Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/fx3W8VYm9NPXHglMPP8kUxkGLEM.roa
File: fx3W8VYm9NPXHglMPP8kUxkGLEM.roa (raw, json)
Hash identifier: ZRZ37BeY9y9LlFDXtupSldB7uXAMfW5pFXUmKfnzJ2M=
Subject key identifier: 7F:1D:D6:F1:56:26:F4:D3:D7:1E:09:4C:3C:FF:24:53:19:06:2C:43
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 37232EE1
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/fx3W8VYm9NPXHglMPP8kUxkGLEM.roa
Signing time: Sat 01 Jan 2022 03:01:46 +0000
ROA not before: Sat 01 Jan 2022 03:01:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48737
IP address blocks: 31.169.75.0/24 maxlen: 24
31.169.85.0/24 maxlen: 24
31.169.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 925052641 (0x37232ee1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Jan 1 03:01:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f1dd6f15626f4d3d71e094c3cff245319062c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cb:c7:e2:93:9c:7b:8c:0c:7e:e1:d4:6b:28:
34:2e:b8:41:97:1e:a7:31:47:1d:45:39:1d:c5:0a:
a6:87:69:38:16:1b:1c:79:e3:95:c7:2e:01:52:1d:
6b:a5:16:5d:54:2e:3d:79:d8:bc:fa:b3:76:16:18:
5a:87:e7:95:22:77:7e:84:6e:e8:10:8e:f6:35:c1:
28:8f:76:28:8d:85:10:35:70:51:01:47:3a:c5:76:
8c:8a:08:14:81:59:be:a9:cb:c2:11:d1:de:a2:f1:
7b:0d:2f:a9:5c:78:a3:c5:57:37:fb:bd:a7:ca:78:
8d:5e:8f:26:f0:d5:19:7c:1a:ad:2e:5f:05:1e:e9:
2d:8e:f8:a6:13:09:7f:32:4c:c7:9b:9d:f0:45:9e:
39:a3:e3:b0:43:91:8d:75:cd:db:dc:25:2d:fc:8b:
15:74:ef:54:1b:9d:e2:58:f7:18:79:f5:3e:e4:5b:
49:85:66:29:f9:03:1c:9e:7a:00:f5:94:e9:92:2c:
b8:19:ac:b3:0f:99:66:49:a1:03:42:1c:c3:73:d1:
83:88:4e:d9:3e:58:e5:9e:3e:0d:1f:27:e5:5a:6d:
f5:09:ac:9c:40:37:d1:66:18:66:06:3e:b5:31:48:
f5:d5:23:1f:9a:ae:9d:8d:1f:76:26:46:70:98:74:
01:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1D:D6:F1:56:26:F4:D3:D7:1E:09:4C:3C:FF:24:53:19:06:2C:43
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/fx3W8VYm9NPXHglMPP8kUxkGLEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.75.0/24
31.169.85.0/24
31.169.87.0/24
Signature Algorithm: sha256WithRSAEncryption
53:e1:42:a6:e8:7a:bf:dc:50:19:5d:b1:ed:9e:6e:d0:64:dc:
25:cd:37:9f:df:05:75:bd:fc:4f:27:a1:8b:44:da:47:e8:24:
7f:78:fb:fb:ae:7f:00:85:06:8b:e4:88:e5:00:70:47:90:71:
12:38:0b:a4:e5:d3:08:f0:70:e7:8d:cb:31:ff:83:c2:0e:1d:
3f:c8:d6:8f:99:a0:bf:77:be:b7:6b:4f:fc:6e:fc:fb:64:a0:
4d:5a:4c:af:95:a9:d0:f2:5f:88:41:9e:3c:f0:80:32:b6:6f:
8f:7a:99:72:b7:a3:a6:37:7b:a8:39:ec:41:46:79:59:ef:29:
0a:f1:25:1a:80:92:66:7e:df:8e:e7:9d:38:d9:5c:ff:e3:e3:
aa:ec:36:d4:cd:dd:56:09:d2:d1:8f:d4:7a:dc:af:90:d4:d3:
24:4d:94:5e:96:5e:2f:fe:b8:11:83:f7:a5:f8:cc:b2:11:53:
1e:e5:4e:78:c6:7e:49:e2:0c:e3:67:8d:d2:61:30:b5:25:b9:
07:34:4e:0c:c2:db:a9:93:5b:b8:31:65:d2:d0:41:23:ba:15:
03:14:e6:0e:96:b9:f0:73:89:51:40:d5:78:1e:44:05:0c:75:
29:b0:b3:56:ee:b0:b9:74:1d:76:df:41:29:7c:83:df:e1:c2:
3a:85:11:bc
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIENyMu4TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ZDY5ZGE0NGFlMDY3ZmMxYTk4YTVmNmYwNWYxMmU1NDVkMGZjNjJhMB4XDTIyMDEw
MTAzMDE0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2YxZGQ2ZjE1NjI2
ZjRkM2Q3MWUwOTRjM2NmZjI0NTMxOTA2MmM0MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKnLx+KTnHuMDH7h1GsoNC64QZcepzFHHUU5HcUKpodpOBYb
HHnjlccuAVIda6UWXVQuPXnYvPqzdhYYWofnlSJ3foRu6BCO9jXBKI92KI2FEDVw
UQFHOsV2jIoIFIFZvqnLwhHR3qLxew0vqVx4o8VXN/u9p8p4jV6PJvDVGXwarS5f
BR7pLY74phMJfzJMx5ud8EWeOaPjsEORjXXN29wlLfyLFXTvVBud4lj3GHn1PuRb
SYVmKfkDHJ56APWU6ZIsuBmssw+ZZkmhA0Icw3PRg4hO2T5Y5Z4+DR8n5Vpt9Qms
nEA30WYYZgY+tTFI9dUjH5qunY0fdiZGcJh0Af0CAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBR/HdbxVib009ceCUw8/yRTGQYsQzAfBgNVHSMEGDAWgBRtadpErgZ/wamK
X28F8S5UXQ/GKjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JXbmFSSzRHZjhHcGlsOXZCZkV1VkYwUHhpby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDEvYjFhODJhLTQ5MGYtNDNmYi05ODZlLTI2MTcwZGE0YTBiMS8x
L2Z4M1c4VlltOU5QWEhnbE1QUDhrVXhrR0xFTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEv
YjFhODJhLTQ5MGYtNDNmYi05ODZlLTI2MTcwZGE0YTBiMS8xL2JXbmFSSzRHZjhH
cGlsOXZCZkV1VkYwUHhpby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAB+pSwMEAB+pVQMEAB+pVzANBgkq
hkiG9w0BAQsFAAOCAQEAU+FCpuh6v9xQGV2x7Z5u0GTcJc03n98Fdb38Tyehi0Ta
R+gkf3j7+65/AIUGi+SI5QBwR5BxEjgLpOXTCPBw543LMf+Dwg4dP8jWj5mgv3e+
t2tP/G78+2SgTVpMr5Wp0PJfiEGePPCAMrZvj3qZcrejpjd7qDnsQUZ5We8pCvEl
GoCSZn7fjuedONlc/+Pjquw21M3dVgnS0Y/UetyvkNTTJE2UXpZeL/64EYP3pfjM
shFTHuVOeMZ+SeIM42eN0mEwtSW5BzRODMLbqZNbuDFl0tBBI7oVAxTmDpa58HOJ
UUDVeB5EBQx1KbCzVu6wuXQddt9BKXyD3+HCOoURvA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:47 2024 by rpki-client on console-ams.rpki-client.org