Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/tx-c6m7xoIYhhcP97TRGKuBn3T0.roa
File: tx-c6m7xoIYhhcP97TRGKuBn3T0.roa (raw, json)
Hash identifier: WYaRrDSFUKqZP6kx2su3CKaX7xre2GyydYXnnJIPH5w=
Subject key identifier: B7:1F:9C:EA:6E:F1:A0:86:21:85:C3:FD:ED:34:46:2A:E0:67:DD:3D
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 0184665E4D69C453D1E8589C00254F556382
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/tx-c6m7xoIYhhcP97TRGKuBn3T0.roa
Signing time: Fri 11 Nov 2022 11:06:06 +0000
ROA not before: Fri 11 Nov 2022 11:06:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 31.193.240.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:66:5e:4d:69:c4:53:d1:e8:58:9c:00:25:4f:55:63:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Nov 11 11:06:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b71f9cea6ef1a0862185c3fded34462ae067dd3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c5:f4:b5:b8:23:74:f0:5e:ff:ba:91:bf:e2:
f4:f0:a6:75:3e:d1:29:ea:f7:79:98:5e:d8:f1:f2:
49:07:b3:97:26:6d:25:3c:20:f5:36:a1:16:67:77:
aa:72:a2:df:3c:0d:90:26:b3:4b:18:29:a3:8f:3f:
f6:46:d9:9e:63:8e:52:f3:ba:4f:9d:d6:69:5b:33:
b9:7d:7d:1c:44:4d:ae:90:40:6e:48:06:70:e2:49:
d2:70:7e:a5:d8:31:83:ef:d6:c8:35:07:52:5b:00:
78:79:4f:d7:38:17:dc:05:80:80:ad:54:56:0d:35:
22:b0:16:13:2d:6b:21:ff:7b:62:7d:de:20:16:bc:
46:9d:2c:aa:99:7f:d3:ae:63:52:e7:70:08:04:50:
36:c2:31:20:4b:e6:45:57:3d:f0:fa:18:14:81:2e:
b6:e6:42:ab:ff:db:a0:e9:b2:3d:4b:c3:6c:3a:f1:
f9:2b:15:ea:b5:bd:c1:ce:c0:4c:10:44:8a:5b:c0:
3f:18:ef:4c:4d:6a:ba:af:a0:c8:91:0d:c8:75:d6:
d2:df:37:24:af:c0:49:e7:68:3f:cf:d1:14:19:9d:
ad:4d:92:05:ad:aa:cf:9b:9d:4e:3e:71:b4:9c:6c:
94:7c:30:eb:d6:9c:59:91:97:14:e9:d1:94:6a:39:
35:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1F:9C:EA:6E:F1:A0:86:21:85:C3:FD:ED:34:46:2A:E0:67:DD:3D
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/tx-c6m7xoIYhhcP97TRGKuBn3T0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.240.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:96:1a:00:78:68:bf:34:d6:37:50:0c:d1:89:d6:ad:3a:ba:
a7:44:88:ce:bd:f5:df:42:5e:4d:5f:a2:ba:d9:7f:57:69:c8:
95:e0:fe:eb:3f:f0:07:a8:de:b2:2e:06:66:ca:48:8e:4f:f0:
e7:03:75:a4:b0:38:23:ea:3c:06:f2:f4:6f:cc:c1:16:5f:91:
d0:bb:c8:a5:c5:93:d6:00:bd:26:69:88:f0:c2:d8:b4:36:d9:
98:a8:3c:fe:3c:14:90:4b:90:e2:83:b7:2f:e3:1b:4f:b2:76:
f7:43:ab:63:9f:dd:d0:a7:4d:ec:f4:ed:bf:5c:39:3d:26:09:
8b:72:81:5c:4d:30:9d:90:46:1d:45:d6:94:40:b4:eb:d1:07:
3f:80:44:cd:25:d9:a8:17:86:12:6b:6e:3d:b5:2d:bf:c3:90:
96:a6:7a:b0:5e:5f:b5:dc:c8:9e:7b:f4:8f:94:58:2c:03:90:
01:33:3b:07:59:7d:69:c1:03:dd:05:3d:40:65:6b:1a:bb:56:
8b:50:3f:04:b3:85:25:07:fb:2e:b1:63:95:bd:33:ba:70:69:
b5:de:ef:ca:f6:f5:db:81:66:5a:dc:dd:2c:ff:1e:fb:ab:6c:
84:92:4e:83:d8:58:51:87:63:a1:b6:56:2c:e7:1d:5d:19:bc:
6f:31:1c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:26 2024 by rpki-client on console-ams.rpki-client.org