Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/D6pKTu1PV9UX8yrEMUm5qt3_FfU.roa
File: D6pKTu1PV9UX8yrEMUm5qt3_FfU.roa (raw, json)
Hash identifier: MC9X+4EBvmxwZ2PaWIdFvGFs/VcaELd8LxZm4fuvLew=
Subject key identifier: 0F:AA:4A:4E:ED:4F:57:D5:17:F3:2A:C4:31:49:B9:AA:DD:FF:15:F5
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 082E92EF
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/D6pKTu1PV9UX8yrEMUm5qt3_FfU.roa
Signing time: Thu 30 Jun 2022 06:44:02 +0000
ROA not before: Thu 30 Jun 2022 06:44:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 31.14.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137269999 (0x82e92ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Jun 30 06:44:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0faa4a4eed4f57d517f32ac43149b9aaddff15f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:97:65:79:6d:03:82:63:53:f8:3c:ce:02:0c:
6b:25:70:78:04:0f:f9:2d:fd:d0:1c:34:f1:b8:e1:
28:4a:17:18:e3:60:90:00:34:8e:8f:8f:77:81:95:
ff:8b:6a:70:bc:8f:ce:81:bd:c6:5e:72:af:b0:7a:
76:9c:02:f3:c5:80:74:18:9a:47:7b:db:12:f2:56:
dd:cf:65:2a:ba:2f:c5:de:d8:4d:ff:17:02:d0:bb:
a8:22:7f:2c:46:34:c7:b2:6c:a7:fc:66:16:e6:97:
96:fc:93:f3:54:3f:b5:7a:7f:e8:31:5a:2b:77:e3:
bc:dc:04:27:b6:cb:b0:fe:a0:55:0f:b2:1f:75:9a:
b1:ab:03:b3:be:af:fc:1b:f5:94:6a:e5:b6:55:6c:
23:6b:b3:e9:56:6a:5b:c2:0b:eb:08:dc:77:e4:ed:
aa:8a:47:19:15:d3:96:8a:d2:2e:c1:1d:0b:3b:5b:
95:80:35:bb:d1:22:ed:3c:ff:81:e8:6d:4d:74:2b:
33:48:62:e5:73:ad:e3:dc:6c:ca:78:97:9d:81:07:
3a:38:25:1d:61:c0:ea:06:c3:47:c2:02:82:00:ef:
f2:37:4a:86:38:c6:92:3e:33:99:65:8a:77:32:db:
94:4b:6b:34:6c:ee:12:44:f2:1c:2c:bc:46:91:f3:
7d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AA:4A:4E:ED:4F:57:D5:17:F3:2A:C4:31:49:B9:AA:DD:FF:15:F5
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/D6pKTu1PV9UX8yrEMUm5qt3_FfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.36.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:9f:30:ad:ff:f3:5c:a5:4a:a6:aa:72:25:22:84:70:93:c7:
e1:57:9b:30:c1:53:7c:f6:09:d3:46:a2:4d:fb:25:e9:fe:31:
e2:aa:3b:77:20:ab:53:0a:4b:0d:f7:ab:98:da:d5:f5:72:ba:
f8:b8:9c:56:93:e2:f7:79:b7:36:67:3b:3a:44:15:7c:df:f7:
2e:7c:11:67:0a:ec:c7:c6:fc:29:c6:f9:5a:ad:17:6c:15:36:
e3:25:98:8c:0a:7c:ef:21:d3:47:eb:4d:df:74:8e:e6:8f:8d:
65:27:ee:1c:d7:a1:fd:34:ae:23:c0:93:c7:1e:40:b4:00:64:
3c:94:79:c5:fa:c5:3b:ad:0f:ec:f1:93:c0:47:be:a3:88:bc:
9b:dd:f1:9c:5d:15:ea:8c:fe:71:8d:a5:fe:80:08:66:06:f4:
9d:98:c8:8a:72:58:8e:ef:76:07:1c:3d:c8:1e:8f:3e:0b:ae:
a5:a5:34:87:a3:a3:a5:f0:7e:8a:2b:56:a3:b1:aa:66:15:08:
67:00:30:62:30:1b:85:47:59:69:42:4c:22:f4:91:ca:78:e5:
b0:de:51:a5:e7:b4:a8:5e:14:55:02:c0:0c:67:81:73:62:0a:
a2:73:cd:5f:17:0a:f2:ec:8f:5e:a4:58:23:15:5d:6b:20:32:
3e:a8:5a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:47 2023 by rpki-client on console-fra.rpki-client.org