Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/YaQy87IRurLhVbRYGDPLxWdZDUs.roa
File: YaQy87IRurLhVbRYGDPLxWdZDUs.roa (raw, json)
Hash identifier: mP2CAXyB15B8CLMMWnoZ1WpYMr3kFKFKSXLUWjon5Ik=
Subject key identifier: 61:A4:32:F3:B2:11:BA:B2:E1:55:B4:58:18:33:CB:C5:67:59:0D:4B
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 01827EA5F69FB8D7D578A56E1E4D6B74482B
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/YaQy87IRurLhVbRYGDPLxWdZDUs.roa
Signing time: Mon 08 Aug 2022 18:09:41 +0000
ROA not before: Mon 08 Aug 2022 18:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 31.43.166.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7e:a5:f6:9f:b8:d7:d5:78:a5:6e:1e:4d:6b:74:48:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Aug 8 18:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=61a432f3b211bab2e155b4581833cbc567590d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:90:a6:00:81:49:7b:be:a9:91:de:2d:bc:e9:
81:10:1b:00:10:8c:ac:a4:c2:a2:14:d5:6f:54:b7:
f6:71:38:81:ab:26:5a:94:04:51:56:de:ca:14:d2:
58:e8:f8:b0:4b:26:12:d7:63:04:bb:bf:65:be:51:
00:e5:64:b1:f9:41:13:4c:6e:98:12:b7:84:92:38:
75:58:d3:bd:e8:eb:d1:dc:7c:8a:6d:6a:cf:0d:a1:
76:e7:c3:49:d6:d2:c0:8c:5a:dc:96:e9:18:95:fd:
e3:30:12:38:f9:4f:4c:07:9a:2e:06:e9:3b:b6:e4:
7e:5e:2b:a5:a2:99:40:8e:a4:50:5a:18:de:78:3c:
ea:01:07:ee:80:36:16:5b:0d:2c:4c:25:2b:66:13:
5e:29:51:17:9a:f5:b0:96:53:b6:a2:75:03:4a:ea:
b1:19:f2:e9:43:cd:cd:01:d2:a6:03:40:c7:77:ac:
2d:c4:be:e2:2f:bd:23:88:8f:42:f5:88:6b:3f:dc:
59:c2:a4:1b:fd:02:39:80:ab:41:84:72:13:b2:7b:
5a:cc:a0:33:50:cc:53:ad:59:b1:f9:b4:ee:da:13:
98:4f:74:ee:c5:31:90:3d:25:66:67:a7:b8:58:ae:
fe:2f:34:a8:21:62:7c:c9:c4:e6:ea:04:d2:b1:5d:
c3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A4:32:F3:B2:11:BA:B2:E1:55:B4:58:18:33:CB:C5:67:59:0D:4B
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/YaQy87IRurLhVbRYGDPLxWdZDUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.166.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:22:2b:f2:ff:a1:2f:87:6a:b4:c4:68:46:2a:68:e9:f0:52:
0b:aa:ce:17:06:69:b1:cf:45:5e:65:f5:ae:8f:d4:51:80:a3:
54:0a:23:41:d5:bb:2e:af:59:ef:ec:45:64:94:73:e3:d0:ac:
5a:50:cc:fa:67:8a:c7:ce:d4:bc:34:10:de:9f:ef:a8:58:74:
99:7c:41:fe:c8:50:1b:e9:8a:f2:84:ef:34:54:94:2b:6b:f1:
ac:79:ac:1a:bb:8d:02:3a:3c:4b:3c:0c:04:d1:67:2e:0c:39:
b3:be:f1:a8:d3:1b:d4:d3:12:35:f9:80:cc:2c:b4:89:c3:15:
62:c5:aa:80:48:16:d6:3f:04:58:f8:5d:af:49:24:d8:49:30:
e0:c8:f9:04:58:7b:3e:8f:6e:a1:9c:b5:c9:96:fe:79:f2:a0:
35:e4:33:b6:7a:2f:ca:87:12:bc:6a:9d:97:3e:66:87:62:f6:
8a:be:d5:12:b5:ba:2b:d1:4a:8f:4b:02:f3:d9:12:7f:56:c4:
85:38:b1:76:0f:0e:2a:4c:b1:36:54:41:5c:70:cd:11:5b:3b:
9a:be:93:6c:24:88:ff:34:59:4d:21:6e:63:cc:4b:28:0a:d8:
c9:08:ca:09:22:e2:26:5d:41:7b:5c:47:19:24:8e:c0:36:4d:
79:7b:87:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:53 2023 by rpki-client on console-fra.rpki-client.org