Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/ZxATuoU7IMDKBmfofy7j2HO6-CY.roa
File: ZxATuoU7IMDKBmfofy7j2HO6-CY.roa (raw, json)
Hash identifier: PXb+AgGL0ZTHfeaJnwb8fOCwMdGAXinkgf41dAmSDFs=
Subject key identifier: 67:10:13:BA:85:3B:20:C0:CA:06:67:E8:7F:2E:E3:D8:73:BA:F8:26
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 0184BEDE75BE973B1F11F1FAEBA1FDC7825A
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/ZxATuoU7IMDKBmfofy7j2HO6-CY.roa
Signing time: Mon 28 Nov 2022 15:32:40 +0000
ROA not before: Mon 28 Nov 2022 15:32:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 31.43.164.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:be:de:75:be:97:3b:1f:11:f1:fa:eb:a1:fd:c7:82:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Nov 28 15:32:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=671013ba853b20c0ca0667e87f2ee3d873baf826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a5:6d:73:9a:36:b3:69:67:22:ff:35:b5:35:
58:93:9d:d1:95:bb:75:b2:3b:34:77:b4:ba:d9:f5:
b1:ad:88:0d:a0:74:4f:bc:d8:9b:a1:b7:b2:62:08:
1a:95:cf:85:ec:e4:c1:bc:30:e9:00:e6:68:22:64:
68:ca:d1:9b:56:28:79:19:ba:aa:80:78:41:ba:e6:
86:ef:4c:28:10:e0:c4:dc:77:87:2a:a8:9b:bb:f9:
8e:c6:24:9f:4d:ee:e7:1d:0f:c8:c8:9a:58:66:c1:
bc:84:5d:3b:7d:07:ad:e6:68:76:0f:4b:f1:40:65:
de:51:6f:d8:05:ee:d7:6a:4e:90:cf:6e:d2:fe:d7:
68:74:77:8a:c0:b1:fc:6c:3f:b2:85:d1:54:bb:3f:
dd:18:31:20:d9:f0:a5:c6:21:34:bd:c4:bb:e6:6b:
b6:9e:a2:c8:bd:07:46:ba:56:3f:e9:8e:21:07:ba:
30:82:c3:33:c4:9b:7f:c6:19:14:0a:52:c6:4c:20:
4f:b2:9f:dd:ec:2f:e6:cd:3c:5d:32:1d:34:d5:15:
7c:ec:03:44:32:50:57:45:b7:ab:ce:32:ed:d2:a5:
75:a7:47:5f:3f:8e:e9:3e:93:83:ce:e3:cd:f8:d9:
c0:f6:0f:71:cf:9b:53:0a:99:da:a2:46:37:d2:38:
34:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:10:13:BA:85:3B:20:C0:CA:06:67:E8:7F:2E:E3:D8:73:BA:F8:26
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/ZxATuoU7IMDKBmfofy7j2HO6-CY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.164.0/23
Signature Algorithm: sha256WithRSAEncryption
29:e4:db:2f:b2:ff:8e:6c:e6:62:17:30:90:72:90:d2:68:ce:
0f:4c:db:c8:29:7a:30:5c:62:8b:e6:b1:98:59:3e:4f:c0:2a:
16:2b:f3:27:19:dc:d6:20:3c:0d:5b:1c:77:32:25:54:85:52:
a5:84:5e:78:6a:86:d9:6a:b3:a7:4c:82:7d:67:0f:f3:5f:3d:
7f:5f:97:b4:13:52:8e:10:6e:8b:de:d5:9c:2f:63:49:35:fe:
96:f8:3b:19:2e:4a:9e:cc:9d:24:5f:e8:e5:c1:af:0c:40:9d:
3e:7d:fc:df:af:2b:5c:ae:fb:17:73:b3:00:a3:90:95:54:4e:
37:eb:fc:f2:ad:4b:01:37:9d:7f:66:5a:b2:73:a0:76:76:71:
a9:38:be:b9:72:6e:fe:74:d8:25:00:6a:3f:74:73:2d:88:51:
bd:72:44:e8:b3:c6:b6:71:a1:4a:0d:73:6d:f1:7b:8b:e8:a2:
a9:c2:c1:b3:d9:9e:8a:ef:12:7c:6d:ab:37:c9:33:f8:2f:f2:
e9:c0:a6:bf:66:d1:22:7f:66:2f:d0:7c:ee:5f:0b:ad:5d:d7:
d1:dc:ab:2f:71:a0:6d:e4:3a:d8:2f:2f:8e:bc:3a:50:f4:38:
44:06:22:33:53:09:23:94:d9:97:86:3f:c9:da:f2:fa:3c:47:
2b:43:50:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:48 2024 by rpki-client on console-ams.rpki-client.org