:6d:cf:7c:c5:78:3d:24:44:4d:59:f0:42:95:
16:01:a0:0b:16:cf:1b:52:9e:39:c1:d6:25:c8:c2:ed:d1:fd:
b4:2e:bc:f2:f5:f2:ef:23:39:96:4f:08:56:64:47:d1:9f:fe:
b0:de:41:24:fe:07:ff:d0:23:76:40:9e:b4:85:ca:41:ed:99:
4e:05:56:dd:2f:96:1e:8a:7a:3e:5f:9c:48:00:09:c1:b9:53:
31:9e:a2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:41 2023 by rpki-client on console-ams.rpki-client.org