Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/xjIpgUBdo5HdDJ_u0viDB9xQ2yc.roa
File: xjIpgUBdo5HdDJ_u0viDB9xQ2yc.roa (raw, json)
Hash identifier: Dw8DmoaOMW0KKAfV8lRPHOAOUMCKuGldtcduu0NfHo8=
Subject key identifier: C6:32:29:81:40:5D:A3:91:DD:0C:9F:EE:D2:F8:83:07:DC:50:DB:27
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 08868E93
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/xjIpgUBdo5HdDJ_u0viDB9xQ2yc.roa
Signing time: Sat 01 Jan 2022 14:59:58 +0000
ROA not before: Sat 01 Jan 2022 14:59:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58271
IP address blocks: 31.40.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143036051 (0x8868e93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Jan 1 14:59:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6322981405da391dd0c9feed2f88307dc50db27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:11:35:ec:af:16:42:08:83:3e:56:be:d8:13:
30:98:f4:1e:54:b4:c2:9f:69:f9:2c:72:42:89:96:
bf:a6:0c:a9:62:9b:96:5c:f1:ec:c9:65:b0:29:08:
39:9b:84:0e:92:f7:e0:99:85:1c:cf:3e:f6:11:ed:
94:a3:b7:36:8e:19:d8:64:ee:d7:72:ab:a4:39:1b:
d9:05:8e:96:c5:d8:8f:49:de:e6:41:d8:62:67:81:
67:ac:7b:1d:9b:56:bd:5a:5d:a1:b7:20:74:16:70:
5a:93:0c:15:45:9a:d3:4d:ef:36:58:00:2f:7e:ad:
82:61:41:4a:4c:ae:0d:09:5a:f7:38:be:7b:fa:04:
45:bd:a4:6e:8b:9e:3e:2f:20:ef:b8:54:a4:d6:31:
f2:67:6e:c0:77:ad:ed:3d:28:c5:e1:35:25:c6:f6:
ef:7b:64:a7:4d:54:8f:c5:9b:6f:9e:05:36:42:65:
9d:53:04:da:6f:e9:0e:03:9f:b8:4e:86:7d:62:ab:
38:37:9c:f4:55:e2:b7:29:d6:da:d5:1f:f5:c4:51:
2d:29:b5:0e:ad:13:05:23:ba:2c:78:83:52:11:17:
57:69:9a:b0:44:1b:68:43:e4:f6:83:b0:ee:71:00:
73:7c:e4:b8:cc:a5:a9:15:01:6c:46:84:f7:f6:9e:
9b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:32:29:81:40:5D:A3:91:DD:0C:9F:EE:D2:F8:83:07:DC:50:DB:27
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/xjIpgUBdo5HdDJ_u0viDB9xQ2yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.153.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:00:ec:1c:f0:db:a5:d8:09:81:9f:bc:1a:67:9c:46:9d:f3:
7e:31:6e:2c:e4:73:43:22:30:a7:1b:22:b6:77:85:41:91:4d:
78:eb:4b:45:1d:7c:4c:e2:44:0c:a4:7e:5f:a1:d4:2d:0b:44:
29:c0:0b:94:82:3f:31:d6:01:74:bb:c5:82:88:f9:01:52:07:
dc:1a:38:a5:2f:ca:3a:bb:54:55:ef:c9:aa:53:cc:37:62:03:
6c:21:9f:6e:4e:ac:1d:bc:7f:8b:61:62:71:cd:52:38:36:42:
aa:2a:f7:50:87:9a:8b:2e:92:c6:c8:d4:6c:81:6f:98:89:81:
4e:7c:20:3b:98:40:73:84:db:94:1b:31:53:f7:e9:d4:fc:26:
f0:dd:cc:a4:c3:8e:7d:a8:f1:49:39:13:77:e1:51:02:3c:6e:
e7:34:39:26:c1:1e:8e:6e:b3:b9:6c:a4:a2:fc:72:96:60:b5:
29:fb:98:ab:01:aa:aa:87:2d:22:48:52:64:c1:2f:f1:c3:f8:
d8:e1:2f:35:25:aa:fd:eb:cd:b8:48:3a:73:d9:6d:1e:1b:d4:
ec:b6:ea:33:a8:88:f5:37:50:f8:a0:a3:1b:e8:81:59:b2:d4:
1f:f7:9c:88:88:0f:48:bb:70:cf:70:d0:55:ea:5d:6d:9f:12:
00:2e:e7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:04 2023 by rpki-client on console-fra.rpki-client.org