Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/HOmsgmc1J0dxNvvsiKQme5Kfhhc.roa
File: HOmsgmc1J0dxNvvsiKQme5Kfhhc.roa (raw, json)
Hash identifier: WAli7lBItzTLZNvFF2stJi7lkiri1H+DCOd6uyuSYeQ=
Subject key identifier: 1C:E9:AC:82:67:35:27:47:71:36:FB:EC:88:A4:26:7B:92:9F:86:17
Certificate issuer: /CN=d80b565d7736753dbe7f6624bdf1d2bc1896f7c0
Certificate serial: DD5288
Authority key identifier: D8:0B:56:5D:77:36:75:3D:BE:7F:66:24:BD:F1:D2:BC:18:96:F7:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/HOmsgmc1J0dxNvvsiKQme5Kfhhc.roa
Signing time: Sat 01 Jan 2022 07:59:23 +0000
ROA not before: Sat 01 Jan 2022 07:59:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210854
IP address blocks: 31.210.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14504584 (0xdd5288)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d80b565d7736753dbe7f6624bdf1d2bc1896f7c0
Validity
Not Before: Jan 1 07:59:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ce9ac82673527477136fbec88a4267b929f8617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:26:2b:82:be:4c:c5:95:ad:2c:4d:ed:dc:68:
5b:f8:50:7f:ad:62:3d:ff:db:bb:a7:eb:41:92:6c:
54:b1:d0:f7:97:8e:39:a0:ec:16:86:c1:dd:e6:14:
da:05:7e:f3:dd:39:e3:38:0a:41:b1:57:21:d4:62:
b2:2f:8a:1d:46:7d:3f:a7:95:26:9e:8c:e4:85:e1:
b3:e7:32:0c:a1:68:a6:1f:48:b4:96:c4:31:ef:11:
bd:97:a6:d2:a2:ea:e0:ae:1d:15:6c:81:60:f1:6c:
a8:bf:80:20:85:79:7f:0d:b0:0f:cb:4d:3b:16:6d:
cc:cd:66:20:13:de:ad:da:dc:ca:92:00:98:26:6d:
e5:ab:9d:c5:21:2c:08:2d:d1:cd:d3:5f:f1:6c:6f:
2a:49:2f:8f:7a:f2:99:a3:21:ff:4a:10:d5:fd:53:
53:dc:91:30:a8:28:df:18:7f:fc:dd:4c:21:be:8e:
eb:05:90:e5:ba:a6:2c:cc:74:c0:09:9e:7d:a0:f1:
45:3c:68:62:28:6d:0b:d4:cb:e5:30:87:31:cc:11:
50:bb:08:b7:1c:46:f9:a4:ba:20:ad:c6:8e:a8:76:
0a:a0:f1:d7:7d:50:da:0c:1d:69:15:f4:be:49:0f:
4e:a7:25:62:42:c9:ae:dc:2f:e1:96:60:eb:9e:f1:
b5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E9:AC:82:67:35:27:47:71:36:FB:EC:88:A4:26:7B:92:9F:86:17
X509v3 Authority Key Identifier:
keyid:D8:0B:56:5D:77:36:75:3D:BE:7F:66:24:BD:F1:D2:BC:18:96:F7:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/HOmsgmc1J0dxNvvsiKQme5Kfhhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.17.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:18:b0:75:49:23:31:83:e4:6f:3a:bb:8f:8c:a8:c4:08:c9:
5c:d3:5f:e2:27:3e:0e:6e:28:80:bb:9f:98:fe:11:2a:65:f7:
8b:12:11:dc:eb:05:3b:64:0a:b7:b5:a0:32:09:76:0c:4e:6d:
9b:bd:51:06:5e:f6:d9:bb:06:38:4b:d5:a9:80:e1:de:c6:47:
c8:74:31:a9:26:0c:df:82:bc:70:0e:14:31:84:bf:34:4e:8b:
27:55:b9:b4:5a:92:16:ae:ed:bb:fe:61:f0:55:01:48:73:7c:
36:ca:8f:b5:5d:09:83:6b:8f:b3:05:db:44:c3:07:df:e0:31:
bc:e4:2f:6d:79:78:24:66:a3:6c:77:7b:7a:78:6d:aa:5a:f4:
a4:3a:23:dc:e9:50:94:98:26:41:c6:7e:57:fc:f1:5d:5b:54:
34:6d:31:8c:89:1f:72:7e:18:7d:82:d5:94:5f:6f:70:7e:af:
79:e8:13:42:df:da:24:d7:92:55:28:73:e8:58:7d:b9:a1:13:
26:5a:85:f0:f3:15:e1:6d:89:88:62:84:74:80:b6:05:b6:78:
65:28:ba:95:7d:99:3b:66:01:39:26:91:58:ea:b2:4f:b9:81:
b4:9e:00:56:4d:dd:8e:ec:4a:46:21:5d:9e:7e:2d:7e:8c:4b:
f7:2b:0c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:08 2023 by rpki-client on console-fra.rpki-client.org