Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/oaQSLU5iWy47uZbBjiHpvoepfDc.roa
File: oaQSLU5iWy47uZbBjiHpvoepfDc.roa (raw, json)
Hash identifier: NMALnSB09VG1mzJ3gA8uF+qi4ohx9dVlTAIEPBIJf0E=
Subject key identifier: A1:A4:12:2D:4E:62:5B:2E:3B:B9:96:C1:8E:21:E9:BE:87:A9:7C:37
Certificate issuer: /CN=b5217a84f715ea48e5cc3783b138ce8c7e70398c
Certificate serial: 018263655B69847188B7008042FC6E393681
Authority key identifier: B5:21:7A:84:F7:15:EA:48:E5:CC:37:83:B1:38:CE:8C:7E:70:39:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/oaQSLU5iWy47uZbBjiHpvoepfDc.roa
Signing time: Wed 03 Aug 2022 11:09:23 +0000
ROA not before: Wed 03 Aug 2022 11:09:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205228
IP address blocks: 31.42.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:63:65:5b:69:84:71:88:b7:00:80:42:fc:6e:39:36:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5217a84f715ea48e5cc3783b138ce8c7e70398c
Validity
Not Before: Aug 3 11:09:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1a4122d4e625b2e3bb996c18e21e9be87a97c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:db:0d:a3:67:6a:97:1b:31:26:a0:11:ab:e9:
bc:bd:aa:88:1f:4a:02:e5:3d:21:aa:0c:7a:a9:06:
bd:58:42:79:f6:1f:78:62:67:94:2b:62:99:81:10:
40:85:e2:eb:a0:22:2f:62:fc:e9:cf:64:fb:38:df:
07:bb:33:12:a8:82:47:e9:75:4d:49:40:9d:66:05:
46:23:81:a5:96:ef:34:dd:60:54:60:7a:f0:3d:6f:
d6:21:d2:09:b7:a4:9e:9a:7c:23:42:d7:46:c0:f9:
98:7b:17:25:e1:c0:6e:83:7b:f5:7d:4f:27:01:07:
b4:e1:e2:8f:2b:cf:00:6f:c8:58:8d:93:a9:f5:81:
3d:33:c9:2c:cd:71:ed:a1:01:a5:b7:46:17:9f:d4:
28:da:ef:59:ab:3c:d1:8c:d9:1f:35:ff:bf:a5:e1:
fa:e4:16:21:7c:4a:a6:49:6f:21:0f:03:8c:1c:0c:
d0:68:48:8e:29:a2:59:03:09:2c:0b:0f:be:38:aa:
2b:ab:c9:57:7c:b3:fd:1d:6d:bd:75:74:8f:76:f4:
6c:96:4b:dd:1a:da:68:28:42:c6:d1:e2:ee:11:2d:
3e:47:71:af:fc:20:22:78:4a:f9:78:ef:d7:e0:42:
12:c8:88:a1:4d:98:1e:0d:d6:3d:13:74:c4:c1:e4:
07:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A4:12:2D:4E:62:5B:2E:3B:B9:96:C1:8E:21:E9:BE:87:A9:7C:37
X509v3 Authority Key Identifier:
keyid:B5:21:7A:84:F7:15:EA:48:E5:CC:37:83:B1:38:CE:8C:7E:70:39:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/oaQSLU5iWy47uZbBjiHpvoepfDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.182.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:eb:44:7c:bd:7a:e3:ea:cd:6d:27:ac:34:9e:88:0c:a4:1d:
1d:b1:e1:2f:6d:c1:69:47:85:e7:e3:9b:ad:dc:13:ef:2a:20:
98:3f:51:9b:e7:7d:f7:a3:ed:de:1a:a8:66:d8:46:c2:19:a5:
6a:f2:79:0a:7d:1e:34:01:82:d8:2a:a9:f9:51:47:a8:bc:15:
41:bd:b2:d8:90:7e:7c:b6:34:3a:d3:14:ef:1d:e0:f8:41:6a:
d8:66:31:41:ee:8d:5b:dd:03:a8:74:9e:ab:dd:17:4a:fb:3d:
d6:46:ce:da:e5:5b:7f:d6:1f:1e:c6:91:ee:09:8a:a3:a8:c5:
cb:50:1d:7e:3d:93:12:20:b8:66:fb:ef:44:63:37:6b:37:79:
81:e2:52:58:32:79:53:cd:58:32:cb:7e:fa:89:17:55:bd:cb:
ac:1a:68:eb:1b:f2:0c:c9:e6:9f:ac:1e:b9:21:b2:e0:b5:d1:
f0:62:8d:29:77:68:0d:c8:a2:f0:45:c6:7c:de:9e:e5:32:75:
62:66:8a:b9:9a:b6:d8:93:da:a7:2c:01:3f:ca:bf:89:87:e8:
95:7b:2a:1a:38:bf:b3:ce:7b:57:13:9f:19:29:eb:55:97:cb:
02:0e:df:dd:6f:f2:2a:7a:1f:20:2d:de:75:57:9d:c0:76:e3:
57:58:d6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:15 2024 by rpki-client on console-ams.rpki-client.org