Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/cKpdUzk5guFyJ3l4PAGGDlRTcNI.roa
File: cKpdUzk5guFyJ3l4PAGGDlRTcNI.roa (raw, json)
Hash identifier: tRt+CKjx3v5KT5lO8BxAZITUajX+OoCtsPuUwdHjCtY=
Subject key identifier: 70:AA:5D:53:39:39:82:E1:72:27:79:78:3C:01:86:0E:54:53:70:D2
Certificate issuer: /CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Certificate serial: 01D3853B
Authority key identifier: 8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/cKpdUzk5guFyJ3l4PAGGDlRTcNI.roa
Signing time: Sat 05 Mar 2022 14:55:34 +0000
ROA not before: Sat 05 Mar 2022 14:55:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60025
IP address blocks: 31.40.7.0/24 maxlen: 24
31.40.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30639419 (0x1d3853b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Validity
Not Before: Mar 5 14:55:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70aa5d53393982e1722779783c01860e545370d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ae:0b:e5:21:17:c1:90:a1:73:c5:40:cc:e7:
b9:e7:47:55:c3:cd:8e:05:33:a9:20:fb:9d:1a:7e:
43:18:e4:c9:7f:cc:5c:4e:da:a9:dc:d5:e9:7c:7c:
32:4f:1a:86:f7:3f:6f:86:50:3f:84:33:6b:2b:af:
cc:f3:c1:57:b9:3b:ea:b3:ef:9f:57:d8:f9:e7:62:
2f:c3:02:b0:fc:56:07:f2:35:5a:85:75:c3:35:a6:
89:54:d7:2c:3c:bc:35:27:c9:77:14:ce:35:6f:28:
22:3a:27:12:f7:6c:a4:39:be:34:fd:f9:80:ce:2d:
04:2d:97:84:05:71:da:72:9f:f8:4e:73:85:60:b3:
aa:f0:f0:7f:1e:8e:c6:a8:db:79:f3:15:2d:7f:ce:
8a:88:a3:ed:b4:61:46:01:e8:cb:ae:eb:05:f0:74:
57:9e:5d:84:3d:c3:f3:93:76:c0:d2:a1:13:29:5e:
82:34:ac:11:21:d2:85:4a:8e:fd:b8:7f:9e:3d:25:
28:46:61:83:92:62:29:06:e6:6b:58:4e:d2:01:77:
c5:45:76:44:ba:9b:ee:20:0f:6a:a3:aa:66:bc:87:
a1:4f:8b:4e:f3:c2:9f:3a:88:76:31:5a:e3:07:1d:
d9:0d:c5:15:18:84:8a:39:13:c1:e6:f1:fa:c4:da:
58:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AA:5D:53:39:39:82:E1:72:27:79:78:3C:01:86:0E:54:53:70:D2
X509v3 Authority Key Identifier:
keyid:8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/cKpdUzk5guFyJ3l4PAGGDlRTcNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.6.0/23
Signature Algorithm: sha256WithRSAEncryption
61:c7:2c:82:8f:f3:f4:0e:3a:bb:76:53:71:77:29:07:74:a2:
3e:5e:56:c6:e3:74:55:57:16:68:6a:31:e0:39:25:08:61:b7:
d3:5d:ce:56:1a:77:18:fb:82:85:51:71:ae:a2:a4:50:2a:77:
60:27:fe:c2:55:b8:f6:1a:f8:b5:38:65:61:07:35:b9:f5:fd:
a2:33:38:0f:74:bd:83:58:d4:28:df:e5:63:31:c1:ed:8e:9c:
5b:d6:5d:85:75:98:f4:b6:3d:61:b9:d8:99:b1:e9:ad:c6:5c:
40:b0:f2:90:fd:bc:03:d1:08:7a:b2:51:f9:e0:1f:01:4e:5f:
92:0d:f3:cb:87:c9:9a:50:a4:32:bb:2b:2a:f2:06:eb:e5:87:
78:dd:ca:21:d6:51:80:65:02:18:8f:63:fd:15:44:ae:52:32:
3d:6c:77:88:41:b5:b6:22:9f:e1:48:e1:af:2a:d0:da:80:47:
3c:69:eb:3a:ca:bc:04:c2:11:60:04:69:f5:a6:5d:ad:b8:35:
51:8d:8b:50:53:ea:f1:0b:ff:f0:1d:35:21:ab:86:3e:90:fa:
44:3c:3e:c7:b3:df:73:ee:bb:00:f0:93:92:45:2a:98:6e:0a:
00:8d:12:d3:d4:42:57:f3:78:2e:45:64:d3:69:73:e0:ad:fb:
80:67:4b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:08 2023 by rpki-client on console-ams.rpki-client.org