Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/CMJypjRv5DJgH8NooMyvRzvSS7o.roa
File: CMJypjRv5DJgH8NooMyvRzvSS7o.roa (raw, json)
Hash identifier: QtolBRmmFDdXnjnIYxmUJruhlLtfAtk39pDtQtbP+E0=
Subject key identifier: 08:C2:72:A6:34:6F:E4:32:60:1F:C3:68:A0:CC:AF:47:3B:D2:4B:BA
Certificate issuer: /CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Certificate serial: 013324C6
Authority key identifier: 8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/CMJypjRv5DJgH8NooMyvRzvSS7o.roa
Signing time: Sat 01 Jan 2022 06:04:47 +0000
ROA not before: Sat 01 Jan 2022 06:04:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201702
IP address blocks: 31.40.3.0/24 maxlen: 24
31.40.2.0/24 maxlen: 24
31.40.4.0/24 maxlen: 24
31.40.6.0/24 maxlen: 24
31.40.5.0/24 maxlen: 24
31.40.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20128966 (0x13324c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Validity
Not Before: Jan 1 06:04:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08c272a6346fe432601fc368a0ccaf473bd24bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:46:e5:ce:ca:f0:59:d5:1c:37:24:b0:c9:68:
00:53:f0:63:a3:53:b4:4e:ba:a3:4a:8e:01:2f:c3:
00:97:03:18:ed:11:1a:58:0c:e3:e1:13:19:f0:41:
dd:cc:5a:ed:ba:94:56:a3:f7:2c:da:aa:95:16:37:
61:ad:2d:7e:06:05:26:10:49:69:c9:8d:cd:6c:36:
c8:98:49:6f:ec:51:ab:28:36:9e:cc:df:1c:02:aa:
75:62:58:be:94:9a:f7:52:20:b3:79:83:c3:95:76:
09:74:15:77:3a:8b:21:57:06:93:f3:f1:31:1a:83:
2b:32:04:c5:3c:eb:0a:2a:2c:8d:bb:0a:63:e8:1e:
b0:20:79:dd:91:09:6b:b7:ae:49:07:2c:66:05:8c:
ad:17:e8:dc:19:ae:67:73:e5:ab:bb:db:26:a8:64:
51:a0:1d:e0:ac:ed:0f:ae:d0:2c:02:57:07:a2:e5:
5c:ac:6f:b3:54:de:ea:70:a7:39:00:8b:9e:18:41:
28:8f:26:19:02:02:4b:99:26:03:04:25:be:67:c6:
dd:86:79:a1:8c:81:63:81:7b:d1:37:32:68:59:ca:
98:5f:6b:fb:02:67:06:86:94:a2:ac:33:92:bc:6c:
01:e2:83:12:61:da:fc:57:26:77:46:e9:ca:a1:4e:
7b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C2:72:A6:34:6F:E4:32:60:1F:C3:68:A0:CC:AF:47:3B:D2:4B:BA
X509v3 Authority Key Identifier:
keyid:8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/CMJypjRv5DJgH8NooMyvRzvSS7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.2.0-31.40.7.255
Signature Algorithm: sha256WithRSAEncryption
87:dd:69:fe:3a:b0:79:4a:c5:12:95:34:bf:4c:04:c9:33:59:
2f:fb:69:81:9c:8b:8f:c9:0f:44:b8:c8:88:1c:f8:2d:8e:90:
4d:56:4b:c6:2c:25:2f:97:55:47:7c:27:9d:b6:08:99:10:f4:
b8:f6:16:8d:03:ef:5a:cd:cb:cb:23:34:19:1a:e6:eb:d3:a3:
5e:84:46:e7:8f:cd:0c:da:14:d8:92:12:98:2f:5c:31:dc:77:
a1:41:f1:cc:4a:f8:28:c6:24:74:4e:0b:b4:4a:66:71:58:8c:
3c:59:e1:4c:48:15:29:e2:fc:7e:a8:a5:50:31:ce:be:ec:4c:
2f:53:96:fd:41:4f:0b:f8:93:3f:e8:a3:8d:87:7c:d3:0f:f6:
8b:92:81:21:92:b2:46:d7:f9:b1:aa:2e:5c:28:74:6b:93:30:
b2:14:9d:62:b9:34:aa:e8:ec:b7:ba:d3:7a:2c:b0:f4:d9:6c:
5e:0c:cf:06:f4:22:9a:e8:79:a3:7c:df:f8:6a:ee:e2:e2:cd:
ac:f4:83:7d:b6:3a:b4:4a:af:bc:b6:51:39:97:f9:89:46:43:
31:f3:e7:03:b7:b0:45:4b:26:f3:b5:54:9a:9e:1f:23:7f:7b:
65:42:60:ca:2d:81:64:72:6d:a5:91:84:3b:c2:3d:f2:6e:4a:
47:02:bf:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:25 2024 by rpki-client on console-ams.rpki-client.org