Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/dOoSuuB5nxHGLgm7pGjMeGXl2Ec.roa
File: dOoSuuB5nxHGLgm7pGjMeGXl2Ec.roa (raw, json)
Hash identifier: EcZWVAV2DTa9R4f+5cA9MwwxuciHXlqkLQy6cRaDqpc=
Subject key identifier: 74:EA:12:BA:E0:79:9F:11:C6:2E:09:BB:A4:68:CC:78:65:E5:D8:47
Certificate issuer: /CN=942588b91da9cca81b49e603a988e2b1eabddc98
Certificate serial: 07E03C12
Authority key identifier: 94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/dOoSuuB5nxHGLgm7pGjMeGXl2Ec.roa
Signing time: Wed 12 Jan 2022 09:36:49 +0000
ROA not before: Wed 12 Jan 2022 09:36:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210541
IP address blocks: 31.42.112.0/21 maxlen: 21
31.42.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132135954 (0x7e03c12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942588b91da9cca81b49e603a988e2b1eabddc98
Validity
Not Before: Jan 12 09:36:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=74ea12bae0799f11c62e09bba468cc7865e5d847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:06:28:2f:ce:eb:d9:4e:b6:d3:68:53:0f:42:
fc:04:14:6d:ce:02:7e:a0:ca:94:96:72:e1:b5:41:
69:07:fa:da:3e:b9:71:45:31:67:1d:ae:31:2b:53:
bf:27:c0:43:e5:e3:b3:97:74:1a:9a:91:ef:e9:34:
be:35:3c:95:cb:88:7c:d7:d2:13:8d:70:5e:f6:ec:
5c:97:d0:b4:9b:dc:95:50:5d:a7:26:45:09:23:c8:
e3:90:f4:9b:5f:8c:6b:39:a6:c5:55:1c:af:cc:9f:
d0:b4:44:13:b6:a4:bd:27:e6:81:9a:6d:68:fd:ce:
74:19:5a:21:5f:08:a0:5d:a5:58:74:bc:31:88:a8:
10:a4:27:fa:42:e7:65:aa:2e:d1:79:db:06:46:c6:
b9:61:d9:41:8e:a0:cf:b1:f6:f1:6e:71:67:2a:36:
56:87:08:20:94:fa:fd:ae:0c:49:f7:9c:75:64:ee:
f8:0e:b5:52:ab:b0:55:3a:b5:4d:58:76:3d:d5:d3:
b4:a5:a5:83:cf:bf:57:95:d8:35:f4:c3:58:5d:61:
a1:fc:74:25:51:de:ee:c8:d8:31:6f:f7:88:78:a1:
a0:b3:98:c7:56:89:16:fa:1b:63:3c:aa:b7:12:ae:
e8:fe:33:09:7b:51:11:a8:7e:38:61:f2:52:55:93:
6d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:EA:12:BA:E0:79:9F:11:C6:2E:09:BB:A4:68:CC:78:65:E5:D8:47
X509v3 Authority Key Identifier:
keyid:94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/dOoSuuB5nxHGLgm7pGjMeGXl2Ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.112.0-31.42.120.255
Signature Algorithm: sha256WithRSAEncryption
21:cf:36:db:cb:ad:61:e7:52:df:c1:5f:6a:f1:b9:bc:c2:61:
ea:8c:3f:4a:f9:5d:cf:01:2a:41:b3:78:0f:a2:05:99:6b:68:
9e:59:18:a5:61:a1:53:4d:ed:af:77:88:a8:33:63:54:29:af:
56:9f:8e:fe:51:6e:96:4a:40:80:ef:79:04:7b:e2:7a:ce:9f:
7d:fd:29:d5:74:d3:0b:37:84:8a:63:d6:d2:4d:61:7e:44:5a:
59:bd:d2:fa:1f:5c:35:7a:ed:47:a4:12:9f:fa:e6:4d:f7:5f:
74:8c:5b:b4:8d:06:df:ef:09:ad:5f:02:be:2b:e9:52:de:26:
f9:4e:3d:48:81:0f:72:62:6d:7f:43:46:df:ae:84:e3:6c:38:
9d:48:66:5e:ea:9d:48:81:70:c7:cd:25:2b:2a:2d:29:f1:ba:
e7:4c:9b:79:2a:10:9e:ea:37:bc:d2:d8:c3:3a:c6:71:b3:79:
e0:dd:85:0a:09:e3:ce:40:19:1f:59:b5:7a:9a:9b:2e:21:71:
f5:56:f7:de:8b:8e:0d:0f:d1:26:5a:7b:b2:32:7a:7d:36:0e:
f3:31:8f:35:e5:b1:9e:3c:b3:da:48:a7:7d:dd:b5:6a:0a:22:
f0:38:ed:91:70:e2:8b:cb:05:bf:cd:42:18:de:39:a9:fb:5d:
2e:64:04:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:22 2024 by rpki-client on console-fra.rpki-client.org