Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CscO8zSX6eLrVNMzDupTYSQL3XE.roa
File: CscO8zSX6eLrVNMzDupTYSQL3XE.roa (raw, json)
Hash identifier: gBGX4SxA8YxiFFUXHbxMRLSTihoyc3B4cLdd7mNAlwM=
Subject key identifier: 0A:C7:0E:F3:34:97:E9:E2:EB:54:D3:33:0E:EA:53:61:24:0B:DD:71
Certificate issuer: /CN=09e5518e68467b4290c3509268b6d6d664962c86
Certificate serial: 0262B999
Authority key identifier: 09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CscO8zSX6eLrVNMzDupTYSQL3XE.roa
Signing time: Fri 06 May 2022 14:31:35 +0000
ROA not before: Fri 06 May 2022 14:31:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31515
IP address blocks: 161.30.237.0/24 maxlen: 24
161.30.238.0/24 maxlen: 24
161.30.236.0/22 maxlen: 24
2a11:ae00::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40024473 (0x262b999)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e5518e68467b4290c3509268b6d6d664962c86
Validity
Not Before: May 6 14:31:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ac70ef33497e9e2eb54d3330eea5361240bdd71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b4:77:65:b2:26:34:b5:22:9e:3a:f1:6f:60:
7d:75:40:f2:d4:af:3b:bf:7c:e0:6b:db:ae:e6:81:
10:b6:56:63:ef:47:ea:ed:7e:a0:94:5d:ce:96:ff:
40:c7:20:7e:ba:9a:e1:bc:53:cf:66:65:d9:58:03:
c5:c4:92:7e:5e:3e:a4:4b:90:a8:c0:58:60:29:8a:
e8:b6:62:06:54:df:d6:2f:38:03:db:a0:2e:b2:48:
34:56:60:8e:7b:94:f3:bc:ca:e3:dd:ba:a3:71:ad:
74:08:08:39:df:9c:da:bb:a8:a8:01:ed:4e:b2:75:
6c:9f:c9:9d:09:46:36:ed:17:2f:d2:24:0c:65:8d:
13:10:ea:fb:8d:31:ca:22:24:4c:e2:85:b0:bc:1f:
de:17:6d:39:d6:34:29:c4:40:0f:19:90:89:09:7e:
e1:18:5f:e9:1a:ae:0c:cb:49:f7:d5:9a:25:2d:5b:
93:3b:94:dc:d7:9d:3e:23:4c:03:72:fa:d5:28:5e:
e4:a9:14:de:14:b9:bb:0f:c9:e0:b2:47:21:f9:bf:
bb:d8:d1:fd:55:f1:85:8c:4b:93:2d:36:0c:b9:36:
5d:06:5e:f4:bc:19:bb:a0:bb:bc:87:80:03:25:16:
87:50:8e:aa:78:52:41:bf:e4:2e:4f:f5:c6:61:21:
33:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C7:0E:F3:34:97:E9:E2:EB:54:D3:33:0E:EA:53:61:24:0B:DD:71
X509v3 Authority Key Identifier:
keyid:09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CscO8zSX6eLrVNMzDupTYSQL3XE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.30.236.0/22
IPv6:
2a11:ae00::/32
Signature Algorithm: sha256WithRSAEncryption
9d:77:3d:45:0f:32:53:b1:87:5d:05:d8:5e:10:eb:74:83:2b:
a8:72:90:7f:94:e5:6e:dd:1c:ca:d7:7d:23:53:3c:93:8c:14:
2a:9b:dc:0a:73:67:76:91:c3:fb:05:8b:01:6e:01:48:46:35:
bb:0e:c3:3b:26:9c:08:da:b3:aa:94:81:0c:3a:94:90:05:1a:
f0:d1:91:3f:78:bc:bc:da:c3:b1:ce:10:47:62:d2:0b:a9:17:
6c:3a:f7:e6:08:aa:a8:06:c4:9e:60:a6:bf:0d:fe:39:8b:1f:
a0:2a:cb:31:5b:c5:54:61:91:b0:2a:8e:bf:df:8b:87:02:cc:
79:d1:67:fb:d0:51:be:64:c6:14:de:47:19:64:cf:b7:7d:f4:
b5:6b:03:a4:42:ad:db:1f:b7:ac:13:19:75:85:b7:6a:84:49:
7e:e6:3a:a9:f7:48:c3:f3:cb:5f:71:03:5a:d8:66:af:30:04:
08:fb:83:8d:b5:c8:93:da:19:a2:a9:f0:cf:f3:3c:03:f6:03:
c6:bf:03:1b:19:45:b3:e6:b1:45:22:c5:af:bd:4c:9a:b5:92:
b5:36:e0:8b:58:24:5d:06:51:c7:26:d6:6f:b4:67:ff:94:5c:
b9:84:bd:b5:b1:42:ae:2a:ad:fa:d8:6f:8a:70:36:fd:29:bf:
95:f9:33:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:25 2024 by rpki-client on console-fra.rpki-client.org