Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/bbvR8dc45zS59IgF0QI2MlmzyoQ.roa
File: bbvR8dc45zS59IgF0QI2MlmzyoQ.roa (raw, json)
Hash identifier: blzzDC3L/HNK+sMkeG+eZD5hnGGUTD6vsvonOGFV2ko=
Subject key identifier: 6D:BB:D1:F1:D7:38:E7:34:B9:F4:88:05:D1:02:36:32:59:B3:CA:84
Certificate issuer: /CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Certificate serial: 01D9BCA1
Authority key identifier: 8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/bbvR8dc45zS59IgF0QI2MlmzyoQ.roa
Signing time: Sat 05 Mar 2022 20:56:04 +0000
ROA not before: Sat 05 Mar 2022 20:56:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6939
IP address blocks: 31.40.5.0/24 maxlen: 24
31.40.6.0/24 maxlen: 24
31.40.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31046817 (0x1d9bca1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Validity
Not Before: Mar 5 20:56:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6dbbd1f1d738e734b9f48805d102363259b3ca84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f1:f7:43:01:d7:6d:b9:55:86:8a:0a:c1:64:
5f:53:ce:b6:7d:80:6f:31:d3:d6:f2:0b:d1:71:0c:
63:72:d3:80:7e:ed:7b:e8:38:41:49:72:21:5e:29:
01:1b:e5:f2:5c:4a:19:df:0b:18:74:41:1e:dd:75:
64:d0:ee:03:f2:fd:7f:95:c7:a1:69:a5:a2:f4:f7:
7e:8c:34:7e:76:9e:bb:a1:33:6b:08:a4:97:49:4a:
04:f4:5c:c4:6c:c6:ef:b2:de:2d:37:e0:ff:68:d6:
53:14:bd:de:da:7e:bc:d3:55:d9:52:6c:94:d7:ea:
0b:b8:cf:99:c1:5f:92:04:cf:05:81:13:2d:b4:e0:
0a:90:3e:4f:d8:be:66:57:8d:b2:50:af:de:0c:65:
30:8d:17:e8:9a:14:88:25:1f:71:73:89:d9:cf:1e:
31:0c:45:8c:d9:72:b6:e1:0d:ed:6b:ea:4a:fd:11:
8d:ec:e3:4a:ef:51:71:bc:89:fe:79:c7:a2:96:87:
25:9d:98:d0:13:30:f3:ff:ba:ac:e8:21:e7:1a:4f:
b1:65:13:b5:72:c4:37:d2:d8:d9:a2:87:87:ed:af:
14:60:72:97:61:af:ef:50:19:79:d9:e7:d9:cb:83:
d6:ee:90:ff:0a:86:fe:6b:73:e3:91:98:79:f9:8e:
61:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:BB:D1:F1:D7:38:E7:34:B9:F4:88:05:D1:02:36:32:59:B3:CA:84
X509v3 Authority Key Identifier:
keyid:8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/bbvR8dc45zS59IgF0QI2MlmzyoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.5.0-31.40.7.255
Signature Algorithm: sha256WithRSAEncryption
b1:9f:05:0d:e9:9f:8d:49:92:f7:38:43:64:10:5f:3a:b4:8f:
c0:76:7f:71:99:ab:29:c9:85:77:2a:10:b5:0e:52:7f:4c:a2:
ad:3c:4c:25:17:ba:9a:6c:47:c5:88:95:91:fb:29:50:5e:47:
62:4a:9b:e8:4c:80:20:23:cf:c2:f9:ce:a7:fd:3a:19:2b:7c:
40:04:53:17:41:71:a3:4f:f3:c6:34:b3:d9:8d:ff:48:1f:27:
78:9d:09:49:e5:a9:10:54:16:5b:be:be:97:e2:f3:36:e1:e6:
9e:da:65:c2:27:d6:70:39:d1:80:e9:2c:f4:9a:87:98:8e:38:
45:4f:f8:f2:b6:b5:e7:73:26:33:45:af:13:82:9b:2e:aa:7e:
f3:53:69:e7:31:87:0e:cf:2f:ae:ae:f2:c1:2b:e5:e0:a5:53:
51:68:bb:ad:fc:4b:f8:b0:c4:b3:70:22:e5:e2:d3:1f:b0:08:
ee:80:14:c8:b2:80:3d:08:ca:fb:97:98:02:53:ae:b3:28:f8:
93:77:e9:a8:9c:db:6a:5f:41:31:0a:e6:e2:20:56:3c:fb:42:
85:ba:ba:09:fb:59:77:8a:4e:7d:b1:df:67:c2:bd:f4:7a:6c:
d2:6c:0c:3b:1b:00:94:4e:18:e4:17:08:4e:02:27:ad:7b:a2:
d7:bb:1b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:25 2024 by rpki-client on console-ams.rpki-client.org