Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/m4b8h-4fWZUCjsVoUd3Cn34wtm8.roa
File: m4b8h-4fWZUCjsVoUd3Cn34wtm8.roa (raw, json)
Hash identifier: r+ylmZYketF2XRo2jvWLEvxUeouNR9bd45Xx2Hu2T3Y=
Subject key identifier: 9B:86:FC:87:EE:1F:59:95:02:8E:C5:68:51:DD:C2:9F:7E:30:B6:6F
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 43AD9B62
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/m4b8h-4fWZUCjsVoUd3Cn34wtm8.roa
Signing time: Sat 01 Jan 2022 14:01:00 +0000
ROA not before: Sat 01 Jan 2022 14:01:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62416
IP address blocks: 31.7.74.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1135450978 (0x43ad9b62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: Jan 1 14:01:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b86fc87ee1f5995028ec56851ddc29f7e30b66f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2c:7d:c6:86:5e:b9:03:18:f8:55:e6:9f:56:
98:4d:66:09:0b:f9:88:58:d6:ad:fe:d0:44:3c:ee:
5e:ff:de:98:60:63:08:8b:6a:c0:aa:84:78:89:3c:
5b:55:c8:12:13:69:a7:1b:1f:45:c6:66:24:b8:44:
e6:7c:70:01:c0:0f:7e:85:38:98:83:55:65:67:16:
e2:a6:42:a2:ab:e5:a6:1f:3c:31:79:af:7f:73:a8:
29:09:8f:7e:63:ca:2e:03:e1:e1:18:f9:4f:af:48:
98:a3:7d:0c:35:16:99:cc:d6:ee:bd:d6:ef:06:6d:
90:58:44:4e:c6:8f:56:ad:8b:ec:b9:62:bd:ec:0b:
ab:53:c6:1c:70:6d:bc:15:4d:cf:83:ab:45:f0:b4:
69:c9:47:53:55:ad:65:1a:85:a6:98:a6:a0:df:e4:
b6:e1:ba:61:e0:3c:54:fa:fe:4f:8f:b7:87:b9:55:
c4:31:05:f3:3f:bb:40:f5:dc:69:c6:11:c8:80:86:
be:c2:50:5e:42:3b:d0:f9:4a:4d:49:bc:0e:a0:8d:
2a:aa:3b:4f:fc:e5:66:ee:a8:28:28:2b:47:f3:1b:
20:aa:15:98:b2:99:12:e8:97:2c:a8:ea:dc:a0:e6:
77:8f:07:af:94:79:04:4a:f4:38:91:e9:38:47:3f:
bb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:86:FC:87:EE:1F:59:95:02:8E:C5:68:51:DD:C2:9F:7E:30:B6:6F
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/m4b8h-4fWZUCjsVoUd3Cn34wtm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.74.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:22:43:1c:22:36:0f:17:63:0d:4a:57:18:17:16:85:3f:d5:
7d:2e:fa:b1:42:d1:8b:ff:fe:22:dd:e3:d6:0c:ec:cd:79:fe:
1e:df:65:d5:86:d5:f9:26:a4:50:5c:d5:f3:96:f2:00:61:e1:
f7:fd:70:05:29:f6:e0:6a:3d:8e:27:06:58:84:99:fd:fe:f7:
f3:8b:34:4c:a5:73:4d:cc:4d:41:e9:25:c6:94:b3:94:7b:83:
c4:c7:9b:f8:cd:42:97:42:2e:5d:c7:c3:c9:16:6a:f4:ce:dc:
43:5e:c1:4b:78:45:78:5e:36:f0:67:3b:64:c4:93:d6:32:e0:
5a:7b:47:90:02:84:2c:6c:75:64:04:f5:5a:00:60:e9:ec:34:
82:f1:e0:46:59:d6:e3:85:08:aa:29:4b:fb:58:7a:dc:2c:ef:
80:5c:7c:63:1b:48:bf:6c:79:08:be:4e:d3:b7:b9:6c:6d:29:
54:71:60:b9:1d:3d:41:4a:be:b6:73:62:c0:be:79:c4:ac:e3:
45:64:a7:fa:53:37:d8:40:d9:96:01:ba:35:49:33:2f:42:cf:
6f:f9:5f:55:64:b3:fa:22:61:b5:74:80:cd:de:db:c3:7e:d1:
4d:57:53:89:ed:8e:41:91:8c:60:0e:3d:79:0e:55:e8:c1:5e:
f1:75:d8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:30 2025 by rpki-client