Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/2buxJqBG3JQp4KBM-kdp-kJEhc0.roa
File: 2buxJqBG3JQp4KBM-kdp-kJEhc0.roa (raw, json)
Hash identifier: WOTUoJRmzx4/C5QV58cCY8mhUrqfiIl8LV+dTDMlh1c=
Subject key identifier: D9:BB:B1:26:A0:46:DC:94:29:E0:A0:4C:FA:47:69:FA:42:44:85:CD
Certificate issuer: /CN=0039f741686da11e79ae7c5e486aa290808cb1b7
Certificate serial: 03754175
Authority key identifier: 00:39:F7:41:68:6D:A1:1E:79:AE:7C:5E:48:6A:A2:90:80:8C:B1:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADn3QWhtoR55rnxeSGqikICMsbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/2buxJqBG3JQp4KBM-kdp-kJEhc0.roa
Signing time: Sat 01 Jan 2022 12:06:59 +0000
ROA not before: Sat 01 Jan 2022 12:06:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207874
IP address blocks: 194.31.12.0/24 maxlen: 24
194.31.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58016117 (0x3754175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0039f741686da11e79ae7c5e486aa290808cb1b7
Validity
Not Before: Jan 1 12:06:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9bbb126a046dc9429e0a04cfa4769fa424485cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:67:06:37:30:04:27:97:30:c0:6a:cb:18:a5:
49:fa:ec:76:1d:be:f1:2c:38:e5:e1:5d:80:aa:cf:
8e:9f:33:03:08:0c:fc:83:e8:21:ab:fe:22:f3:c8:
a7:d1:09:16:a5:4c:35:c8:8c:2b:42:98:83:f4:3a:
30:3e:b3:fb:5b:e7:c0:b2:74:f8:ef:84:47:69:4f:
7e:b6:51:68:e8:35:de:48:f0:18:10:6b:63:03:0f:
f3:ce:1d:44:ca:70:4a:2c:3b:29:c2:a9:00:1f:1c:
e6:a5:1b:e7:12:02:4b:10:33:23:ad:8f:f9:9e:0b:
40:92:a2:f0:64:fe:05:2b:da:e1:66:4b:28:fe:b2:
d4:c1:9e:ea:72:58:c9:19:33:19:cb:43:86:63:15:
f5:35:5e:f3:fe:6b:11:52:83:08:45:92:9c:c8:b0:
b7:a8:27:2c:01:81:c6:de:ab:c0:79:b6:58:12:c7:
14:e2:fd:57:c8:0b:51:e0:a7:71:bf:7a:c2:e7:ca:
87:99:a1:77:6d:c1:93:6d:bb:68:b7:a5:e7:4a:d2:
e7:c1:02:25:e8:54:bc:54:3b:1d:86:32:49:f2:cc:
a1:01:04:11:6b:bf:17:c7:ac:99:f0:e4:78:fe:11:
7d:bb:6e:b0:9f:df:1d:a1:c8:20:8e:8b:89:46:2e:
c1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BB:B1:26:A0:46:DC:94:29:E0:A0:4C:FA:47:69:FA:42:44:85:CD
X509v3 Authority Key Identifier:
keyid:00:39:F7:41:68:6D:A1:1E:79:AE:7C:5E:48:6A:A2:90:80:8C:B1:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADn3QWhtoR55rnxeSGqikICMsbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/2buxJqBG3JQp4KBM-kdp-kJEhc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.12.0/23
Signature Algorithm: sha256WithRSAEncryption
15:73:e7:0f:66:3f:05:0a:a1:de:83:9b:f6:17:45:ab:78:75:
49:d8:cf:89:98:0e:1e:13:ad:67:13:2f:34:6e:84:f0:17:08:
90:24:07:07:48:dc:8e:76:a7:1e:88:bd:44:c6:31:3e:a6:ff:
b7:1e:89:9c:7d:14:83:f1:ab:0a:60:a7:78:fb:32:cf:86:c2:
41:d5:2f:0b:f9:c0:e1:0f:ce:cd:9f:b5:29:9d:bd:d3:6a:20:
b9:3f:89:50:e6:a4:77:fd:66:f7:40:a1:70:37:87:fe:0f:7a:
db:bc:19:72:d4:e7:19:73:f4:22:a6:3b:24:d4:80:14:60:ca:
8f:d4:f2:00:43:b4:4e:ea:0c:8c:50:d8:15:82:09:5e:a9:91:
93:38:c6:df:aa:99:bb:51:5a:86:f5:21:59:45:0a:f7:84:df:
64:3f:ee:f1:8c:5e:03:85:5c:0a:f4:7a:26:d1:db:f4:24:be:
ec:57:50:58:f7:16:c7:ff:84:38:d8:e4:b9:79:3a:34:7d:65:
ed:2e:7f:08:5b:2b:59:f0:b3:60:c7:cf:fb:07:05:c9:6f:d5:
3d:1a:d1:88:98:06:95:0b:03:76:eb:cf:eb:4f:25:31:1e:a3:
60:7f:4c:75:5a:aa:63:64:21:bc:c1:2b:e2:26:0d:ed:cc:ac:
04:66:4a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:51 2023 by rpki-client on console-ams.rpki-client.org