Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/_1HRo1hYByvgJQqDv4_zyHNz5vg.roa
File: _1HRo1hYByvgJQqDv4_zyHNz5vg.roa (raw, json)
Hash identifier: J0cStBekQUbH5l46B2JpluRMpKByESU4sbUjJik9Erk=
Subject key identifier: FF:51:D1:A3:58:58:07:2B:E0:25:0A:83:BF:8F:F3:C8:73:73:E6:F8
Certificate issuer: /CN=e3280c6352a0bfbb79d249c8875ed186ecce8a86
Certificate serial: 1B0AE507
Authority key identifier: E3:28:0C:63:52:A0:BF:BB:79:D2:49:C8:87:5E:D1:86:EC:CE:8A:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/_1HRo1hYByvgJQqDv4_zyHNz5vg.roa
Signing time: Sat 01 Jan 2022 01:52:46 +0000
ROA not before: Sat 01 Jan 2022 01:52:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57469
IP address blocks: 159.48.56.0/21 maxlen: 22
31.207.96.0/19 maxlen: 22
185.177.32.0/22 maxlen: 22
159.48.16.0/20 maxlen: 22
159.48.48.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453698823 (0x1b0ae507)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3280c6352a0bfbb79d249c8875ed186ecce8a86
Validity
Not Before: Jan 1 01:52:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff51d1a35858072be0250a83bf8ff3c87373e6f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:db:a7:f2:9f:a4:94:ee:d5:62:d7:92:52:a9:
c8:09:3a:f8:6a:f6:82:99:30:12:56:a0:06:33:63:
6e:af:28:b5:8a:ec:93:f0:ae:16:be:47:70:48:78:
d5:db:a8:53:5e:02:ee:8a:9d:c1:91:d6:73:22:71:
02:9e:fd:ab:41:8a:cf:79:f4:4a:04:7a:bf:9a:ef:
e1:03:a8:0e:4d:d3:8f:b2:97:63:32:37:72:11:d7:
41:47:f6:a4:32:60:28:4b:32:78:2e:c7:09:ea:52:
42:13:13:f5:d6:12:13:8e:ce:ec:11:e3:65:d7:0f:
53:c1:fb:06:34:d4:ef:27:39:3a:6d:f5:07:ff:bf:
73:75:e7:17:5e:ff:ad:3a:1f:d5:12:60:73:6f:69:
fb:d6:5a:9e:df:db:81:1c:8b:77:b6:25:2e:a5:88:
bf:7d:e8:ed:9b:e6:bf:ac:ca:4b:3f:a7:a7:17:55:
12:9b:45:5e:86:53:e3:bc:d2:68:41:88:dc:2b:0e:
9c:9e:28:6a:c3:e6:54:07:d5:d1:a3:73:89:2f:17:
67:3e:0c:08:8d:1b:15:9a:2b:e6:d2:c5:55:89:be:
0c:ff:17:3d:d2:eb:6c:0c:35:63:cd:4d:f5:96:13:
6f:9b:d4:67:f8:a4:d8:a9:0f:b2:b3:8d:39:0e:35:
15:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:51:D1:A3:58:58:07:2B:E0:25:0A:83:BF:8F:F3:C8:73:73:E6:F8
X509v3 Authority Key Identifier:
keyid:E3:28:0C:63:52:A0:BF:BB:79:D2:49:C8:87:5E:D1:86:EC:CE:8A:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/_1HRo1hYByvgJQqDv4_zyHNz5vg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.207.96.0/19
159.48.16.0/20
159.48.48.0/22
159.48.56.0/21
185.177.32.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:da:c8:ca:03:4d:07:23:20:84:e9:13:57:6b:c8:22:11:da:
4f:bd:d6:eb:e1:60:96:1e:6a:7b:b2:37:0b:2d:28:b5:b5:d6:
36:79:59:ad:18:a6:f0:5e:37:59:5b:55:37:1e:fb:26:58:3c:
4d:af:78:b3:ad:ef:a1:7f:3f:30:2c:0c:eb:77:a3:bb:68:c6:
f3:d6:0f:ae:63:0b:6f:b6:d3:c7:18:f8:96:9d:62:c7:93:73:
a3:8a:a8:2f:df:e3:c6:85:99:a7:c2:84:ec:04:72:1f:8c:60:
eb:0c:9c:d4:4d:dc:e3:ab:0e:bc:b9:09:13:07:f1:04:92:f0:
ae:40:21:e1:4a:d5:c8:6e:ae:7a:4c:5f:3c:de:83:80:37:dd:
4c:81:5d:ff:c7:f3:46:fc:45:90:91:11:34:bd:1b:a2:0f:9c:
1b:85:7c:50:c0:d8:2d:69:46:fc:51:e1:ed:57:59:a3:de:6f:
f8:6f:0d:93:ba:8d:56:22:08:b6:b6:93:52:ef:11:03:56:69:
a4:68:7a:2b:cb:35:99:b8:1a:6f:65:74:5f:1f:6e:a5:44:03:
ce:bb:33:45:fb:3c:33:56:fe:c2:38:17:9b:46:c1:0a:18:c9:
13:02:23:98:0b:dd:d8:5d:72:c8:8d:bd:5f:05:93:e3:56:de:
af:20:b5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:00 2023 by rpki-client on console-ams.rpki-client.org