Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/c185f6-6274-49da-b2ef-6000cb2d5990/1/KWLaUj5i-z0PKPhR_LVsM6m3RVc.roa
File: KWLaUj5i-z0PKPhR_LVsM6m3RVc.roa (raw, json)
Hash identifier: BmcLSbRPXMLDt68pt74tXO04UnTTCyE5uWxFnPTn3jw=
Subject key identifier: 29:62:DA:52:3E:62:FB:3D:0F:28:F8:51:FC:B5:6C:33:A9:B7:45:57
Certificate issuer: /CN=23f87aa18dda6a5d48af80390b2827808cfef285
Certificate serial: 215A
Authority key identifier: 23:F8:7A:A1:8D:DA:6A:5D:48:AF:80:39:0B:28:27:80:8C:FE:F2:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_h6oY3aal1Ir4A5CygngIz-8oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/c185f6-6274-49da-b2ef-6000cb2d5990/1/KWLaUj5i-z0PKPhR_LVsM6m3RVc.roa
Signing time: Mon 07 Feb 2022 13:59:59 +0000
ROA not before: Mon 07 Feb 2022 13:59:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52000
IP address blocks: 31.24.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8538 (0x215a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f87aa18dda6a5d48af80390b2827808cfef285
Validity
Not Before: Feb 7 13:59:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2962da523e62fb3d0f28f851fcb56c33a9b74557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:19:08:f6:42:88:fa:54:b9:4f:b6:2c:00:7d:
7b:85:ab:19:5e:ff:20:44:88:3c:92:af:42:30:bf:
13:fe:c0:3c:ef:b1:fa:4d:3c:db:70:4a:bd:f9:09:
c0:b4:0e:41:21:52:f2:41:b0:50:de:98:7d:3f:b4:
6b:a9:0f:fa:ca:94:56:09:ac:b8:d8:02:f6:5b:c3:
07:ea:00:81:4c:85:42:16:9c:b2:35:50:c8:9c:be:
ce:9a:73:24:ac:af:bb:b8:05:39:9c:48:aa:fa:d8:
f8:e0:05:f6:ed:8e:7c:79:be:26:ac:f8:1f:4c:ce:
c2:0a:07:27:72:f1:28:4a:a5:47:62:7e:f9:be:47:
29:11:6a:9b:19:2f:e0:4e:0e:1d:24:ce:65:89:2c:
8d:fa:26:b6:a7:10:1a:ef:9a:63:e7:04:88:50:f3:
1a:6c:84:cf:54:d9:eb:03:3e:49:c2:35:43:ff:ae:
1b:12:88:1f:8b:fd:d2:83:66:03:c5:ba:f7:0d:e4:
c9:ea:07:81:8a:38:12:86:3e:f7:5e:f2:86:91:cd:
d3:39:99:23:2b:8c:ec:60:aa:6c:d7:9c:18:16:96:
31:26:d6:46:47:07:75:7a:2e:59:5e:4c:7a:fc:52:
8e:8f:29:a9:c0:28:d3:f5:94:89:4d:ed:bc:73:c5:
b1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:62:DA:52:3E:62:FB:3D:0F:28:F8:51:FC:B5:6C:33:A9:B7:45:57
X509v3 Authority Key Identifier:
keyid:23:F8:7A:A1:8D:DA:6A:5D:48:AF:80:39:0B:28:27:80:8C:FE:F2:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_h6oY3aal1Ir4A5CygngIz-8oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c185f6-6274-49da-b2ef-6000cb2d5990/1/KWLaUj5i-z0PKPhR_LVsM6m3RVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c185f6-6274-49da-b2ef-6000cb2d5990/1/I_h6oY3aal1Ir4A5CygngIz-8oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.87.0/24
Signature Algorithm: sha256WithRSAEncryption
36:f7:65:cf:70:1d:08:29:05:8d:34:09:8d:86:8b:a3:4b:1b:
42:fd:b1:3e:2d:e3:f0:df:f6:a2:77:9c:0c:f2:9e:0d:98:41:
fc:66:97:9f:a3:4c:4e:81:df:4a:cd:63:39:9d:0b:cd:2f:54:
fb:81:69:80:5f:cb:40:34:52:5c:3a:dc:6b:82:93:e0:be:13:
d2:59:6f:3d:2a:b1:5f:f8:9f:4b:4e:93:59:9f:88:f8:96:70:
f7:8a:da:9a:32:9a:cb:7d:85:53:ca:67:4a:98:73:16:84:e5:
0c:fe:3b:a9:ed:9c:80:16:4b:26:87:d9:5a:05:8c:2f:90:ff:
e1:23:4d:9c:70:a4:e3:54:e4:7e:2f:15:f3:9b:ed:e2:75:da:
1c:b6:ac:b3:2d:90:bb:a2:19:6e:a9:d6:15:e7:9c:d1:dc:ff:
6c:c0:e2:91:10:81:16:e3:bc:21:53:b6:4c:39:60:97:74:b3:
33:f4:6a:a1:45:cb:c4:69:42:11:e9:a9:e9:54:15:b1:2c:db:
3f:d9:b0:f8:1b:5c:b1:88:65:0d:a8:81:00:e6:d9:c4:d6:60:
fa:d9:6e:ba:a8:50:4d:77:ba:4d:ba:1f:2c:05:2f:a7:f1:b6:
74:69:eb:89:a7:10:6b:ce:30:be:ed:6d:fa:59:68:1a:50:3f:
85:60:e4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:45 2023 by rpki-client on console-fra.rpki-client.org