Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5502d7-38b9-40b0-ae9c-2bf49e9c4676/1/BZAbsSaxX9mVoAARwLXmgnJ7TaA.roa
File: BZAbsSaxX9mVoAARwLXmgnJ7TaA.roa (raw, json)
Hash identifier: NBmkWBnDqt29vw2y9iG+NAMnVCDWKRE507K9APrUMDg=
Subject key identifier: 05:90:1B:B1:26:B1:5F:D9:95:A0:00:11:C0:B5:E6:82:72:7B:4D:A0
Certificate issuer: /CN=9a066b9ac288807082835612afb2465b175bbb88
Certificate serial: F3E4
Authority key identifier: 9A:06:6B:9A:C2:88:80:70:82:83:56:12:AF:B2:46:5B:17:5B:BB:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgZrmsKIgHCCg1YSr7JGWxdbu4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5502d7-38b9-40b0-ae9c-2bf49e9c4676/1/BZAbsSaxX9mVoAARwLXmgnJ7TaA.roa
Signing time: Tue 15 Feb 2022 11:41:41 +0000
ROA not before: Tue 15 Feb 2022 11:41:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48011
IP address blocks: 213.217.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62436 (0xf3e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a066b9ac288807082835612afb2465b175bbb88
Validity
Not Before: Feb 15 11:41:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05901bb126b15fd995a00011c0b5e682727b4da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b5:40:3b:05:3d:4d:3b:56:ea:16:cb:72:04:
17:7d:d0:64:29:c1:59:d7:85:3d:ec:31:c9:63:6b:
1e:1f:a1:7f:29:85:bb:df:e1:dc:e6:11:93:00:3d:
2e:d3:c4:38:83:7e:fb:83:f0:fd:94:de:6f:7b:71:
b5:44:ec:e6:bf:58:07:5b:40:44:e1:ce:c7:63:2c:
a5:dd:c2:2c:fa:68:72:07:d5:87:10:5f:73:3f:77:
e8:ed:35:aa:48:8d:be:cf:c4:9a:2b:e0:b8:b1:58:
69:84:ff:35:6e:9b:98:75:08:63:c9:3e:53:82:e7:
96:ea:8b:5c:a5:39:31:30:36:e4:c7:de:2b:1a:a1:
cc:f2:94:33:a4:3c:13:b6:b4:89:de:26:9c:0f:3d:
41:53:ae:a6:66:4c:ce:8d:e1:a6:c5:6e:4f:07:55:
42:26:de:cd:53:48:38:eb:4a:c8:68:36:0a:c2:4f:
50:43:f4:1a:3d:40:87:26:6d:9f:89:62:f8:d8:2d:
bb:56:08:1c:d4:05:79:fe:a0:c1:80:9a:f2:a1:ad:
49:85:cb:98:f0:a5:b4:39:82:31:0e:02:b4:91:ea:
3b:16:f9:64:52:ee:2e:3e:52:a3:80:06:0d:9f:80:
18:cc:d8:fa:3f:7c:1f:4c:96:7b:24:6f:a6:93:0f:
f8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:90:1B:B1:26:B1:5F:D9:95:A0:00:11:C0:B5:E6:82:72:7B:4D:A0
X509v3 Authority Key Identifier:
keyid:9A:06:6B:9A:C2:88:80:70:82:83:56:12:AF:B2:46:5B:17:5B:BB:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgZrmsKIgHCCg1YSr7JGWxdbu4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5502d7-38b9-40b0-ae9c-2bf49e9c4676/1/BZAbsSaxX9mVoAARwLXmgnJ7TaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5502d7-38b9-40b0-ae9c-2bf49e9c4676/1/mgZrmsKIgHCCg1YSr7JGWxdbu4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.217.31.0/24
Signature Algorithm: sha256WithRSAEncryption
03:16:57:a0:41:f6:cb:7b:86:5a:0c:55:0a:3b:bd:94:a0:12:
51:b9:c4:75:da:63:8f:8b:bd:2d:00:6c:ef:c4:f5:b4:bf:94:
6d:3f:98:4f:50:29:4e:38:18:00:a2:c7:91:1d:ab:1e:f7:5d:
b1:f1:bd:66:01:9c:79:8d:4c:6c:7b:e3:24:a9:52:0b:2e:cb:
5c:6a:93:35:1d:b1:ad:94:af:8b:98:88:29:fd:41:31:92:0c:
be:c3:d6:b9:76:28:28:df:6c:0b:4e:a5:d8:21:18:14:4c:61:
11:ed:83:68:6d:7c:52:b8:15:53:66:f6:4d:a1:74:a3:c1:53:
4c:ac:4f:cc:14:3b:0c:3d:db:17:7c:0f:ba:23:09:1f:77:72:
52:7a:57:14:97:47:ba:59:69:b3:5b:ad:26:f0:c2:91:59:a2:
f6:ef:1c:32:2d:8c:30:12:d8:69:e4:89:70:b0:54:3d:c5:65:
e5:6f:fc:cf:5a:f5:dd:ad:5c:5e:ea:34:be:c2:de:36:21:1a:
61:61:e9:31:93:cf:25:0e:fa:82:4d:89:96:7b:77:e7:d1:38:
f9:83:36:f0:d5:c4:47:3c:25:f1:49:3f:c8:b8:1d:0c:3c:8d:
45:9f:16:44:0f:18:07:d5:5d:44:ed:4b:03:3d:2d:71:cc:a9:
34:3c:1a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:28 2023 by rpki-client on console-ams.rpki-client.org