Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/xNpf-rkFNn9eAZWEywH3Kqhhpas.roa
File: xNpf-rkFNn9eAZWEywH3Kqhhpas.roa (raw, json)
Hash identifier: aXhskysm+5A0u/uUP0LSgKyzSE7ruzBadZhMBDaMmps=
Subject key identifier: C4:DA:5F:FA:B9:05:36:7F:5E:01:95:84:CB:01:F7:2A:A8:61:A5:AB
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 0183476B74E5026C2400AC56F95290C0916A
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/xNpf-rkFNn9eAZWEywH3Kqhhpas.roa
Signing time: Fri 16 Sep 2022 17:49:27 +0000
ROA not before: Fri 16 Sep 2022 17:49:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 147293
IP address blocks: 31.14.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:47:6b:74:e5:02:6c:24:00:ac:56:f9:52:90:c0:91:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Sep 16 17:49:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4da5ffab905367f5e019584cb01f72aa861a5ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:db:21:58:ee:c9:4a:32:ae:69:00:78:ff:41:
d4:16:e3:6d:f8:12:17:85:9c:99:cb:74:af:10:87:
43:f8:05:0c:04:e2:95:c7:43:16:aa:6d:ee:a0:17:
46:ed:3b:a1:e4:4c:5f:82:62:80:1a:50:3d:3c:37:
40:a7:68:c3:59:6a:67:01:c4:e1:49:1a:b7:48:03:
6b:4e:78:c5:28:9a:37:55:42:eb:32:82:56:ad:47:
c6:b8:b4:5f:6a:aa:d5:5f:42:ae:49:4a:e4:d5:26:
e7:bb:04:3f:54:7b:23:a1:77:52:7d:bc:61:4d:ec:
d3:c8:da:5e:6c:df:09:7e:12:ff:ee:ac:af:bd:60:
c6:9b:99:67:b2:0e:4a:7e:9c:7b:11:9d:68:a5:01:
6a:e7:1f:49:f4:a3:56:0d:93:87:b7:58:c3:ad:e6:
50:d1:24:65:f0:b1:a3:e4:57:a8:e5:a1:a9:27:19:
05:29:3a:22:b4:9a:4b:59:0d:e7:e4:9c:de:d2:18:
37:3c:0e:09:80:8c:af:17:db:1d:40:fa:0b:0c:63:
aa:4b:4c:d5:45:90:89:0d:2d:81:05:87:92:f8:56:
20:d4:46:77:03:49:a3:dc:76:da:e2:6d:07:1f:84:
02:67:bd:1f:f7:47:40:6c:4c:41:a6:e6:97:7e:4c:
6e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DA:5F:FA:B9:05:36:7F:5E:01:95:84:CB:01:F7:2A:A8:61:A5:AB
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/xNpf-rkFNn9eAZWEywH3Kqhhpas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.38.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:6c:a7:42:75:8f:c6:ab:2d:c2:09:48:c7:78:12:4b:d4:8b:
33:c0:db:41:50:ab:c1:3e:ca:f8:b7:3d:6f:58:09:f4:80:8a:
b2:a4:e0:bc:09:47:84:e6:c4:31:cc:c1:31:d3:58:b5:ad:3d:
a4:d9:40:37:06:27:f3:2b:49:aa:19:c5:c2:12:06:d2:e0:f6:
09:4f:74:b1:e4:94:8a:db:42:ee:99:19:50:45:4d:b8:c0:ea:
98:1a:9e:b9:c1:44:e2:12:dc:c3:1f:8b:ab:f0:44:2a:e5:08:
62:1a:e5:45:9b:49:8b:d7:b5:fe:d0:c2:6d:b3:80:d8:37:06:
b3:34:42:1b:52:3a:8a:a6:94:db:ec:3a:ae:d6:6e:92:4b:a0:
cd:17:bd:3f:2c:70:37:4b:05:85:5e:36:76:39:41:d1:41:5e:
cb:e8:47:64:18:c7:c6:d2:b3:5e:7d:8b:e1:c6:c3:f5:51:86:
b7:51:32:26:9f:3b:d9:46:84:8a:25:3b:dc:81:85:c2:4e:dc:
a4:59:43:75:cf:67:33:80:79:48:76:54:ad:87:2c:0e:24:c3:
3a:d5:8f:d7:8b:23:23:8a:65:2a:98:e1:51:68:55:2b:8a:04:
aa:9a:ab:9f:8a:10:75:24:56:b3:75:c1:8b:29:64:57:4e:b8:
7b:bf:ce:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:47 2023 by rpki-client on console-fra.rpki-client.org