Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/p5KdJeYxB5VIBpr24xYHb5vshyo.roa
File: p5KdJeYxB5VIBpr24xYHb5vshyo.roa (raw, json)
Hash identifier: D86kguytOGzvyaTxy7y+nSd6s1LV8dWxSDwCt/YNpEI=
Subject key identifier: A7:92:9D:25:E6:31:07:95:48:06:9A:F6:E3:16:07:6F:9B:EC:87:2A
Certificate issuer: /CN=3db6e24cfc00d22f4efa39a421dafb7bb1da4b83
Certificate serial: C92E0A
Authority key identifier: 3D:B6:E2:4C:FC:00:D2:2F:4E:FA:39:A4:21:DA:FB:7B:B1:DA:4B:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbbiTPwA0i9O-jmkIdr7e7HaS4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/p5KdJeYxB5VIBpr24xYHb5vshyo.roa
Signing time: Sat 01 Jan 2022 03:57:55 +0000
ROA not before: Sat 01 Jan 2022 03:57:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49067
IP address blocks: 194.31.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13184522 (0xc92e0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db6e24cfc00d22f4efa39a421dafb7bb1da4b83
Validity
Not Before: Jan 1 03:57:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a7929d25e631079548069af6e316076f9bec872a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bb:cb:94:6b:27:2f:e8:a1:e8:bc:e7:ec:d1:
98:58:2f:3e:cf:2c:53:9e:45:a4:f7:d8:ab:65:a2:
8c:3d:3e:74:5c:60:4e:2d:f3:a5:f6:62:61:b1:18:
38:26:bb:5b:4b:41:24:8c:7c:fb:31:2b:1a:2b:00:
b7:5b:0a:b6:5f:75:77:c6:d7:12:ce:b6:af:38:3c:
fc:e1:cf:49:02:f0:c0:ed:e8:5d:97:ae:de:3c:8a:
07:c1:43:7c:26:38:23:89:66:3a:00:01:f7:87:cf:
ee:00:40:31:c0:35:4a:1b:22:23:9d:53:85:f5:64:
5b:18:62:e8:22:5d:95:1f:4e:ad:dd:d4:32:97:83:
f3:94:1b:f4:be:25:37:68:ac:d4:6c:93:58:29:1c:
f2:94:25:2f:07:d0:6c:e2:1f:c2:cc:0c:90:34:48:
d1:fe:b8:72:2a:a8:12:ab:f6:43:8d:88:14:77:35:
9d:7a:4f:f0:cf:89:6f:61:8a:57:70:0d:e4:16:4f:
5b:c2:b4:f2:46:d6:21:9d:dd:ca:b0:ee:d3:91:9f:
33:c8:c9:0b:b4:c3:48:51:3a:0e:45:a4:c9:39:27:
e0:93:a7:8e:2c:7f:6b:ba:a0:d6:8e:3d:e4:d9:b8:
dd:23:af:0a:18:d3:8f:41:ca:c3:77:44:ca:54:79:
f7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:92:9D:25:E6:31:07:95:48:06:9A:F6:E3:16:07:6F:9B:EC:87:2A
X509v3 Authority Key Identifier:
keyid:3D:B6:E2:4C:FC:00:D2:2F:4E:FA:39:A4:21:DA:FB:7B:B1:DA:4B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbbiTPwA0i9O-jmkIdr7e7HaS4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/p5KdJeYxB5VIBpr24xYHb5vshyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.11.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:45:97:1c:45:5a:c9:20:33:32:49:f1:77:4c:c3:46:a7:e8:
0c:95:12:c0:f9:c8:0b:3f:85:3d:42:32:9d:ec:34:25:f0:c4:
34:47:db:ee:d2:f3:a1:b2:59:53:10:07:b2:3b:6e:83:0e:de:
b1:25:b6:50:0f:e0:0c:de:e4:7f:55:fd:48:4f:d5:82:f1:cf:
be:4d:fb:50:3c:bd:bc:48:9b:ba:2a:5a:d1:c5:52:4f:db:9b:
5b:e2:0d:d5:cf:62:37:59:60:f9:88:2f:c1:dc:e2:06:3c:8b:
1c:2e:15:31:54:9d:d4:07:b1:68:cb:38:a7:d8:99:3e:e1:7e:
04:63:dc:6e:f1:5e:f8:1b:5b:79:02:9e:5f:bb:79:95:aa:04:
af:5d:be:d9:20:6f:c5:c3:77:c0:e9:18:04:e7:43:01:0a:0c:
b8:8f:4b:13:e1:4e:af:6a:de:d8:74:8a:d5:b2:f1:68:d8:93:
1d:f5:6b:10:a3:91:7f:ee:1b:70:dc:77:3c:37:d2:9e:35:04:
5a:08:32:ba:ce:ae:1b:d3:a5:d4:92:0b:e2:57:5c:b8:3c:32:
b9:ec:2b:86:e2:b0:21:c5:a8:fd:59:8b:a1:f5:56:af:12:d1:
97:90:c0:df:e4:bc:6a:7f:8b:f7:24:fb:88:6c:cf:85:d1:82:
f4:23:6c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:12 2024 by rpki-client on console-ams.rpki-client.org