Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/ISRLob8njUF4txqAeHzGPL013nY.roa
File: ISRLob8njUF4txqAeHzGPL013nY.roa (raw, json)
Hash identifier: qYe8WFKXaNzN6NEPPg7e8HHyXxvCTuJwA1V8SLX7koY=
Subject key identifier: 21:24:4B:A1:BF:27:8D:41:78:B7:1A:80:78:7C:C6:3C:BD:35:DE:76
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 33091435
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/ISRLob8njUF4txqAeHzGPL013nY.roa
Signing time: Sat 01 Jan 2022 09:58:40 +0000
ROA not before: Sat 01 Jan 2022 09:58:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42041
IP address blocks: 31.128.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 856233013 (0x33091435)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Jan 1 09:58:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21244ba1bf278d4178b71a80787cc63cbd35de76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4b:b2:c0:3e:0b:bb:29:a3:1b:97:ae:c6:50:
13:0c:a2:19:37:90:ec:06:01:98:e7:28:cb:60:ff:
69:fe:64:b7:5c:94:32:12:4c:00:cc:8a:eb:7c:0d:
99:af:22:be:bc:df:41:ce:48:2a:ed:0d:ff:05:b7:
22:5e:b8:12:c8:ea:a0:af:a5:36:d6:73:53:c0:47:
14:23:82:1b:96:4d:e2:cb:ca:e2:1a:99:f1:75:a5:
a8:0f:ad:f4:ac:75:ca:1f:48:15:4f:58:07:35:eb:
6b:bf:94:c3:fe:73:ee:83:87:51:01:2c:33:bb:f4:
4e:38:9a:15:6b:59:f3:cb:7b:c9:21:4d:33:e8:bf:
0c:94:09:bd:45:46:6a:68:cf:36:57:6e:52:41:d0:
62:a5:ed:3c:86:7a:ba:d6:2c:55:9c:c6:a1:55:4a:
ca:ba:20:d2:4e:8e:38:27:cb:fc:f7:e8:5d:41:cc:
b8:da:80:59:08:61:7d:02:7e:a0:32:b0:00:7d:bd:
5e:3a:3b:9d:ce:5d:9d:62:8d:8b:8c:ae:93:8e:67:
3e:d7:82:9d:44:b4:d4:64:55:02:dc:5c:f6:52:3e:
86:82:a0:34:58:da:31:d2:72:fb:d0:90:a9:43:26:
b8:d5:83:08:d2:48:6d:1f:33:50:d9:30:b8:7d:ff:
48:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:24:4B:A1:BF:27:8D:41:78:B7:1A:80:78:7C:C6:3C:BD:35:DE:76
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/ISRLob8njUF4txqAeHzGPL013nY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.128.64.0/24
Signature Algorithm: sha256WithRSAEncryption
29:43:97:f9:96:11:b7:93:1e:a6:73:94:95:cc:c5:51:48:90:
09:9b:1a:11:c5:f8:b7:58:0c:23:f5:88:03:d5:5d:31:48:d4:
ba:b6:c1:af:b1:67:7f:9e:51:d9:b8:d3:27:50:26:3c:7f:7d:
3a:79:99:8a:db:05:70:73:da:f0:f6:a9:2b:52:ad:9b:27:77:
7d:2d:4e:83:82:43:72:bc:68:5c:76:35:25:9d:b9:64:4a:db:
2b:94:bf:74:79:c5:99:1f:c3:4f:29:47:bd:ad:4e:24:ab:ae:
80:cd:2f:44:9d:b1:23:62:c0:fc:c5:93:45:1c:84:51:bc:32:
ea:23:ed:d8:e1:93:c7:43:d4:0b:de:ac:4e:b9:91:3b:d0:90:
46:d7:2d:68:0d:10:f4:7c:dd:91:1d:96:c7:fa:fb:23:66:ef:
2f:d8:c8:f2:a0:f8:b7:97:de:94:4d:f8:ec:59:d8:84:9c:8c:
e3:c1:0b:be:e5:df:66:d8:cb:2e:22:ff:2e:e9:ca:a1:52:b7:
f3:7b:db:ce:28:1d:84:ed:1d:f3:3e:2a:eb:63:4e:28:8e:6a:
69:f0:d2:10:bb:81:38:4b:75:98:b9:7c:eb:1b:d4:12:31:a6:
46:d2:1e:09:bf:6d:b5:91:87:7d:cd:f1:90:d3:23:0d:c5:69:
31:2c:30:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:32 2024 by rpki-client on console-fra.rpki-client.org