Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/1-_Ur-Mtuvpb8W3NFPdW4jy7I6Rc.roa
File: 1-_Ur-Mtuvpb8W3NFPdW4jy7I6Rc.roa (raw, json)
Hash identifier: MaeNPP88Ljr0x4IzILRvHDfm4pC2V10rRYGwxDWy278=
Subject key identifier: FB:F5:2B:F8:CB:6E:BE:96:FC:5B:73:45:3D:D5:B8:8F:2E:C8:E9:17
Certificate issuer: /CN=eb36779b13aec780b0d437f8444ab0f443a05dd0
Certificate serial: 9239D8
Authority key identifier: EB:36:77:9B:13:AE:C7:80:B0:D4:37:F8:44:4A:B0:F4:43:A0:5D:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/1-_Ur-Mtuvpb8W3NFPdW4jy7I6Rc.roa
Signing time: Sat 01 Jan 2022 01:50:39 +0000
ROA not before: Sat 01 Jan 2022 01:50:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204122
IP address blocks: 31.170.96.0/24 maxlen: 24
31.170.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9583064 (0x9239d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb36779b13aec780b0d437f8444ab0f443a05dd0
Validity
Not Before: Jan 1 01:50:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fbf52bf8cb6ebe96fc5b73453dd5b88f2ec8e917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6e:f7:05:6b:be:09:08:c1:80:dc:0e:f8:08:
3b:b9:10:a1:f2:62:96:ed:cb:08:6e:94:49:a8:b0:
e8:55:3f:11:b4:da:be:ed:2b:6c:49:1c:cd:5f:56:
24:5d:2f:75:f8:43:70:e0:fe:f3:9c:37:f3:31:9b:
42:09:1c:b1:e1:3a:6f:e3:45:dd:1e:75:97:06:78:
b6:57:fe:9d:24:3a:2f:39:b3:0f:7e:38:8e:99:fb:
58:10:f5:2b:0a:eb:f2:6b:7f:82:a8:44:fe:32:c8:
76:74:f5:d2:dd:76:c3:65:70:08:69:9f:a5:70:ba:
90:d4:4c:5a:7d:ec:d0:81:ed:7c:91:67:bf:65:d3:
5f:37:8a:a7:33:9a:18:2a:64:7d:55:72:75:de:e7:
40:54:a2:a9:56:96:2c:f5:8f:b1:1f:d2:ee:01:b4:
6b:84:1b:88:33:11:25:14:ad:6e:21:06:d9:e9:90:
d0:f6:2f:09:7e:40:36:19:90:3d:3d:3b:09:e6:04:
6f:0f:14:d4:0a:87:e8:49:9f:ff:f4:58:8a:38:8a:
f3:2a:53:8c:a9:77:a9:64:24:8e:c1:46:bb:18:14:
39:76:4a:d7:21:8f:7f:1a:dc:c9:7f:4f:35:45:f4:
6b:d5:f5:db:69:98:c9:9f:39:a1:60:a8:ea:8d:d6:
73:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F5:2B:F8:CB:6E:BE:96:FC:5B:73:45:3D:D5:B8:8F:2E:C8:E9:17
X509v3 Authority Key Identifier:
keyid:EB:36:77:9B:13:AE:C7:80:B0:D4:37:F8:44:4A:B0:F4:43:A0:5D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/1-_Ur-Mtuvpb8W3NFPdW4jy7I6Rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.96.0/23
Signature Algorithm: sha256WithRSAEncryption
62:b8:80:e3:5c:51:d0:97:69:2e:a7:1b:64:44:e9:af:20:87:
80:84:34:c9:6e:96:85:fa:b2:fc:3a:c8:72:e9:28:72:64:57:
1f:80:b5:a4:42:a8:19:35:f6:8e:7f:b7:89:da:ae:3f:6c:b1:
cc:25:a1:26:b3:b3:84:bb:d3:82:15:ac:df:77:8d:f8:4a:b4:
55:8c:09:62:6d:fe:49:09:23:94:58:b6:d6:1b:36:9d:f0:31:
1d:66:a2:c1:61:30:1e:33:1d:9e:80:29:b6:b7:c4:14:bc:15:
23:f7:45:56:a0:93:f5:c4:e7:e5:64:6a:f9:d4:46:06:40:0b:
f0:06:40:e3:72:13:fa:f2:96:58:95:ee:84:13:f1:5c:17:98:
49:03:e0:a9:b8:7e:9b:c2:18:d2:e6:82:74:a4:f9:86:d9:f1:
36:b8:b5:84:4a:eb:4f:c4:c3:d4:92:c9:43:a5:07:fc:07:d8:
7c:e1:71:b2:a0:6c:a1:e7:e7:0b:6f:36:b5:16:5b:59:b0:5e:
fe:93:14:96:df:9f:73:f1:71:7a:36:ac:ae:d9:c7:e3:da:ec:
52:f9:da:43:af:56:d3:c2:4e:43:0f:d4:2b:2b:a5:62:a3:b1:
69:89:2a:9c:6e:75:bf:a3:ea:2b:d2:ba:90:67:0c:70:ac:55:
a1:df:6c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:01 2025 by rpki-client