Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/9-xRUbF_v1CX8MK8UKg1H02-XoM.roa
File: 9-xRUbF_v1CX8MK8UKg1H02-XoM.roa (raw, json)
Hash identifier: ULgozV+QxND1HFP2HXwJormkqpgdPy9LLTGXyk517wc=
Subject key identifier: F7:EC:51:51:B1:7F:BF:50:97:F0:C2:BC:50:A8:35:1F:4D:BE:5E:83
Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Certificate serial: 018455E39123136FDEB44B05F0D7D9EF9670
Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/9-xRUbF_v1CX8MK8UKg1H02-XoM.roa
Signing time: Tue 08 Nov 2022 06:18:07 +0000
ROA not before: Tue 08 Nov 2022 06:18:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14178
IP address blocks: 194.31.97.0/24 maxlen: 24
194.31.98.0/24 maxlen: 24
31.210.20.0/24 maxlen: 24
162.12.206.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:55:e3:91:23:13:6f:de:b4:4b:05:f0:d7:d9:ef:96:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Validity
Not Before: Nov 8 06:18:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f7ec5151b17fbf5097f0c2bc50a8351f4dbe5e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2e:47:2d:cc:54:d3:13:05:a3:b7:98:f9:bb:
67:2f:9c:e3:b5:6a:1c:7e:4e:47:b4:6f:5b:f6:da:
a7:24:59:cf:5b:eb:63:39:a8:1c:31:e3:1c:1f:50:
64:cf:04:1e:9d:b6:bc:27:0c:06:fe:c3:5a:b0:30:
ed:0b:a8:9b:73:61:79:dd:7d:06:3a:78:d8:8f:cf:
2b:2c:4c:be:fd:c2:25:07:31:2e:d6:8d:ce:fd:49:
4d:b6:10:c5:90:2d:17:fb:ab:c5:d4:c7:12:f8:c1:
63:29:88:85:d4:65:52:71:1c:3d:07:77:fb:cb:84:
17:0d:3d:d3:53:55:68:82:9b:6f:7a:50:c1:03:1f:
14:10:36:6b:28:4c:5f:73:ae:dc:fb:d9:7c:fa:db:
7d:17:b8:e3:a0:9c:3e:aa:a9:26:09:81:49:c5:b8:
3d:eb:52:31:f8:58:a7:37:27:0f:57:9b:75:b3:ef:
9e:65:b9:99:f5:b8:35:62:9c:1a:f5:8e:80:6c:12:
de:d3:0f:13:c9:d1:47:e3:a6:f3:7a:85:a3:35:ed:
5e:f7:7b:88:35:28:2c:eb:55:b4:23:92:d7:5f:5b:
75:19:c4:7c:d9:2c:91:5f:4d:2f:99:17:08:0e:db:
b7:84:24:37:6d:bf:8c:46:3f:a6:cd:40:ea:95:b8:
29:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EC:51:51:B1:7F:BF:50:97:F0:C2:BC:50:A8:35:1F:4D:BE:5E:83
X509v3 Authority Key Identifier:
keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/9-xRUbF_v1CX8MK8UKg1H02-XoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.20.0/24
162.12.206.0/23
194.31.97.0-194.31.98.255
Signature Algorithm: sha256WithRSAEncryption
97:bf:2e:68:f3:4b:e9:b9:44:5e:88:d5:b0:93:1a:0d:d1:28:
6d:ff:26:80:db:d9:a0:3c:0d:b7:a4:a1:81:52:b9:17:0a:81:
6e:81:69:d2:4c:7e:a0:68:65:25:f8:86:c6:41:c2:1e:76:fc:
49:be:3c:56:b5:41:29:d7:96:46:fb:7c:1c:08:76:14:73:0a:
29:85:67:3e:6e:56:0d:f6:c9:33:12:bd:bb:e7:fe:92:bd:53:
76:05:8c:ae:8a:51:0c:c4:88:1f:56:23:5f:81:02:92:35:15:
15:77:5f:14:34:94:1e:7e:aa:13:0d:a2:ef:3f:e7:d3:80:ba:
f5:8a:ae:c7:75:b8:f1:1e:06:88:9e:71:16:6c:d2:78:c3:08:
fe:b4:0f:52:8d:bd:54:2a:97:f3:75:a2:67:c5:38:11:20:a3:
95:a7:ed:07:a2:4d:59:6d:16:23:51:2c:bc:bb:8b:9f:dc:c3:
e2:a8:02:32:ee:03:52:8d:c7:de:62:83:f3:bd:43:20:c1:8d:
5b:3e:55:11:6a:ec:ab:4e:56:75:45:21:2c:7d:b7:41:64:c9:
83:ce:b4:6c:4c:99:07:a7:b3:37:b4:12:38:48:14:a4:8e:23:
b8:98:fe:a0:57:f6:25:18:c9:a0:8e:4c:22:b0:4f:e7:47:29:
ce:f0:32:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:48 2023 by rpki-client on console-ams.rpki-client.org