Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/ldI4KSZPuO-UD7fpxNwmdlOPWic.roa
File: ldI4KSZPuO-UD7fpxNwmdlOPWic.roa (raw, json)
Hash identifier: VfEVLUBYVhNA/MM2yLci5dQKDAOnwcgzWQ/X5pX1kLA=
Subject key identifier: 95:D2:38:29:26:4F:B8:EF:94:0F:B7:E9:C4:DC:26:76:53:8F:5A:27
Certificate issuer: /CN=ddd5708f429adadba1b4a38c94dd77654afaf97d
Certificate serial: 06F38CCF
Authority key identifier: DD:D5:70:8F:42:9A:DA:DB:A1:B4:A3:8C:94:DD:77:65:4A:FA:F9:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/ldI4KSZPuO-UD7fpxNwmdlOPWic.roa
Signing time: Sat 01 Jan 2022 02:52:48 +0000
ROA not before: Sat 01 Jan 2022 02:52:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197667
IP address blocks: 31.41.82.0/24 maxlen: 24
31.41.83.0/24 maxlen: 24
31.41.80.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116624591 (0x6f38ccf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd5708f429adadba1b4a38c94dd77654afaf97d
Validity
Not Before: Jan 1 02:52:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95d23829264fb8ef940fb7e9c4dc2676538f5a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:13:d3:32:6b:74:dc:85:53:23:5d:75:14:e8:
f3:ec:db:af:b0:b2:37:50:cf:2d:c6:39:0e:ed:45:
cd:d2:84:b9:9b:26:05:c0:b3:95:9a:0d:f8:b0:c6:
d9:26:76:bd:49:91:e8:c0:32:77:40:d0:e0:83:79:
34:87:08:f5:2e:0b:de:80:d8:d3:99:04:22:40:40:
1b:7e:de:36:ca:b7:2b:0f:80:eb:35:a5:ba:b4:09:
4a:ee:bc:54:97:58:5f:a5:18:e2:2e:59:9c:78:d2:
3f:df:a4:a0:f9:3b:62:f3:19:40:02:9e:a4:b7:f4:
d7:10:a9:7f:af:3a:f2:33:ba:cf:e5:0c:c2:fb:f6:
52:d6:f2:37:29:68:e9:5d:50:7b:38:69:a2:b1:51:
c1:a2:d3:a5:5c:76:a9:17:10:cb:7e:85:aa:ad:1a:
b5:67:a8:ed:9b:f7:90:7d:1f:37:59:6c:e1:b6:4b:
26:c7:be:f4:da:69:1e:0a:e6:0f:75:d2:b6:54:f6:
26:6d:4e:3b:22:42:36:8b:5f:db:9f:9a:37:cc:91:
bb:59:48:b6:35:58:47:85:37:d7:71:65:cd:66:0c:
f0:a1:10:e0:bb:8d:ee:f5:27:93:19:e2:4e:11:75:
61:37:e7:0e:66:ca:39:bc:9b:da:0c:d1:a5:f1:3c:
96:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D2:38:29:26:4F:B8:EF:94:0F:B7:E9:C4:DC:26:76:53:8F:5A:27
X509v3 Authority Key Identifier:
keyid:DD:D5:70:8F:42:9A:DA:DB:A1:B4:A3:8C:94:DD:77:65:4A:FA:F9:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/ldI4KSZPuO-UD7fpxNwmdlOPWic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.80.0/21
Signature Algorithm: sha256WithRSAEncryption
32:22:71:54:07:e6:35:8d:b5:ae:99:20:c3:a8:3d:a4:e3:11:
22:2c:79:38:10:03:60:9a:4d:04:a7:1f:af:ab:db:80:be:b5:
9d:38:cc:29:81:0d:d2:60:7c:10:a4:97:6d:f5:ac:23:46:3d:
35:b4:38:f3:c4:5f:c6:8d:a2:12:cf:3b:78:ed:8d:df:b2:0c:
b0:5e:e2:d2:0f:70:a9:2c:3c:96:26:3a:af:64:81:8f:9a:46:
da:56:50:3d:d0:5f:d3:52:62:b4:5b:9c:e0:71:76:92:42:59:
af:6e:e5:95:99:8c:55:af:f7:eb:0b:85:1f:fe:b8:1e:d1:9f:
00:b4:1f:73:3d:bc:b3:c6:e2:c3:4b:d6:cd:e5:de:9d:6c:70:
59:64:90:ed:88:f1:ae:f1:df:81:d3:ae:fa:1d:8f:b3:41:9e:
54:d4:c5:fc:73:52:f9:1f:3a:c2:83:33:1d:93:0f:34:91:af:
19:c3:c3:f5:76:a2:11:cf:e9:20:de:05:9e:e0:86:05:e4:62:
91:62:a8:a9:2b:c7:0c:88:9a:97:76:53:2b:70:97:0e:a7:04:
ba:7c:d4:39:1f:c1:83:df:29:02:a7:90:b4:87:55:f6:e6:0b:
ee:c4:6f:92:ac:cd:27:6b:84:9d:9e:67:7b:fe:77:4b:42:17:
e1:95:14:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:29 2023 by rpki-client on console-ams.rpki-client.org