Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/FPTljy6cfNJ2gqI1VzQTY6h0vgU.roa
File: FPTljy6cfNJ2gqI1VzQTY6h0vgU.roa (raw, json)
Hash identifier: hD6iX33xB4lcuIHjZpKTAlKdRC2LXZJjAa1Fihwk1mQ=
Subject key identifier: 14:F4:E5:8F:2E:9C:7C:D2:76:82:A2:35:57:34:13:63:A8:74:BE:05
Certificate issuer: /CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Certificate serial: 01852B7C05667969F8385C0956ABF63F31A3
Authority key identifier: 8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/FPTljy6cfNJ2gqI1VzQTY6h0vgU.roa
Signing time: Mon 19 Dec 2022 17:43:46 +0000
ROA not before: Mon 19 Dec 2022 17:43:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 31.40.7.0/24 maxlen: 24
31.40.5.0/24 maxlen: 24
31.40.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2b:7c:05:66:79:69:f8:38:5c:09:56:ab:f6:3f:31:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Validity
Not Before: Dec 19 17:43:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14f4e58f2e9c7cd27682a23557341363a874be05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a9:1b:2c:db:37:31:cc:e7:11:ac:55:22:04:
cb:3f:f3:e9:69:2e:01:41:c8:a3:66:f6:56:06:22:
a9:e0:23:6f:75:70:53:2b:77:87:f6:11:77:5b:a6:
91:b9:f0:09:ad:da:66:1b:40:d9:6c:b9:4d:15:4f:
68:d8:96:52:68:c2:78:7d:07:7d:ed:51:15:b6:dd:
d5:c3:5f:31:07:3f:52:6b:a3:5f:b2:06:dd:ae:96:
32:79:16:e9:d1:c8:f5:74:16:9e:49:b8:30:9a:66:
51:f5:d5:29:2f:46:0b:fc:9d:dc:3b:95:d1:6f:b4:
22:d1:38:8c:d4:72:8e:de:51:c7:9c:b4:c5:1c:46:
1a:fb:f4:43:93:55:db:39:6d:9c:a7:6c:58:5b:a2:
68:6f:89:fd:36:47:aa:8f:f2:44:b5:41:07:77:df:
a7:75:11:08:95:ad:b7:8e:34:a3:f2:42:d9:86:50:
e1:ce:63:bc:28:ba:71:03:e5:0e:e3:b4:0e:c0:d7:
c8:b6:8d:4f:5d:fa:34:3b:32:dc:8d:1b:7c:a7:f0:
c3:6a:8c:b6:d2:4f:78:9c:0f:50:ea:c5:17:37:98:
50:58:8a:4c:dc:76:6e:f4:ab:e0:00:b5:8e:bf:f6:
f6:23:33:1b:09:2f:63:15:25:89:9a:f0:d8:78:3e:
83:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F4:E5:8F:2E:9C:7C:D2:76:82:A2:35:57:34:13:63:A8:74:BE:05
X509v3 Authority Key Identifier:
keyid:8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/FPTljy6cfNJ2gqI1VzQTY6h0vgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.5.0-31.40.7.255
Signature Algorithm: sha256WithRSAEncryption
23:ed:15:49:85:13:2c:92:49:ab:99:ce:45:19:f6:0c:77:0a:
80:f7:55:44:4b:84:08:2b:ec:4a:59:77:80:0e:d8:2b:89:29:
8f:6b:8c:89:f7:b2:c5:31:a7:84:b5:54:66:19:c2:a3:9c:7a:
a0:6e:d8:ce:30:4c:e0:7b:2b:53:3c:f9:8d:fb:53:58:28:8d:
d7:5a:5b:c8:62:96:f3:54:ad:5d:ca:10:93:7e:02:d5:46:eb:
20:2d:29:1a:0e:06:90:b2:d8:39:91:d6:d3:c9:f8:45:ae:3c:
53:fe:1c:5f:1f:ee:47:e2:11:ed:32:93:42:59:5a:8d:d6:ab:
a4:a5:4f:e6:b2:97:c9:5d:e2:25:b0:13:2a:50:6b:55:d2:c1:
3e:06:a2:7a:2c:09:8a:e0:e8:83:c8:8b:9d:f8:6f:13:04:b0:
a6:24:f1:0e:46:85:26:1f:57:64:41:6d:73:6a:ae:aa:ca:75:
61:09:01:7c:fb:1d:93:75:9f:a1:0b:a8:a4:53:aa:02:ee:16:
46:3c:8c:80:4c:6f:ed:b4:27:15:7f:59:12:ef:29:0e:8a:57:
b3:4e:db:7a:b3:6b:15:fd:b6:73:8d:2e:39:99:5f:5e:64:c0:
08:d0:5a:35:26:a2:eb:e9:cd:78:5d:a7:95:90:32:b7:21:f6:
c5:a8:3f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:25 2024 by rpki-client on console-ams.rpki-client.org