Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/Dkjw8fP-56Q9o5hoOPvbJIQrzgs.roa
File: Dkjw8fP-56Q9o5hoOPvbJIQrzgs.roa (raw, json)
Hash identifier: 9CqrSxE+j3Ap+o0D/NsuO2Ni1coyZmFnIfgZjZlEhno=
Subject key identifier: 0E:48:F0:F1:F3:FE:E7:A4:3D:A3:98:68:38:FB:DB:24:84:2B:CE:0B
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 44F0AAC1
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/Dkjw8fP-56Q9o5hoOPvbJIQrzgs.roa
Signing time: Thu 26 May 2022 07:42:13 +0000
ROA not before: Thu 26 May 2022 07:42:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211421
IP address blocks: 31.7.64.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1156623041 (0x44f0aac1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: May 26 07:42:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e48f0f1f3fee7a43da3986838fbdb24842bce0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:38:03:a6:00:d1:e8:92:4e:ee:5c:a3:ad:a8:
26:3e:6f:ec:99:5f:94:c0:71:80:bf:a0:68:ce:e3:
0a:67:c7:55:70:ba:6e:7b:f5:90:00:9e:7a:0f:88:
c4:3f:67:3d:e8:29:64:ab:0b:98:7b:0e:fb:69:50:
de:68:80:39:3b:66:7a:c3:05:2f:92:f7:cd:94:df:
a2:e3:c3:a1:89:db:a7:9a:58:0d:0a:a9:09:28:f4:
f0:b8:17:0f:e1:2f:da:e8:d2:9c:71:91:0f:6b:3b:
43:20:1a:73:e5:12:62:86:e3:ff:54:0f:e1:39:65:
81:5a:93:1b:08:a5:21:0f:1c:e8:04:59:44:86:a2:
74:f5:db:61:a9:17:d0:46:f7:36:7c:f7:e1:49:5b:
c1:a2:1e:b6:aa:82:f1:34:96:4d:dc:48:3e:aa:b6:
ad:7a:9d:df:9c:8a:3a:04:64:66:23:72:56:40:a9:
41:3f:ed:4a:49:c7:d2:0d:5f:25:c9:88:07:ea:bd:
83:7b:17:44:2e:26:c3:1f:56:36:b8:e4:40:10:4f:
26:9f:ae:f4:ab:a8:be:fd:f2:2a:ab:55:3e:e9:29:
6c:64:82:94:67:28:fe:c1:c7:c8:30:25:b4:ff:30:
21:02:44:a7:5e:5e:04:20:83:5b:4a:83:9b:ec:61:
a5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:48:F0:F1:F3:FE:E7:A4:3D:A3:98:68:38:FB:DB:24:84:2B:CE:0B
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/Dkjw8fP-56Q9o5hoOPvbJIQrzgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.64.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:fd:10:33:28:35:55:cd:ab:3b:30:9f:ce:3d:22:7e:19:97:
3a:9e:4d:e1:ab:38:54:01:ba:73:ba:55:9d:c7:5c:30:ad:26:
2b:6a:35:7a:b7:ff:60:19:21:42:51:0b:af:24:ef:ca:c1:09:
33:a9:c3:af:b7:5b:2d:33:43:85:a3:e4:8a:93:e4:5b:3f:c6:
fd:6b:35:01:46:a4:a9:cd:dd:bc:14:c3:90:40:cb:9e:94:03:
e4:2d:56:38:69:11:6d:4f:99:dd:4e:3d:42:04:e6:84:52:82:
29:b2:ca:bb:e2:f7:c1:9e:62:14:f4:43:06:24:3d:60:7e:8b:
ec:92:b0:2c:30:2f:32:a0:05:1f:b7:da:0b:0c:c2:40:c7:c3:
67:b3:c6:be:05:f2:cf:84:7c:9d:18:98:1f:5e:9b:7a:16:bc:
cd:73:40:da:a6:fb:f6:57:32:f4:be:6b:eb:12:04:f2:2d:dd:
e3:1c:8c:25:0e:57:0c:be:01:af:02:2c:8d:85:bf:7c:3f:44:
03:af:01:58:a4:8f:fd:86:02:0b:af:10:bd:fa:91:05:38:d7:
97:6d:d8:5f:60:d8:31:40:c3:ce:87:fc:f1:c3:de:fb:02:f3:
50:42:ac:04:1f:a3:77:52:0d:c1:e8:13:41:50:67:10:f4:e1:
c3:89:22:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:07 2024 by rpki-client on console-fra.rpki-client.org