Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/3UWUIJ5vYX6pqhbjDoghEOEv7jo.roa
File: 3UWUIJ5vYX6pqhbjDoghEOEv7jo.roa (raw, json)
Hash identifier: EBXtxH33RY/YbD1nKeSKW7qqMIUpLHUeK63pDhJkTME=
Subject key identifier: DD:45:94:20:9E:6F:61:7E:A9:AA:16:E3:0E:88:21:10:E1:2F:EE:3A
Certificate issuer: /CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68
Certificate serial: 018269B5025B1D36DC370BC52F219BDA38FD
Authority key identifier: C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/3UWUIJ5vYX6pqhbjDoghEOEv7jo.roa
Signing time: Thu 04 Aug 2022 16:34:06 +0000
ROA not before: Thu 04 Aug 2022 16:34:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197692
IP address blocks: 185.131.0.0/22 maxlen: 24
31.22.120.0/21 maxlen: 24
2a02:6f00::/32 maxlen: 48
2a02:6f00::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:69:b5:02:5b:1d:36:dc:37:0b:c5:2f:21:9b:da:38:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68
Validity
Not Before: Aug 4 16:34:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd4594209e6f617ea9aa16e30e882110e12fee3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c4:90:48:45:28:6f:1b:67:19:ca:47:b1:cb:
68:b8:c9:c8:94:cb:cd:45:10:98:f3:d6:bb:d2:74:
c0:67:6c:0b:f4:63:6f:17:97:05:f1:fd:9f:02:be:
fd:43:99:70:06:71:d6:6a:49:90:ed:c1:9e:35:09:
22:95:85:b1:98:cb:70:c9:92:8e:1d:ce:81:9e:c3:
99:a2:68:71:e2:ba:1f:33:8d:05:c1:5f:67:3b:ce:
92:f0:43:fa:f2:99:11:55:a3:74:25:f0:07:38:3f:
7c:78:ba:5d:1d:7b:9f:b0:05:a3:1d:7a:65:5a:51:
bd:7e:73:ff:e3:0e:4c:df:ff:61:9f:b0:d2:5f:0f:
4d:01:bc:31:5e:31:02:a6:54:bd:d8:3c:01:58:cf:
04:e0:40:78:a2:3c:74:52:43:9f:71:42:db:54:66:
ed:d1:13:6f:c4:1e:e1:92:38:55:5c:9a:cb:b2:46:
3f:b4:05:52:16:04:a5:e4:2c:49:91:6c:c3:b0:23:
37:8c:7b:6f:52:8c:db:d5:3e:ea:47:b9:bd:0f:a7:
d2:76:e4:66:7c:e5:4c:52:8b:a8:eb:e2:d7:cd:2f:
1c:a3:36:58:b8:dd:a8:db:78:89:fe:00:60:a8:b7:
c7:84:d7:2f:27:4e:da:6f:57:b1:50:11:80:ff:f8:
40:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:45:94:20:9E:6F:61:7E:A9:AA:16:E3:0E:88:21:10:E1:2F:EE:3A
X509v3 Authority Key Identifier:
keyid:C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/3UWUIJ5vYX6pqhbjDoghEOEv7jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.120.0/21
185.131.0.0/22
IPv6:
2a02:6f00::/29
Signature Algorithm: sha256WithRSAEncryption
aa:88:4d:31:2a:66:9f:52:8c:c6:db:3e:38:7d:fb:b5:97:80:
08:cd:48:d5:04:f8:4f:5a:8a:f1:3d:5a:52:7a:11:e3:f4:73:
62:19:e8:eb:e1:f0:dc:0f:3f:96:9a:17:39:98:a4:38:0f:11:
c1:89:e7:36:d4:12:99:d4:e3:27:d7:4a:66:1c:da:1c:eb:ff:
0d:f3:0d:f7:78:7f:e4:90:23:52:b5:e1:9c:55:88:9d:34:5e:
15:f5:8f:62:0a:72:c3:e6:de:4f:32:f2:27:5b:b1:de:00:34:
05:00:55:80:14:48:b7:f3:79:7f:a2:22:37:0c:9b:61:3b:0f:
ab:60:72:fb:19:23:5e:26:1e:a3:bf:0c:33:d8:ca:fa:c4:1a:
df:c9:54:50:25:32:90:57:a0:87:1a:54:9d:3f:12:62:a8:f7:
72:40:75:da:af:ea:fc:ea:2b:7c:c9:66:1f:ab:07:1f:8d:76:
b9:92:fb:64:62:40:91:f1:c0:3a:15:b5:83:bb:32:e0:d2:56:
99:e5:98:f0:d9:c8:ce:03:3f:fc:50:86:02:b6:7f:bf:1a:3e:
b6:1f:30:4c:27:00:0d:df:53:ed:9a:99:73:4d:6b:70:b7:35:
cc:91:68:cd:44:98:35:ea:fa:c3:13:1e:92:4d:a3:85:bf:da:
f7:5c:1e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:20 2024 by rpki-client on console-fra.rpki-client.org