Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/J_IQQxzAGu5FVlly3SR8F88eCYs.roa
File: J_IQQxzAGu5FVlly3SR8F88eCYs.roa (raw, json)
Hash identifier: eqKxRk7mUOKTb4GgXHBQtadM9/PimxGCIGHudBNZ9eU=
Subject key identifier: 27:F2:10:43:1C:C0:1A:EE:45:56:59:72:DD:24:7C:17:CF:1E:09:8B
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 019349B5
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/J_IQQxzAGu5FVlly3SR8F88eCYs.roa
Signing time: Wed 29 Jun 2022 13:35:02 +0000
ROA not before: Wed 29 Jun 2022 13:35:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35384
IP address blocks: 31.41.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26429877 (0x19349b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jun 29 13:35:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27f210431cc01aee45565972dd247c17cf1e098b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2d:ca:16:fc:ab:b5:25:41:21:80:8f:2a:38:
a0:03:07:6f:0e:07:f4:43:dc:71:c7:b2:8a:fb:69:
76:7d:6d:66:5b:3a:c5:59:92:c6:aa:4a:4d:dc:a6:
c4:a1:4c:18:db:41:20:ce:9a:f7:b8:7c:18:6e:00:
54:31:05:06:9d:ac:ff:e6:32:3d:30:84:f4:c4:d8:
69:bf:6e:aa:6d:16:a1:eb:a6:7d:ba:8a:08:b3:d1:
d5:a8:a0:c5:26:9f:3c:fa:a9:bc:7a:14:c3:c9:b1:
6a:22:2f:cb:e8:5e:be:90:6b:42:15:d8:b9:d6:22:
94:9e:61:b3:3a:cc:30:5c:d4:e0:17:b3:7f:eb:16:
6c:6b:f3:90:7d:2a:d5:e6:a8:51:b7:5f:78:3f:a2:
b2:4e:88:4e:6c:af:c2:11:26:d5:e9:ba:52:49:e5:
2c:fe:37:f5:36:2e:0c:f3:8d:b0:71:59:c8:26:00:
a8:a7:dd:89:13:01:ee:56:e1:a9:7d:9e:e5:cd:46:
33:90:b4:2d:60:2c:4d:d7:04:9b:e0:f6:4b:97:19:
3e:e4:78:49:45:24:ce:31:ee:5c:5a:37:2b:39:e4:
e3:c8:c8:b0:14:76:2e:ba:da:2f:bb:ac:39:72:31:
ad:8e:3d:b5:16:05:d9:b8:93:99:a1:8f:00:c5:38:
ac:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F2:10:43:1C:C0:1A:EE:45:56:59:72:DD:24:7C:17:CF:1E:09:8B
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/J_IQQxzAGu5FVlly3SR8F88eCYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.34.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:98:5e:d1:df:31:07:bf:e3:07:b2:36:40:13:de:4d:d0:33:
dd:f7:9d:a6:d6:81:81:e3:67:4c:79:b4:1f:ae:a0:74:a3:7b:
60:73:06:a3:dc:57:ac:75:1e:bb:37:45:15:93:8f:34:70:28:
78:29:90:a6:18:4e:fa:81:7f:1b:3c:60:cf:6f:da:37:0a:b7:
5c:61:15:d1:ea:d9:19:38:42:3a:fb:69:9f:d4:d3:23:3d:ad:
20:97:4d:90:f1:3f:e9:10:21:3b:3e:4a:7a:b9:f2:e8:1a:3c:
79:63:fe:31:25:6f:ad:f4:71:d3:66:3e:9d:ad:de:54:67:ee:
c2:ab:33:6f:0c:91:95:94:f7:98:06:3a:06:2f:c9:04:ab:c6:
35:ef:35:cf:be:f8:96:39:b3:1e:e1:d3:f0:97:b0:a1:9d:89:
1d:36:5e:3b:36:37:d4:29:65:b9:26:bf:09:d5:98:4a:c5:c0:
0e:87:79:66:10:e0:93:e2:fb:f3:1d:be:28:ac:ed:e8:a8:5e:
f4:98:96:be:f7:55:6e:60:bf:89:50:e3:ad:b3:36:0a:78:8d:
70:15:7a:d7:9d:e4:b2:92:e2:2b:11:2e:57:62:30:0f:d3:2a:
30:73:82:2f:37:8a:5b:73:f3:0c:72:0a:89:6d:62:fe:f4:da:
21:c1:e2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:54 2025 by rpki-client