Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/AopY_AB_IgzNqxMTUOxgFxuhit0.roa
File: AopY_AB_IgzNqxMTUOxgFxuhit0.roa (raw, json)
Hash identifier: KTebGImVE9ag/Waw4KFyi+xlztBVUAULrwmajG/HD5c=
Subject key identifier: 02:8A:58:FC:00:7F:22:0C:CD:AB:13:13:50:EC:60:17:1B:A1:8A:DD
Certificate issuer: /CN=172537601a31697404922d957e74450f5a9cbe73
Certificate serial: 025CA7B9
Authority key identifier: 17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/AopY_AB_IgzNqxMTUOxgFxuhit0.roa
Signing time: Fri 25 Mar 2022 07:03:55 +0000
ROA not before: Fri 25 Mar 2022 07:03:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6939
IP address blocks: 31.223.200.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39626681 (0x25ca7b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=172537601a31697404922d957e74450f5a9cbe73
Validity
Not Before: Mar 25 07:03:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=028a58fc007f220ccdab131350ec60171ba18add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:17:ae:56:88:ad:9a:77:9a:8f:71:45:bc:0a:
5b:12:52:02:9a:42:30:b9:46:36:fd:3a:e0:d0:a9:
bd:53:e5:32:2f:60:b9:4c:f8:ee:c1:1f:1f:cc:ab:
bf:2e:16:ec:eb:c1:39:b3:27:28:ef:fe:c5:b3:cd:
af:60:9c:c5:20:fd:41:4a:06:ff:e0:dc:f8:27:91:
c6:d9:1e:d7:3c:70:24:2a:3f:41:15:a7:df:22:27:
7b:3d:39:3c:6c:c1:8f:c0:78:91:65:e9:61:c6:1c:
d8:1e:77:08:1e:ce:35:77:3e:8c:01:b0:9c:09:18:
a3:d5:2a:ca:95:d5:2b:f7:22:94:e1:69:ed:67:bb:
27:d1:9f:87:15:f8:43:51:95:55:a2:65:65:7a:ee:
2a:cd:47:59:8d:d9:20:8a:4a:99:72:e4:76:77:f4:
1c:86:81:31:36:4f:75:25:17:14:c9:25:e1:c3:b5:
21:6d:0b:2f:65:2a:a5:ed:e7:93:50:13:b5:a2:07:
ba:4a:39:66:d0:a0:01:f4:54:70:a5:7e:84:1a:f3:
0b:3f:3e:cf:cd:6a:60:80:33:c0:f5:1d:87:a6:e9:
cc:83:67:a5:0f:64:58:83:7f:f9:20:31:b6:f4:1b:
6d:37:df:7e:44:3a:f7:c9:5f:75:97:8b:21:74:95:
30:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8A:58:FC:00:7F:22:0C:CD:AB:13:13:50:EC:60:17:1B:A1:8A:DD
X509v3 Authority Key Identifier:
keyid:17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/AopY_AB_IgzNqxMTUOxgFxuhit0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.223.200.0/21
Signature Algorithm: sha256WithRSAEncryption
3f:06:96:06:bf:29:85:08:e0:81:5f:46:2e:35:17:01:42:d4:
95:bb:59:6b:2b:fd:e4:e6:f2:f3:8a:48:f1:bf:f0:e6:b8:d4:
9c:95:66:8d:b1:b8:41:88:75:5a:01:c3:03:1c:29:a6:fe:10:
d6:93:8a:50:c5:ac:2c:7f:5b:22:96:04:18:c5:06:b8:f6:c3:
74:c3:73:90:60:48:db:5c:75:f4:63:fa:a4:fb:7a:46:9b:e2:
cb:7b:23:e8:49:8f:02:19:c7:b2:97:3b:c3:ad:5a:b8:3a:a3:
77:af:c9:66:52:a4:dc:71:1f:29:59:ec:38:e8:86:48:90:8f:
da:f7:97:c7:12:da:32:d1:e7:9d:c0:fc:7f:b8:fd:c6:9a:66:
5c:9c:9d:11:3e:9a:b5:39:db:74:ef:b5:18:25:91:d6:04:af:
74:8c:b2:39:33:09:6b:b0:f6:2e:d4:15:6b:52:76:37:ea:a1:
d4:2d:5a:3b:e1:1f:54:a7:7f:fa:29:60:66:90:85:0e:c9:2c:
d8:df:b0:d2:c9:22:14:4d:70:ba:db:8b:44:ca:fd:2a:31:ab:
ec:59:f4:15:a0:be:2f:c1:b0:01:69:fa:84:19:2c:5a:1e:97:
aa:e4:ce:27:5d:d6:72:fb:d3:f3:dc:29:f8:6f:c4:83:24:52:
ed:7b:1f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:25 2024 by rpki-client on console-fra.rpki-client.org