Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/KcmuSUrKVRvegxgR6r3ihMFBMeI.roa
File: KcmuSUrKVRvegxgR6r3ihMFBMeI.roa (raw, json)
Hash identifier: PNim064qtnC5QA9u6QHj3axgaCHDjNEeAozgRL9yZn0=
Subject key identifier: 29:C9:AE:49:4A:CA:55:1B:DE:83:18:11:EA:BD:E2:84:C1:41:31:E2
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 01830CCF9A371529A7809198DC561DB7821D
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/KcmuSUrKVRvegxgR6r3ihMFBMeI.roa
Signing time: Mon 05 Sep 2022 08:41:15 +0000
ROA not before: Mon 05 Sep 2022 08:41:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 31.14.38.0/24 maxlen: 24
31.14.37.0/24 maxlen: 24
185.155.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0c:cf:9a:37:15:29:a7:80:91:98:dc:56:1d:b7:82:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Sep 5 08:41:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29c9ae494aca551bde831811eabde284c14131e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fa:fb:4b:33:07:93:cd:50:a6:20:2c:ca:b6:
90:97:bf:bb:a7:28:32:b0:70:3c:fa:fd:bd:3a:db:
f9:b6:67:d2:2c:7c:a8:28:42:6a:6e:9b:ad:54:de:
1d:8b:36:40:02:30:2a:dd:a7:83:41:ee:b3:1c:a3:
ab:b9:d2:5f:37:fa:03:fb:c0:d0:9c:7f:18:2a:a5:
6c:19:aa:31:31:a3:06:09:fc:06:28:6a:d9:7c:b8:
db:66:d0:a1:73:c4:f7:54:2c:ca:56:01:df:63:aa:
7b:9f:15:50:ab:0c:eb:81:62:2c:c1:1f:ae:96:49:
c6:94:e5:9d:10:4f:08:f2:9e:48:29:a2:c8:10:fc:
46:28:f2:a7:cf:67:04:d4:57:0e:fe:de:a1:c9:a6:
97:74:3e:a0:67:5c:e5:89:64:c5:79:d9:df:f5:5e:
dc:3f:6d:d7:31:8a:3b:b1:d8:12:b7:a4:eb:98:2f:
20:f1:a7:a7:76:6c:a4:99:37:99:b7:75:df:9b:98:
e6:52:4a:36:5d:b5:58:01:82:fc:79:5d:f2:28:58:
16:33:50:be:43:87:18:20:76:ec:4a:a2:d3:37:97:
a7:ca:d4:f7:25:dd:b5:b2:4a:1c:9a:38:5d:a2:53:
b2:c9:ba:c1:dd:00:d5:f3:fe:9e:82:81:38:e9:ac:
14:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C9:AE:49:4A:CA:55:1B:DE:83:18:11:EA:BD:E2:84:C1:41:31:E2
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/KcmuSUrKVRvegxgR6r3ihMFBMeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.37.0-31.14.38.255
185.155.55.0/24
Signature Algorithm: sha256WithRSAEncryption
72:68:4f:f4:e7:ba:2a:af:fa:e7:97:07:6b:a3:8a:83:c2:87:
66:88:41:14:95:46:78:4a:68:91:98:8d:aa:c5:ac:39:89:fd:
dc:46:3b:1c:b5:8c:7a:8d:2f:3f:6c:5b:4f:59:16:17:9b:e7:
94:9c:ce:26:56:0a:3b:1a:52:23:09:8b:c5:5e:fd:b9:26:53:
91:14:6b:a9:db:af:ca:ae:c0:1e:45:63:fd:aa:57:f7:90:42:
b0:19:26:be:48:66:62:eb:95:e4:e2:0a:0d:7b:b8:f8:3c:b7:
80:90:d9:cb:dc:e7:34:31:ba:f7:e6:8e:7b:1f:32:96:f1:14:
4b:3e:49:66:c9:b7:e6:af:34:72:fc:d6:85:11:af:89:92:68:
0f:58:62:18:e6:9f:46:ec:a4:24:31:37:c1:fa:40:7d:a2:bc:
ad:f3:ed:5c:66:51:67:55:c6:a1:d4:f8:3d:57:17:43:c7:4c:
42:e0:f7:fb:96:05:e6:ba:0e:3a:bb:5e:87:9b:1c:12:b6:aa:
ce:dc:3a:77:2a:f0:8c:94:b6:2d:b5:ad:80:fb:f3:bd:12:6d:
13:90:32:f5:3c:38:95:1f:42:94:97:f5:96:db:59:3b:1f:f7:
31:02:88:19:e9:26:ad:04:27:15:a3:9d:93:52:1c:9e:66:6d:
bb:eb:f2:e2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:47 2023 by rpki-client on console-fra.rpki-client.org