Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/siAgxc3BUN5YLIUQcyl-4M4qq4Q.roa
File: siAgxc3BUN5YLIUQcyl-4M4qq4Q.roa (raw, json)
Hash identifier: mF0R3jSSQASllH+YTnZZLQZbiF+KJB15aVcxD9AoAas=
Subject key identifier: B2:20:20:C5:CD:C1:50:DE:58:2C:85:10:73:29:7E:E0:CE:2A:AB:84
Certificate issuer: /CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
Certificate serial: 03A22361
Authority key identifier: D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/siAgxc3BUN5YLIUQcyl-4M4qq4Q.roa
Signing time: Sat 01 Jan 2022 04:52:35 +0000
ROA not before: Sat 01 Jan 2022 04:52:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210997
IP address blocks: 185.6.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60957537 (0x3a22361)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
Validity
Not Before: Jan 1 04:52:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b22020c5cdc150de582c851073297ee0ce2aab84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ba:7d:3f:1b:5c:e1:b3:33:20:96:89:db:78:
54:2a:e1:90:08:6a:37:75:07:47:55:5a:3c:3a:6e:
1b:f7:59:1e:4f:81:6c:ec:f3:36:be:31:93:8e:84:
c1:90:5b:c0:99:76:0a:0a:cd:a3:e5:93:0f:c2:84:
47:c7:8a:7e:57:2f:41:08:5f:01:ba:bb:de:06:0e:
9c:ba:c2:f4:00:08:42:c1:29:ff:b9:59:fd:48:ae:
82:85:34:37:53:c4:db:1b:eb:86:0b:a2:1b:08:6f:
62:68:47:2b:e2:fd:37:37:a9:91:c8:a4:fe:7d:e5:
3a:45:94:a0:75:fc:0f:b2:06:70:85:17:43:e2:16:
28:11:a2:6a:69:a3:b8:65:ef:47:d2:da:9d:7b:9d:
a0:38:ed:62:dd:3a:89:1f:ed:d6:2a:a4:07:18:30:
2a:65:79:eb:71:b2:9a:64:12:77:eb:a2:01:41:f1:
14:82:09:d3:0b:a5:ed:4b:6a:85:99:72:c1:ef:9c:
ca:11:07:4d:05:83:4e:1a:4d:8b:ac:a5:2b:9d:fc:
d7:a0:bf:29:29:d4:52:54:12:b3:fe:c8:71:28:38:
59:89:0c:8a:dc:98:ce:a7:7b:f8:a0:25:ec:69:93:
6e:c5:a7:c9:0b:8c:e7:37:23:f8:fa:b4:dc:23:5e:
6f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:20:20:C5:CD:C1:50:DE:58:2C:85:10:73:29:7E:E0:CE:2A:AB:84
X509v3 Authority Key Identifier:
keyid:D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/siAgxc3BUN5YLIUQcyl-4M4qq4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.6.31.0/24
Signature Algorithm: sha256WithRSAEncryption
48:14:89:c2:f0:84:3b:28:cd:07:31:0d:ff:11:5d:25:54:27:
62:d4:f5:75:5e:8f:72:5d:8c:dc:68:5f:c7:3a:42:d3:27:09:
b3:0b:ee:5b:73:df:cc:3a:2b:eb:39:f8:a2:07:77:32:13:0e:
68:df:34:d9:ca:91:f2:6a:22:07:5a:f1:11:39:52:7c:a7:1f:
7a:4d:34:98:7b:1f:1d:cf:49:d0:c7:8f:a2:76:a5:ef:0d:c1:
6c:05:c6:0e:8e:35:f9:8f:ec:a0:fc:64:36:86:ce:67:92:c7:
d2:1d:f3:bf:67:fa:fc:fb:ad:1f:2f:44:49:d1:9e:07:c1:b2:
a6:1a:cb:98:57:b9:91:5a:b8:b7:5b:fe:7c:46:b8:c8:0a:d7:
aa:ff:67:13:a5:a0:9d:1f:50:2e:ba:77:35:d3:ef:5a:52:2b:
fd:95:5a:f3:55:09:85:94:ed:ad:6b:30:79:0b:79:bf:9e:f4:
25:ea:45:c7:57:c2:89:87:b0:83:91:c0:75:44:f1:c2:f9:02:
99:5c:b1:e9:5a:af:9f:62:83:1f:65:5f:5c:7c:a5:4f:82:9c:
ac:3a:80:8b:fe:34:a6:92:69:3d:f7:8f:ef:a1:7f:5b:8c:76:
e9:6c:d8:72:7d:0b:4e:16:d0:ee:f6:9b:a9:cf:69:55:0e:9b:
b0:fb:a0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:02 2023 by rpki-client on console-fra.rpki-client.org