Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/xcW_dmUPKyyOrbVK0bp1qtGVH0E.roa
File: xcW_dmUPKyyOrbVK0bp1qtGVH0E.roa (raw, json)
Hash identifier: CLFv2sHhr9iGnKGnCH1KMygXXORqsDBW/3PT8Fdt3fI=
Subject key identifier: C5:C5:BF:76:65:0F:2B:2C:8E:AD:B5:4A:D1:BA:75:AA:D1:95:1F:41
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018C14EEC643AA66184C3481D509278E165F
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/xcW_dmUPKyyOrbVK0bp1qtGVH0E.roa
Signing time: Tue 28 Nov 2023 07:57:21 +0000
ROA not before: Tue 28 Nov 2023 07:57:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39543
IP address blocks: 31.14.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:14:ee:c6:43:aa:66:18:4c:34:81:d5:09:27:8e:16:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Nov 28 07:57:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5c5bf76650f2b2c8eadb54ad1ba75aad1951f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:36:25:b4:b4:c3:6b:ad:11:13:2c:74:a9:b9:
92:54:40:38:4a:73:68:a3:66:6d:c5:bd:10:3c:86:
79:2f:f2:77:47:a9:cf:52:72:f7:54:3f:b3:f0:a8:
2d:f3:d3:2c:41:cf:ef:37:e8:77:39:bd:2f:72:78:
1b:8e:99:ee:cc:d7:9c:6c:94:ac:cc:e9:49:a5:a2:
03:0a:e5:3e:58:41:64:df:2c:ea:01:7a:a1:af:e9:
fb:1a:c0:bf:29:30:99:42:e7:fc:c4:7e:f8:b2:70:
5a:2a:be:5c:a4:25:ec:c8:ff:df:48:57:53:63:b3:
53:10:14:99:d2:ed:e4:61:f8:30:76:48:37:6e:bd:
5f:9c:52:6b:a3:8c:05:78:61:84:fc:30:a4:41:b0:
04:d7:59:e7:b0:d8:e8:27:bd:bf:c5:db:88:69:cf:
ef:4f:76:f6:e9:12:3c:08:f0:00:d9:b6:b5:51:13:
1c:f2:90:83:8a:e6:66:82:0e:92:3f:60:12:81:ea:
f4:11:87:ff:cf:2f:65:91:ca:66:0d:a5:a4:df:53:
d6:ec:56:42:46:67:bd:de:9c:3a:c3:d1:7a:f8:2b:
65:8d:92:f6:be:d4:7e:47:b5:e8:95:0a:b1:79:69:
17:a2:91:f0:07:ba:2e:b8:fc:69:61:72:aa:9d:2c:
80:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C5:BF:76:65:0F:2B:2C:8E:AD:B5:4A:D1:BA:75:AA:D1:95:1F:41
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/xcW_dmUPKyyOrbVK0bp1qtGVH0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.49.0/24
Signature Algorithm: sha256WithRSAEncryption
db:9e:34:29:50:a2:e4:15:30:d5:da:a1:39:06:a7:1a:a5:f5:
c4:ed:51:44:a8:df:30:c9:47:d2:4d:bc:03:3c:05:e1:a2:a8:
6d:39:cf:95:32:da:47:50:21:ae:56:9e:21:0f:19:31:10:4f:
7e:09:d8:b4:e2:5f:70:61:b3:77:98:09:c8:12:21:ac:25:16:
dd:60:8d:0d:92:76:72:b9:93:f2:cc:66:f8:8e:18:18:aa:2f:
72:d4:23:50:63:dc:c0:71:74:4c:57:3c:cf:8c:9a:78:5d:ab:
35:4f:bb:31:28:38:51:a6:1b:5f:d8:d2:3b:b8:cb:4a:a1:f5:
3a:b5:18:10:e1:4f:3e:8b:1c:10:7e:6a:b8:e0:50:83:a6:5b:
de:d9:73:19:d5:d8:d3:43:de:aa:fa:7e:19:87:c1:7c:39:8f:
a4:3f:b5:12:84:d6:1a:12:2f:28:a7:af:43:fe:b7:ed:b6:b2:
25:35:bf:5d:00:05:ff:2c:57:ed:3e:4a:3d:3f:aa:68:fd:0f:
49:eb:bd:f3:b1:5c:b6:5a:e0:56:75:c8:79:a2:2d:15:d7:ca:
29:a5:5a:d9:72:20:b5:56:6a:03:79:67:d0:05:10:77:e5:1a:
ab:62:0c:55:14:f7:8d:3c:a9:03:ed:7e:58:48:1f:b2:42:54:
01:81:de:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:46:10 2025 by rpki-client