Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/A6HBecWjcVCqEssTF40GHs9QOUA.roa
File: A6HBecWjcVCqEssTF40GHs9QOUA.roa (raw, json)
Hash identifier: W/CULyOrmXlOgc+HZrRshnjPeL9CS7vVaUTrVIHo2nA=
Subject key identifier: 03:A1:C1:79:C5:A3:71:50:AA:12:CB:13:17:8D:06:1E:CF:50:39:40
Certificate issuer: /CN=02930f8c688c04d17433a2b9c7249bc625bce316
Certificate serial: 4488947D
Authority key identifier: 02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/A6HBecWjcVCqEssTF40GHs9QOUA.roa
Signing time: Sat 01 Jan 2022 02:50:51 +0000
ROA not before: Sat 01 Jan 2022 02:50:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57849
IP address blocks: 31.47.197.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1149801597 (0x4488947d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02930f8c688c04d17433a2b9c7249bc625bce316
Validity
Not Before: Jan 1 02:50:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03a1c179c5a37150aa12cb13178d061ecf503940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:49:2e:97:fd:72:36:47:52:d6:9f:40:18:c3:
db:e6:e7:fc:ad:fe:d5:4c:6c:c0:8a:bc:3b:62:d0:
25:c3:6d:68:cd:e5:dc:67:94:0c:3b:ac:65:d4:65:
92:0c:fc:df:71:b7:29:e9:42:45:41:2c:cd:b8:b7:
f9:5e:3b:cc:ff:09:61:72:58:39:b8:f4:84:80:07:
23:b0:12:0d:06:cc:94:df:8d:2f:2d:5c:4e:37:27:
75:df:97:8f:82:38:fa:af:10:f0:fb:fa:c8:38:d0:
b7:a3:9e:c9:1a:ba:e0:c1:ca:76:34:03:4d:f9:04:
95:97:05:cf:96:40:c5:e2:a4:2b:30:63:a6:f9:fd:
8d:67:d7:13:eb:9a:80:b3:00:de:14:8b:22:52:4c:
6a:d3:7b:44:ce:dc:2a:6f:83:54:9a:55:04:6b:5a:
f8:5b:58:ff:da:69:cb:e2:d1:ac:4a:c9:5d:9f:83:
bc:ed:a7:50:b8:e3:e5:d7:2c:d1:05:fa:2d:16:c4:
07:ba:a1:e1:d6:3d:38:d0:35:9b:54:02:c0:d4:d0:
8b:7f:37:59:51:3c:0b:50:99:c8:00:f8:a2:e5:81:
36:fc:47:02:37:d9:d3:25:b2:52:b8:31:db:88:4f:
a4:fc:b1:b2:08:59:81:5a:dc:d2:76:34:4c:9f:b4:
f3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A1:C1:79:C5:A3:71:50:AA:12:CB:13:17:8D:06:1E:CF:50:39:40
X509v3 Authority Key Identifier:
keyid:02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/A6HBecWjcVCqEssTF40GHs9QOUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.47.197.0/24
Signature Algorithm: sha256WithRSAEncryption
80:7d:6e:e0:e0:84:4c:35:e4:9b:14:2a:0a:75:d1:75:52:58:
81:dc:ac:a0:d8:ae:04:54:c8:85:27:40:18:ce:02:b5:5e:c4:
98:00:e6:cf:f1:3a:3e:14:bf:7e:f1:3f:05:a6:c7:c6:56:91:
ca:93:fa:3c:46:c0:a7:f4:8a:f4:9b:60:47:58:4b:13:e2:44:
dd:63:da:06:70:0c:ec:d6:77:9e:df:7e:70:f2:91:d4:ae:d6:
0b:0e:7c:ce:11:7a:17:fb:20:8b:d6:3c:a1:3c:51:b9:61:39:
ce:8d:13:69:18:c4:4b:17:87:6a:90:54:2b:7a:55:03:ac:35:
ea:8e:1b:b9:b7:41:25:c0:a2:f7:cf:15:12:03:fb:32:58:24:
98:97:59:a7:81:df:71:58:f5:42:eb:67:4b:43:f5:e7:b3:fe:
7d:b4:4b:ba:6c:83:90:7e:5a:d7:42:76:cc:1c:10:2c:d2:9d:
c2:1d:0d:52:09:a2:c5:c2:00:32:4b:43:ed:df:bd:f3:e5:f6:
5c:a4:3e:26:a2:fa:46:c9:a5:67:6a:eb:1b:64:d3:73:a9:4b:
bb:8d:59:f1:c7:31:7d:9c:9a:11:80:d1:a9:50:70:83:09:36:
de:6e:52:ed:29:90:cf:c5:a7:35:c0:cc:34:a5:96:41:bf:d0:
a8:3d:3e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:42 2023 by rpki-client on console-fra.rpki-client.org