Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/q0jmVf_8pFwzMLzVxwN5baDH_cM.roa
File: q0jmVf_8pFwzMLzVxwN5baDH_cM.roa (raw, json)
Hash identifier: PJ5Sl6rwE8IZfgyXri1mA2bTyPmWvA+3PcuX32JcyiM=
Subject key identifier: AB:48:E6:55:FF:FC:A4:5C:33:30:BC:D5:C7:03:79:6D:A0:C7:FD:C3
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 08287E97
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/q0jmVf_8pFwzMLzVxwN5baDH_cM.roa
Signing time: Wed 29 Jun 2022 09:07:03 +0000
ROA not before: Wed 29 Jun 2022 09:07:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 31.14.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136871575 (0x8287e97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Jun 29 09:07:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab48e655fffca45c3330bcd5c703796da0c7fdc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:32:4a:1d:8c:14:a9:99:b7:32:49:1d:29:0e:
8b:ea:aa:30:d5:51:0e:8c:68:af:cf:80:0e:2f:0b:
05:69:6b:bf:65:36:48:f2:b3:b7:36:d1:da:2f:1a:
ab:12:ba:84:1d:8d:ab:5a:31:f7:cc:ce:3d:d1:ec:
52:c7:bf:fd:c9:5d:a0:68:fb:95:d0:dc:c3:7e:e7:
46:48:00:73:6e:85:49:26:fd:e4:67:04:cb:a0:11:
d2:5f:d3:fa:cc:26:9d:9a:3e:8a:a7:23:32:82:14:
5b:70:cd:5a:2f:56:2c:87:4c:a7:fb:28:d5:80:21:
94:85:ba:44:0b:cb:e4:c6:12:b7:69:1d:aa:31:ad:
19:76:f7:17:f3:0c:b3:2d:be:3d:0a:ee:c9:79:30:
cd:33:fd:cb:96:91:f6:1d:c7:71:2a:d3:7a:71:4e:
b2:9e:3d:11:ab:0c:fa:af:95:34:ab:5e:27:91:35:
48:1b:75:5c:c5:f3:fc:8a:17:2e:71:1d:a4:a9:3f:
a9:db:b1:32:da:37:0b:18:fb:f2:2b:74:50:9d:e7:
9f:6d:e0:cd:b9:cd:9e:23:5c:19:8f:55:2f:f9:ff:
2f:fc:9f:d5:a9:d1:15:c6:7b:b5:40:d2:39:95:89:
8f:37:dc:44:d8:9d:c5:d3:8d:d9:f3:f9:f8:00:d5:
61:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:48:E6:55:FF:FC:A4:5C:33:30:BC:D5:C7:03:79:6D:A0:C7:FD:C3
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/q0jmVf_8pFwzMLzVxwN5baDH_cM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.37.0/24
Signature Algorithm: sha256WithRSAEncryption
52:b9:24:6c:05:1f:4c:ac:9f:bc:78:1c:da:2d:07:09:fe:30:
71:a7:11:c9:09:3f:e1:84:8c:8a:bb:cb:33:b3:a3:89:fe:93:
02:db:b3:3f:63:96:bc:86:df:91:8e:f4:fa:c4:cd:37:1a:a0:
72:73:40:ad:92:3f:6f:f2:9e:9b:2a:fa:73:a7:ad:60:b1:e9:
1d:af:db:85:51:39:35:7c:2b:b4:00:00:a3:27:81:8c:b8:ee:
93:14:7d:ac:af:34:50:33:d3:2a:e4:f1:22:bb:9e:0f:8c:6f:
a7:64:b7:11:40:80:22:45:3f:fa:e6:43:b5:a6:7b:b4:8d:01:
81:95:29:dd:98:6e:fa:e5:c8:bc:95:cc:92:d5:f6:f7:e9:07:
7a:a0:9a:23:70:84:29:a3:cc:7b:61:96:fb:50:b2:e9:66:77:
39:e5:44:33:53:1a:4d:07:34:ee:03:61:be:4c:84:7d:d7:e0:
55:41:f0:43:48:71:66:d5:25:80:42:dc:7d:d6:34:93:f8:3c:
a1:bf:ae:fb:f1:d9:fb:17:06:fb:ec:e9:2b:c4:cf:96:6b:d2:
a3:c9:ac:42:27:cb:42:cb:bc:f7:82:85:2b:ae:e2:ea:82:b2:
c0:4d:9f:a7:1c:a4:ca:0d:da:34:d4:46:99:82:28:f6:03:fb:
b0:fa:b3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:17 2024 by rpki-client on console-fra.rpki-client.org