Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/iU9lRUcktSkXBE2a0fsqRp5C3d0.roa
File: iU9lRUcktSkXBE2a0fsqRp5C3d0.roa (raw, json)
Hash identifier: ksySNOzFnlhJt+0ODklE1U5oxlZPyC5EusBNQElVsgI=
Subject key identifier: 89:4F:65:45:47:24:B5:29:17:04:4D:9A:D1:FB:2A:46:9E:42:DD:DD
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 01845E4B9A2E5F8E2E80266B4480D6BC9247
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/iU9lRUcktSkXBE2a0fsqRp5C3d0.roa
Signing time: Wed 09 Nov 2022 21:28:43 +0000
ROA not before: Wed 09 Nov 2022 21:28:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209260
IP address blocks: 31.43.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5e:4b:9a:2e:5f:8e:2e:80:26:6b:44:80:d6:bc:92:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Nov 9 21:28:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=894f65454724b52917044d9ad1fb2a469e42dddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e1:07:4e:cc:45:99:21:77:3c:0a:da:ce:8a:
85:3a:44:35:c3:b4:20:76:38:61:fd:43:1e:0e:c0:
99:c5:0b:b9:3e:14:c3:7c:af:14:68:2b:06:d7:91:
65:b8:0a:87:34:51:b4:68:9f:5f:a8:f8:44:a8:7e:
29:2d:90:a7:cd:6e:57:75:9e:74:6b:22:d2:03:0f:
2d:58:58:dd:b2:90:c4:c7:45:08:c4:5f:70:1d:e1:
2a:d7:d2:e7:f6:4c:ed:ca:eb:fb:65:a7:66:06:c2:
e5:59:cb:1d:5e:6d:0a:05:10:fd:60:d9:10:f5:b7:
87:f9:2a:e9:52:d8:c1:d6:d7:dc:6c:ea:e1:a3:8c:
66:17:be:96:84:f4:85:3e:e7:b1:af:31:d4:32:1a:
e9:a6:22:8a:cb:f5:4e:62:c6:14:a5:73:1f:1d:9c:
e1:5b:26:45:58:ca:44:a1:bc:0b:76:79:7b:89:4e:
10:11:4c:17:31:c5:a5:49:f1:58:a4:be:86:16:b8:
de:57:a8:5c:68:48:da:cc:e1:9b:ac:27:36:88:63:
d8:27:75:32:a7:80:cf:ff:c9:06:ab:fb:24:c8:f7:
9f:5f:98:12:11:e9:41:30:9d:7c:4c:f0:ab:f9:bb:
fc:be:50:3d:8d:b3:d3:1f:e1:82:5b:16:b1:ad:45:
32:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4F:65:45:47:24:B5:29:17:04:4D:9A:D1:FB:2A:46:9E:42:DD:DD
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/iU9lRUcktSkXBE2a0fsqRp5C3d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.165.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:b3:f0:38:a9:98:c4:7b:12:13:4b:81:40:e9:d3:ff:fa:6f:
ae:54:7a:e4:3f:34:d9:b2:c1:56:45:32:5f:12:89:df:ed:b0:
e1:ac:64:87:65:1a:68:4f:25:ad:ab:90:fb:62:30:39:8e:7d:
ea:2c:ef:b9:b1:4f:cf:ca:b7:84:42:d3:22:4f:93:83:7e:27:
f0:d5:34:99:81:5d:19:b3:92:3e:f2:cd:c0:76:f0:5b:c7:c7:
20:8e:ed:97:a7:0b:54:27:4e:98:07:63:d8:f5:c4:9e:d5:df:
a6:07:48:47:47:6c:2a:6e:b9:f5:ba:76:d4:03:b8:aa:9b:c8:
5e:81:53:27:07:77:bd:bc:aa:a2:89:8f:be:26:b8:a9:21:b7:
30:0b:1a:fe:29:54:89:52:ef:10:28:24:49:37:17:a1:06:a0:
50:48:4b:9e:c1:e9:ea:57:23:8a:6c:87:19:c0:96:1f:b9:e0:
b1:b6:19:72:54:ba:72:5f:97:78:c3:fa:ac:cc:eb:e6:47:7d:
e0:cd:62:9e:d0:a5:83:6f:c1:4a:d9:18:1b:64:6e:57:98:9e:
77:34:18:4e:9e:56:b9:54:b4:6b:43:be:16:a9:20:59:1c:98:
9e:e7:87:11:46:1b:10:55:7f:e8:54:7f:d1:06:ad:00:76:0d:
0b:30:ea:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:53 2023 by rpki-client on console-fra.rpki-client.org