Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/mG3yKxJ5F2e8Mc85FwylSrZLzWo.roa
File: mG3yKxJ5F2e8Mc85FwylSrZLzWo.roa (raw, json)
Hash identifier: WrmJZvA4+f9qzvpSUK2YXpf8BQogDo7IIIvRWA5tx90=
Subject key identifier: 98:6D:F2:2B:12:79:17:67:BC:31:CF:39:17:0C:A5:4A:B6:4B:CD:6A
Certificate issuer: /CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Certificate serial: 01828412D102E814EAED2C15D6CBF5E27437
Authority key identifier: BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/mG3yKxJ5F2e8Mc85FwylSrZLzWo.roa
Signing time: Tue 09 Aug 2022 19:26:41 +0000
ROA not before: Tue 09 Aug 2022 19:26:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 193.31.15.0/24 maxlen: 24
193.31.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:84:12:d1:02:e8:14:ea:ed:2c:15:d6:cb:f5:e2:74:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Validity
Not Before: Aug 9 19:26:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=986df22b12791767bc31cf39170ca54ab64bcd6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a6:d1:ff:ae:2a:7c:00:44:97:57:d7:12:81:
f0:35:36:06:7b:27:ba:01:00:4c:fa:68:d8:fb:48:
80:17:55:98:65:40:3e:21:12:8b:88:c8:21:3f:ef:
f2:4e:2c:f5:b2:23:96:70:1c:bf:82:6d:6b:cc:54:
1f:d8:f0:f9:36:c3:1d:8f:86:e9:83:87:ab:15:e4:
36:d9:a5:63:1b:2f:b7:38:e1:c1:fd:40:53:bc:8e:
a0:4d:5b:a1:31:cc:6e:bb:12:e3:e0:33:45:a9:45:
99:7c:db:63:b8:93:35:96:40:de:b7:fe:c3:8e:79:
a6:20:54:ca:27:90:43:f2:7c:32:9a:a7:2f:67:c4:
18:f6:47:dd:ef:bc:51:c6:4f:f5:05:5b:07:e9:d8:
83:4a:35:e1:7f:72:03:3f:ca:96:74:78:35:19:6c:
32:e1:b0:04:a6:c4:19:c2:e4:74:db:b3:5c:05:04:
e3:7d:04:62:ac:61:ac:76:c0:32:04:20:fa:f0:57:
1a:8b:3b:0d:92:6e:c9:67:9d:d4:f8:84:c9:18:ff:
40:a5:1f:9d:93:ce:24:4d:8c:31:64:90:d5:62:82:
52:f5:9b:04:56:2d:61:27:53:fd:46:9d:2b:50:64:
7d:e4:c5:16:23:7f:2d:d8:1d:56:ff:d9:a7:1f:ca:
8f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6D:F2:2B:12:79:17:67:BC:31:CF:39:17:0C:A5:4A:B6:4B:CD:6A
X509v3 Authority Key Identifier:
keyid:BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/mG3yKxJ5F2e8Mc85FwylSrZLzWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.15.0/24
193.31.60.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:c6:cd:64:0a:8b:66:01:13:0f:43:f0:b7:99:92:0f:d4:d1:
a0:00:6c:78:d7:11:70:59:a6:2b:b2:68:f2:fb:c4:bd:93:ca:
26:dc:d3:80:f7:e9:7d:9b:48:5c:00:76:c1:5b:0e:4f:e0:9b:
0a:ae:f0:a5:60:f8:6e:3d:6f:c2:ea:17:3e:f1:e3:01:14:7c:
c0:e5:1b:b1:e7:da:d8:56:52:52:6f:0c:00:01:c3:ce:b9:77:
44:ed:06:a7:2e:bb:dc:76:9c:b2:6b:a5:89:65:aa:ef:89:61:
6f:70:27:1f:6c:39:22:84:74:69:7d:38:c8:ee:88:9d:d4:2b:
a9:3a:08:f7:71:3d:4f:bc:20:ce:be:83:db:a7:9b:4f:8a:39:
72:4e:94:b8:6e:69:de:4a:f1:55:48:de:d8:ca:76:9b:a4:12:
28:8d:73:84:25:6b:f1:40:e3:ae:14:d9:0e:ed:6f:1a:53:9e:
e6:1f:76:41:f1:90:d6:04:82:aa:9b:4f:98:42:17:29:fc:df:
92:3b:c8:a1:62:f6:71:04:15:db:a9:7b:cd:d0:83:a1:79:db:
26:62:50:19:4a:f8:94:26:62:8e:74:b7:c8:87:2f:b2:ab:05:
9a:a7:c2:3e:2d:3a:de:e9:46:18:5d:eb:c9:2e:51:9c:f6:e8:
36:66:d0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:25 2023 by rpki-client on console-ams.rpki-client.org