Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/Y7E1YtjSDZLrFSLj4jM3HJ91EsM.roa
File: Y7E1YtjSDZLrFSLj4jM3HJ91EsM.roa (raw, json)
Hash identifier: hjugfbfPDcwD0Qinbh9qQQd5KyU0vx4WTr+dRCZtJGs=
Subject key identifier: 63:B1:35:62:D8:D2:0D:92:EB:15:22:E3:E2:33:37:1C:9F:75:12:C3
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 018423288D382C7B5382DE3EE99FF6C58788
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/Y7E1YtjSDZLrFSLj4jM3HJ91EsM.roa
Signing time: Sat 29 Oct 2022 09:52:50 +0000
ROA not before: Sat 29 Oct 2022 09:52:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 31.43.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:23:28:8d:38:2c:7b:53:82:de:3e:e9:9f:f6:c5:87:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Oct 29 09:52:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63b13562d8d20d92eb1522e3e233371c9f7512c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:95:bc:67:b4:66:f9:70:ff:65:da:c7:95:c1:
44:67:72:25:da:4a:ef:95:af:a8:be:9a:37:35:a2:
90:f6:c4:41:1a:c9:79:4d:6e:21:8c:20:e2:cd:18:
e7:26:ac:61:b5:00:3d:7e:96:8f:dc:49:4e:99:78:
35:9f:f0:9b:91:8a:7d:09:e7:01:47:17:52:74:64:
39:a1:2b:ff:f4:d0:49:bb:a9:51:fb:78:f2:3f:b2:
2e:b9:b2:91:9a:87:0d:e3:84:56:33:10:fe:a0:bf:
b4:8d:d0:2d:ad:3a:9c:e3:a1:3f:11:a6:f4:1c:5f:
21:a6:37:b1:57:06:17:80:04:75:f6:ba:f8:44:22:
9d:f6:38:d7:a7:63:96:c7:15:2b:fe:79:24:2a:b0:
88:e4:79:e1:46:e5:d8:08:91:bc:97:cb:b5:e3:46:
53:95:4f:63:c0:60:75:4d:61:8f:db:97:14:a4:e7:
8b:aa:46:eb:1f:73:bf:1d:88:9d:55:a4:14:4c:00:
df:1e:24:5e:97:48:a4:31:0d:13:6d:55:9b:c8:fe:
7a:d5:38:93:66:bb:f7:55:d6:0e:37:d7:74:38:ae:
06:aa:4a:76:c6:27:c9:68:7d:81:31:e1:4c:85:2e:
9d:35:f3:c6:92:43:25:5d:30:94:0b:82:71:0e:3c:
30:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B1:35:62:D8:D2:0D:92:EB:15:22:E3:E2:33:37:1C:9F:75:12:C3
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/Y7E1YtjSDZLrFSLj4jM3HJ91EsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.164.0/24
Signature Algorithm: sha256WithRSAEncryption
46:38:40:75:00:77:f5:ac:f7:87:86:59:ec:49:60:61:de:38:
e7:0a:e0:a2:d6:8d:a3:d8:9b:29:9e:a8:05:cf:0a:94:1a:ec:
0e:ad:f4:2c:17:e4:3a:c0:ef:59:b6:1f:91:a0:e6:b1:93:0e:
40:a8:3d:6a:ea:db:28:b7:73:5c:13:54:1b:67:25:43:8f:98:
d5:cb:94:3b:53:68:fd:66:52:59:2a:03:5b:23:03:60:b5:81:
64:09:82:f6:8d:49:e5:a1:ed:35:10:88:65:2c:35:66:0e:99:
94:4c:62:38:93:db:54:45:bb:b3:12:d0:14:0c:cd:40:19:76:
22:cf:99:bb:cb:2a:84:42:ce:a7:1c:13:0c:0e:01:38:9f:58:
7b:e0:18:8d:09:18:23:d8:44:91:55:86:d9:41:d6:e9:09:60:
c8:2b:28:fa:e6:06:55:f9:94:04:dd:9e:1b:b9:6f:c0:0a:81:
50:db:0b:00:a5:19:ca:6e:e1:fd:60:1a:c6:7d:38:a9:e8:f8:
1b:a8:ec:51:48:b3:71:9f:a5:71:a4:f1:e0:18:99:14:ac:50:
46:a7:1e:32:ef:3a:3c:f3:a5:67:5a:ae:a0:69:e9:62:00:a9:
86:4b:34:17:78:16:d9:f0:60:69:44:52:38:66:df:b4:4d:e2:
bf:b1:1c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org