Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/xAeX0F5K_oQ3jdv9EpXd6Oa2GvE.roa
File: xAeX0F5K_oQ3jdv9EpXd6Oa2GvE.roa (raw, json)
Hash identifier: 8OyTK3xqWsLPReKZ76DyZzStHunTaVJyNSSwO6WS+8M=
Subject key identifier: C4:07:97:D0:5E:4A:FE:84:37:8D:DB:FD:12:95:DD:E8:E6:B6:1A:F1
Certificate issuer: /CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Certificate serial: 072BEC99
Authority key identifier: BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/xAeX0F5K_oQ3jdv9EpXd6Oa2GvE.roa
Signing time: Sat 01 Jan 2022 04:56:39 +0000
ROA not before: Sat 01 Jan 2022 04:56:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209605
IP address blocks: 193.31.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120319129 (0x72bec99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Validity
Not Before: Jan 1 04:56:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c40797d05e4afe84378ddbfd1295dde8e6b61af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6e:75:3e:f1:8f:97:a2:9d:ac:a8:90:b0:35:
95:ad:04:ab:60:ae:61:d5:50:ee:39:b1:12:0f:e0:
06:01:ba:04:74:93:ae:5e:a1:bc:92:bc:89:b2:58:
a0:71:af:d9:76:d9:a3:80:78:54:ec:ca:75:02:a7:
72:f5:bf:df:eb:12:97:37:c0:8e:49:06:42:44:4b:
59:0e:c2:1d:6d:f0:11:4e:43:58:d7:bc:24:4a:01:
58:e1:e0:b3:c1:9c:1a:8b:fb:03:1b:c2:57:92:73:
1c:3e:09:b4:fa:1d:54:40:2f:74:b3:40:fa:59:48:
55:6f:55:07:fc:11:a0:f1:eb:04:a9:62:b6:85:cc:
bf:5d:b4:77:11:35:76:ac:7b:1c:36:55:5f:fc:e6:
31:f6:5a:7f:17:b6:33:be:4a:5b:a1:3e:43:e2:ab:
af:b8:14:89:7f:e6:6d:98:13:f6:65:90:e4:f0:9e:
0a:d8:cf:12:88:5f:05:89:9d:e2:20:3f:b3:6a:82:
3f:7c:19:51:0d:5b:82:a3:2e:6f:25:1d:85:2a:f6:
12:4f:8c:ca:0d:d8:a9:fb:b3:f9:df:a7:a1:f0:0e:
b0:c3:8d:8d:34:6c:df:fe:55:d3:48:75:f6:71:b2:
f8:4f:0a:f1:3b:5f:ad:2f:2d:c0:56:0b:c9:59:67:
d6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:07:97:D0:5E:4A:FE:84:37:8D:DB:FD:12:95:DD:E8:E6:B6:1A:F1
X509v3 Authority Key Identifier:
keyid:BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/xAeX0F5K_oQ3jdv9EpXd6Oa2GvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.6.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:b4:fa:f5:d9:0a:03:03:01:ea:17:69:75:c0:db:4b:38:c9:
c7:36:a1:43:9b:79:d6:3d:46:ef:cb:02:4b:3f:27:61:ed:0e:
99:9a:c7:f9:4c:e6:75:1d:7c:0c:62:ef:42:7a:07:31:3e:fa:
5f:71:0f:7a:77:1d:27:77:d5:6c:b5:3d:2c:6a:ba:6a:84:78:
5c:9c:04:9c:89:0d:50:3d:72:00:a7:0a:f5:04:b4:49:3e:7c:
b3:c1:ec:b1:5f:c2:50:7f:da:c0:77:a9:e9:90:08:87:81:f4:
87:7e:46:06:23:3c:eb:95:01:a2:24:fc:21:42:08:2d:ed:cc:
4d:9c:bf:9b:7f:95:f8:d6:1c:73:2f:a3:db:cc:1f:cc:da:e6:
e5:5b:3a:c6:2e:14:76:0a:83:fe:26:43:47:e8:fb:f7:20:bf:
2f:51:83:44:31:0a:0c:fd:58:48:7b:52:a6:d7:dd:b7:51:24:
37:c8:08:ba:a5:ff:49:f4:a2:31:9e:1c:b5:39:ac:cf:b7:dc:
40:98:3c:ab:42:38:fa:7e:65:b9:5d:7f:81:b3:d5:c4:36:63:
37:00:18:46:a8:0e:eb:4c:d4:87:8e:3e:2c:a9:18:c8:3f:9a:
8b:0a:bb:6c:a6:e1:00:aa:a9:11:1d:8f:8d:58:42:a9:d5:9f:
01:ea:0e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:25 2023 by rpki-client on console-ams.rpki-client.org