Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/HffPeu85vhJk1LVihTHPsb2sxaA.roa
File: HffPeu85vhJk1LVihTHPsb2sxaA.roa (raw, json)
Hash identifier: MofcZKtGlpr0S07XXkwlNGC+fMoewofNUvICOMGIslk=
Subject key identifier: 1D:F7:CF:7A:EF:39:BE:12:64:D4:B5:62:85:31:CF:B1:BD:AC:C5:A0
Certificate issuer: /CN=cb45b6e12516a0fd5ebabe7a7811082f3a746397
Certificate serial: 01837AB816C6770647F7B644B7206EFC0A99
Authority key identifier: CB:45:B6:E1:25:16:A0:FD:5E:BA:BE:7A:78:11:08:2F:3A:74:63:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0W24SUWoP1eur56eBEILzp0Y5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/HffPeu85vhJk1LVihTHPsb2sxaA.roa
Signing time: Mon 26 Sep 2022 16:53:48 +0000
ROA not before: Mon 26 Sep 2022 16:53:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56933
IP address blocks: 31.131.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7a:b8:16:c6:77:06:47:f7:b6:44:b7:20:6e:fc:0a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb45b6e12516a0fd5ebabe7a7811082f3a746397
Validity
Not Before: Sep 26 16:53:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1df7cf7aef39be1264d4b5628531cfb1bdacc5a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:63:41:f1:0a:a3:b5:73:6e:d0:8f:70:ff:e2:
8b:f6:10:63:98:bf:52:6a:55:7f:b9:e7:cf:d9:d6:
51:c0:37:3d:4e:e9:18:13:0f:b7:40:bc:c0:e1:fe:
83:c5:c5:f2:7a:27:fe:cc:2b:8a:e8:c8:4f:86:c9:
3d:6e:29:e6:2d:e2:8d:5b:c7:61:17:4b:c7:23:21:
c5:9c:d7:49:5e:6b:12:af:a0:cc:85:7e:2b:30:41:
0c:99:6d:e5:e1:55:57:69:d6:80:bf:67:f1:bc:92:
05:90:26:c1:04:13:1c:6d:3d:11:24:20:47:ca:df:
2a:39:c5:f0:9d:7a:09:d8:31:0b:b2:ad:d9:da:fe:
cf:fb:cb:3b:1c:e4:c5:1b:2e:33:28:97:9d:83:36:
b6:71:1b:11:e6:99:72:4f:5a:07:74:30:9b:20:ec:
bc:7b:8d:16:38:e5:54:7e:16:15:3b:06:74:df:3d:
7c:b6:fc:04:53:84:5a:ce:03:93:63:a1:b3:5d:b3:
60:f4:c5:dc:96:e7:3c:68:cd:fb:d5:57:e4:55:35:
2f:ad:3b:0f:21:a0:4b:43:9d:30:54:b9:e1:f8:07:
48:53:8a:94:55:3b:b9:64:8b:95:d4:d2:e9:de:d7:
03:f1:dd:78:86:05:7c:42:5e:2c:e5:8a:d1:8c:de:
8c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F7:CF:7A:EF:39:BE:12:64:D4:B5:62:85:31:CF:B1:BD:AC:C5:A0
X509v3 Authority Key Identifier:
keyid:CB:45:B6:E1:25:16:A0:FD:5E:BA:BE:7A:78:11:08:2F:3A:74:63:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0W24SUWoP1eur56eBEILzp0Y5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/HffPeu85vhJk1LVihTHPsb2sxaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.224.0/20
Signature Algorithm: sha256WithRSAEncryption
2a:5f:77:51:23:c2:0a:bc:1f:28:24:e6:d0:e8:af:36:45:8b:
ac:7a:53:b4:fc:75:04:91:61:ec:f3:81:7d:09:5f:49:96:2f:
fb:d1:a5:3e:6f:e2:f0:b8:3d:7b:62:4d:d9:3f:55:1f:1c:66:
e8:f9:79:8f:9d:de:ad:9a:be:70:de:71:cc:82:ad:9b:8c:af:
d8:c8:f4:c2:a5:b7:03:f0:57:75:0b:04:40:eb:19:6f:b1:e4:
00:ac:c5:b1:62:59:12:2a:09:6a:5a:f3:7e:5a:fe:b8:61:e6:
3c:81:83:52:30:d8:19:8b:ec:19:b3:01:45:f0:a9:dd:a9:7e:
f0:ad:d8:92:7a:97:9d:58:d2:cf:5f:a2:d6:f8:18:1d:e1:e7:
bf:c5:7d:3c:4e:d5:a1:df:93:67:ba:09:07:49:58:da:89:c3:
7d:61:36:66:80:46:8c:7f:ca:2c:97:8e:e0:df:2a:90:1b:75:
ec:4f:69:d2:1c:5f:f8:56:35:cf:b4:6e:0c:83:a3:d6:85:aa:
30:8a:46:fe:4d:3c:7d:53:68:68:cf:af:a5:75:19:cf:c5:a7:
b9:08:fc:c6:56:fc:f9:0c:e5:7a:d9:2a:e9:50:4f:f8:83:69:
3e:52:c0:e5:d4:49:6e:7e:f7:d6:83:30:24:a7:b3:ed:66:ea:
d2:d3:56:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:17 2024 by rpki-client on console-ams.rpki-client.org