Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/UPc4Iypb87wjgxX9MVdfFCSattE.roa
File: UPc4Iypb87wjgxX9MVdfFCSattE.roa (raw, json)
Hash identifier: gLcpomUFT/HuSieq5w13xq4S7YjIBi+wH/+obBe4zzA=
Subject key identifier: 50:F7:38:23:2A:5B:F3:BC:23:83:15:FD:31:57:5F:14:24:9A:B6:D1
Certificate issuer: /CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Certificate serial: 914902
Authority key identifier: 86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/UPc4Iypb87wjgxX9MVdfFCSattE.roa
Signing time: Sat 01 Jan 2022 02:01:42 +0000
ROA not before: Sat 01 Jan 2022 02:01:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44493
IP address blocks: 31.192.234.0/24 maxlen: 24
31.192.238.0/24 maxlen: 24
31.192.237.0/24 maxlen: 24
31.192.236.0/24 maxlen: 24
31.192.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9521410 (0x914902)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Validity
Not Before: Jan 1 02:01:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50f738232a5bf3bc238315fd31575f14249ab6d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:64:c8:c4:84:cb:e9:5c:c4:81:f2:ce:33:2c:
7d:cf:7b:7e:db:b7:e2:4d:fd:21:1c:4d:e4:56:8f:
de:8d:e1:a4:a6:03:9a:ae:25:00:92:1e:f6:2c:3a:
83:d7:a6:54:de:11:1d:0b:0a:38:df:46:ae:46:73:
d7:9e:16:8b:8c:c0:94:0b:19:0d:d0:5b:b3:32:1c:
54:6c:03:12:01:40:62:4f:1a:b1:de:0c:17:6d:b5:
c5:bc:70:99:cf:09:7b:9c:d9:36:5d:0e:35:ba:79:
1f:67:0b:c6:f2:8d:e5:e2:fe:ed:1e:dc:da:35:a4:
5f:b7:a2:ba:4c:6d:56:93:a4:9f:53:cf:ad:84:be:
3e:1e:77:c0:a0:2e:3a:bf:76:be:a0:0c:78:29:f9:
00:6a:74:51:9b:d9:c2:62:e7:be:d5:33:84:b5:f8:
02:0e:5d:89:77:68:04:16:2a:75:0e:58:dd:02:4b:
40:52:6d:05:35:84:67:31:3b:8e:87:70:51:78:72:
04:fa:7d:75:0e:64:6c:8f:ae:de:56:59:d7:c9:4a:
a8:de:42:10:b1:75:70:df:0c:a5:b8:0b:fa:15:22:
5a:cd:b9:1d:ca:ba:73:cb:1d:35:b1:f3:66:d3:f7:
8d:f3:b5:db:31:8c:70:38:43:60:8f:46:39:80:fd:
24:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F7:38:23:2A:5B:F3:BC:23:83:15:FD:31:57:5F:14:24:9A:B6:D1
X509v3 Authority Key Identifier:
keyid:86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/UPc4Iypb87wjgxX9MVdfFCSattE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.192.234.0-31.192.238.255
Signature Algorithm: sha256WithRSAEncryption
66:ce:72:6b:36:82:db:1d:d9:84:60:c8:f0:8a:2a:28:2c:0e:
73:20:69:e4:e3:01:94:bb:27:81:ed:5d:f0:37:9e:92:14:38:
6d:62:29:79:aa:15:25:6d:2f:35:98:9d:3a:b0:46:bf:57:89:
41:c5:59:f2:46:c5:0f:29:04:af:e2:41:ed:53:60:dd:9c:3f:
1c:55:d2:65:b8:d8:a1:11:c9:9c:e1:12:88:0b:40:ff:70:bf:
18:2f:b9:51:34:c8:61:13:d0:b0:a4:a2:6e:74:ff:7e:f1:64:
33:9d:1d:c8:d2:ca:68:48:94:36:76:85:f5:ec:b0:f2:c8:81:
57:80:78:f2:15:e4:ae:12:f5:81:39:a8:4f:e7:8c:8c:a4:cd:
af:b1:73:b8:f4:ea:e6:12:39:0c:17:89:19:ce:cd:68:ca:ec:
6d:44:da:77:38:7d:fd:66:3a:fd:9b:b4:cc:d0:b0:df:b8:cb:
75:4c:7b:b3:69:85:1c:73:93:79:2a:42:64:11:d7:97:30:ba:
00:02:77:91:a0:7d:25:30:38:20:bb:95:7d:54:51:43:12:87:
f3:7f:10:83:71:fc:ea:80:a6:b6:fb:8f:4e:50:98:23:b9:3c:
d6:91:3d:9f:57:d7:f3:a8:4c:dc:5d:18:4d:ff:13:03:27:36:
c0:bf:e5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:20 2024 by rpki-client on console-fra.rpki-client.org