Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/Od_30m0iReAnIvO5JkbWJXxDEaA.roa
File: Od_30m0iReAnIvO5JkbWJXxDEaA.roa (raw, json)
Hash identifier: ipJF/224K1XDLM4spoqSpB0H8ItH6iOspaJ0q45M8es=
Subject key identifier: 39:DF:F7:D2:6D:22:45:E0:27:22:F3:B9:26:46:D6:25:7C:43:11:A0
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 01827EA5F5BA9E688DA9B7F805C2BF2BF342
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/Od_30m0iReAnIvO5JkbWJXxDEaA.roa
Signing time: Mon 08 Aug 2022 18:09:41 +0000
ROA not before: Mon 08 Aug 2022 18:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 31.43.166.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7e:a5:f5:ba:9e:68:8d:a9:b7:f8:05:c2:bf:2b:f3:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Aug 8 18:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=39dff7d26d2245e02722f3b92646d6257c4311a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:46:ec:7a:61:92:c1:07:09:99:47:3e:ad:07:
ff:f8:4f:a6:82:7f:ea:3c:54:85:25:ed:f3:b0:67:
fb:e3:0e:f8:fc:7a:10:5b:d7:47:5c:06:bb:59:97:
04:7b:0c:70:14:2f:f5:e7:45:05:31:b5:c0:8a:e4:
16:1c:c4:67:b1:10:df:f2:a1:28:1d:0a:23:b8:17:
4b:3a:24:0a:e1:9a:4a:7d:3d:84:1d:45:28:38:41:
c2:e8:f5:7b:b2:92:ba:4d:84:61:84:97:2e:0d:6d:
79:09:31:89:fb:6b:70:cb:e8:f2:b8:80:df:1d:a3:
01:d9:fa:40:cc:3c:72:d9:db:21:af:53:21:38:67:
41:7b:e8:b6:79:6a:29:a0:77:24:df:18:36:a5:54:
dd:42:9f:18:43:34:24:e6:32:d0:b1:7d:b9:57:18:
d1:99:eb:2b:59:40:2d:c0:ba:fb:8e:d3:dc:8e:a1:
12:a8:57:1d:00:9f:a3:87:ae:0b:15:40:d8:e4:1a:
1e:34:5f:66:92:9e:dd:de:e4:ca:8b:6f:a7:61:6f:
b9:9f:16:4d:57:f5:01:35:8b:0a:fe:a5:99:d9:dd:
8e:9f:0f:c8:db:53:38:ec:e2:fb:34:73:6b:a4:e0:
4e:42:d3:ba:57:4a:e9:2c:55:bc:61:f7:67:86:a2:
25:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DF:F7:D2:6D:22:45:E0:27:22:F3:B9:26:46:D6:25:7C:43:11:A0
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/Od_30m0iReAnIvO5JkbWJXxDEaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.166.0/24
Signature Algorithm: sha256WithRSAEncryption
57:43:41:d9:76:49:52:3b:50:cd:11:d9:2e:0d:0a:49:31:ce:
d4:d2:fd:bb:d5:04:1c:5d:49:58:fa:57:16:6d:66:bd:bf:34:
aa:05:6f:06:d9:8c:b6:a1:d0:9a:d1:7a:50:e0:9d:24:b9:44:
aa:2d:e9:73:98:09:5f:f8:62:33:b2:5a:34:86:ce:a0:f8:ae:
13:80:e7:ef:a5:a0:c1:d8:b2:8e:a7:f0:72:8c:35:c3:99:3e:
0d:c0:1f:ef:ee:d1:b5:2f:5c:e8:d2:9b:a0:23:b4:5a:86:72:
cd:58:c3:33:01:0d:5b:73:b7:7e:95:1f:aa:f3:03:1f:a6:56:
e8:f1:fa:01:52:73:dc:2c:83:72:f9:d5:34:98:f0:cc:3a:1c:
64:08:3f:65:38:1c:ef:4d:8c:7b:93:20:8f:4a:b5:d0:76:1a:
34:18:61:b4:fd:1a:3f:18:e7:b5:56:b2:70:6f:cf:aa:1f:cc:
20:0f:92:34:5b:a9:ca:86:f5:d1:76:b6:a8:7e:f8:cb:8f:27:
6b:4b:03:c8:e7:95:49:6c:d2:43:45:bf:7b:5d:fd:c7:74:d1:
b3:0f:0b:99:ce:f0:36:e3:4f:2d:4e:9c:49:7d:1b:59:f2:36:
aa:a6:7b:93:91:67:46:87:f6:75:89:44:c7:3c:2c:c9:77:20:
fa:58:54:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org