Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/VP6HKBqRr7Qcl4BKk2JX9oW1Ldc.roa
File: VP6HKBqRr7Qcl4BKk2JX9oW1Ldc.roa (raw, json)
Hash identifier: zdn33Q8zn1C2eiA6dK6joXQJNuZR2TQALeQSUIcZRkY=
Subject key identifier: 54:FE:87:28:1A:91:AF:B4:1C:97:80:4A:93:62:57:F6:85:B5:2D:D7
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 082F6932
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/VP6HKBqRr7Qcl4BKk2JX9oW1Ldc.roa
Signing time: Thu 30 Jun 2022 06:44:02 +0000
ROA not before: Thu 30 Jun 2022 06:44:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 31.14.37.0/24 maxlen: 24
185.155.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137324850 (0x82f6932)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Jun 30 06:44:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=54fe87281a91afb41c97804a936257f685b52dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:21:c1:65:44:b4:90:75:e2:79:08:c8:47:23:
bb:b3:08:dd:a8:0e:9b:90:7d:00:48:9c:a2:aa:3f:
df:8f:57:a4:48:7d:9b:1c:71:39:97:e0:09:11:50:
81:b7:f9:e7:81:34:e6:73:e1:19:93:bc:ae:df:d0:
70:61:e9:ff:1c:0e:b2:81:ec:ae:b3:75:ca:8f:00:
69:07:6f:bb:72:02:2b:81:4f:d1:4c:2d:8e:ca:19:
93:ef:f7:4b:6f:17:c5:b3:b6:26:aa:53:4e:91:70:
31:0d:7c:c5:db:2b:7f:f3:bf:68:8a:0e:7c:63:8d:
1d:4a:b0:22:b0:15:90:00:6c:55:e0:d8:ad:a9:ea:
b8:d9:1e:0b:33:3b:9b:8e:3e:da:26:19:d9:d1:57:
f4:08:d7:f2:df:3b:ec:a4:97:58:c7:77:fe:8d:66:
d2:27:29:21:15:db:d7:a2:a7:b6:47:15:f6:6d:67:
00:14:2b:07:df:9d:eb:20:34:7b:d9:93:36:12:56:
82:b5:2a:88:75:4e:10:08:d6:fa:02:80:c1:c3:fe:
1e:ed:a1:f1:3d:55:59:ed:a8:e8:e9:9b:dd:3a:4a:
cf:f9:51:ab:47:3d:a8:a3:93:03:8d:49:14:f9:d5:
e9:06:4b:2f:59:aa:64:75:89:af:70:60:1e:4b:a9:
ba:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FE:87:28:1A:91:AF:B4:1C:97:80:4A:93:62:57:F6:85:B5:2D:D7
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/VP6HKBqRr7Qcl4BKk2JX9oW1Ldc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.37.0/24
185.155.55.0/24
Signature Algorithm: sha256WithRSAEncryption
73:b8:07:ca:d2:c2:51:b3:42:22:13:f4:fe:12:f1:07:92:62:
d8:cc:99:87:52:f2:5b:bc:be:16:0e:55:20:32:e8:98:59:0e:
05:dc:b0:bf:94:e5:94:d8:0e:14:02:47:2a:62:b0:56:a8:31:
d2:95:7b:71:07:e1:0a:c3:d5:2d:81:38:ab:57:d5:19:ce:cf:
85:e5:ab:ab:89:a5:2f:b3:1f:15:e9:1f:47:16:40:cd:12:c5:
47:37:b1:a0:08:26:ee:d7:23:17:f6:66:e9:3c:91:0b:2a:83:
dc:e5:33:e1:ac:78:d2:14:a6:d3:63:3a:cb:a8:0e:0b:0f:2b:
1c:99:e7:83:f5:15:12:31:76:28:bd:a0:a2:2f:c1:68:88:00:
97:ce:9b:04:34:f0:ca:df:6e:fd:38:41:ff:d1:aa:70:32:28:
31:30:66:4b:ae:dc:b1:84:b4:77:b3:35:73:9d:2b:4e:c5:0b:
be:90:ea:e2:16:a2:3a:4c:85:61:9f:51:21:1b:a2:c5:7b:da:
89:62:5c:48:29:f2:fe:c3:3b:61:e4:3d:97:51:8b:08:35:e2:
09:6e:fe:c2:11:a8:9d:4d:a8:6b:8b:a8:88:02:10:35:69:a3:
b1:a9:8a:70:08:61:ab:78:6a:4d:c3:f7:57:d8:0b:de:fc:69:
41:60:e8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:04 2024 by rpki-client on console-ams.rpki-client.org