Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/xDVPYzvL5OMuS_fv0lQiBxt7lG0.roa
File: xDVPYzvL5OMuS_fv0lQiBxt7lG0.roa (raw, json)
Hash identifier: h47rq3GgNZD0dE+3mOKfMOIbD4/n+/fu+1Cdai+DP70=
Subject key identifier: C4:35:4F:63:3B:CB:E4:E3:2E:4B:F7:EF:D2:54:22:07:1B:7B:94:6D
Certificate issuer: /CN=b61a72bfa4caabcba4ec0484137a516f9f344346
Certificate serial: 0BAE43EB
Authority key identifier: B6:1A:72:BF:A4:CA:AB:CB:A4:EC:04:84:13:7A:51:6F:9F:34:43:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/xDVPYzvL5OMuS_fv0lQiBxt7lG0.roa
Signing time: Sat 01 Jan 2022 09:59:43 +0000
ROA not before: Sat 01 Jan 2022 09:59:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56652
IP address blocks: 31.41.48.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195970027 (0xbae43eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61a72bfa4caabcba4ec0484137a516f9f344346
Validity
Not Before: Jan 1 09:59:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4354f633bcbe4e32e4bf7efd25422071b7b946d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:29:04:f9:8e:93:0e:9e:9a:42:22:dc:3b:81:
91:9f:a4:d7:34:8f:71:cb:3d:7c:3b:7c:88:8e:ee:
32:48:c5:b8:62:fa:97:d9:60:a0:e2:16:0d:57:a7:
67:2a:7c:83:a7:2b:6e:81:28:2c:8a:74:d5:1f:7e:
02:ab:db:d5:5e:f7:52:a8:84:be:9a:c8:47:d7:87:
69:2c:3f:38:fb:bc:4b:47:ea:92:7c:85:aa:9e:64:
b5:96:9e:13:d0:a1:5d:37:87:14:3a:eb:4c:10:3a:
79:f7:a0:b7:51:79:54:67:41:c0:58:30:f7:dc:ee:
35:7d:b3:6d:f7:46:09:f9:0f:e4:c4:c1:23:84:4a:
7a:0e:d8:72:f6:de:69:ce:84:ab:b2:27:77:f1:2f:
63:a5:dc:1a:7a:a5:41:fc:fd:7d:23:77:4f:ef:0d:
5a:4a:ab:e7:a2:27:83:24:27:53:fb:ea:84:3b:47:
d1:f3:65:11:21:ec:98:5c:80:1f:a4:31:1e:70:da:
6e:e6:50:ff:39:4f:2a:fa:4b:25:77:72:d1:80:80:
63:e1:5c:ac:9e:bb:b6:4c:ab:19:ff:30:9f:ed:b6:
2d:e6:26:ee:27:06:f2:29:3d:8a:25:f0:c2:f4:9b:
9a:ee:af:25:4a:39:cd:a1:ad:c4:79:e6:fb:69:30:
6b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:35:4F:63:3B:CB:E4:E3:2E:4B:F7:EF:D2:54:22:07:1B:7B:94:6D
X509v3 Authority Key Identifier:
keyid:B6:1A:72:BF:A4:CA:AB:CB:A4:EC:04:84:13:7A:51:6F:9F:34:43:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/xDVPYzvL5OMuS_fv0lQiBxt7lG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.48.0/21
Signature Algorithm: sha256WithRSAEncryption
a0:9e:f8:16:c4:13:06:48:45:b6:36:48:7a:81:16:f0:1b:bd:
eb:e9:2f:56:3a:68:e6:04:06:14:35:dc:c5:e9:c7:ff:f8:ff:
1f:7e:79:d1:45:b6:b4:72:75:e4:74:58:ce:13:12:df:b6:b1:
d4:16:b9:88:97:7a:1f:dc:f9:f0:cc:5b:a1:63:48:47:a0:ef:
85:19:44:68:a1:87:9b:c5:66:6a:56:27:cd:66:0e:b4:82:31:
55:0d:bd:0f:a5:f9:f9:6d:fe:ba:25:34:cc:a3:4a:25:84:26:
5d:09:d5:80:60:80:bc:30:61:d0:59:aa:e4:12:72:10:91:c0:
e6:4b:87:b4:11:ae:7c:82:f5:bf:d2:5b:cb:d2:0f:f9:8c:5b:
8d:9b:36:1d:b8:93:7c:b4:64:6e:8d:c6:fb:1a:d0:0c:a3:d8:
fc:b9:55:75:45:7a:2b:ea:10:d8:5a:0b:83:74:52:d7:a5:00:
1d:f6:fa:e5:c4:0b:3e:b7:1a:2e:90:9e:b0:8f:f1:f9:3c:c6:
28:95:86:ad:40:89:4d:bf:10:58:77:a2:73:b9:4c:fc:51:41:
71:60:11:87:10:b5:9c:f0:3c:b8:c7:cf:62:cd:60:66:45:2a:
b5:d7:d4:06:14:43:3e:2d:47:2d:7a:35:9a:92:2b:c0:c7:b3:
b3:7a:16:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:00 2024 by rpki-client on console-fra.rpki-client.org