Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/Z8QDB678zAVMbLm-IbFwEk_D7V0.roa
File: Z8QDB678zAVMbLm-IbFwEk_D7V0.roa (raw, json)
Hash identifier: qVFyg411pnujgeCXWb4HilpABy+FrpD8tDFsETqRPIw=
Subject key identifier: 67:C4:03:07:AE:FC:CC:05:4C:6C:B9:BE:21:B1:70:12:4F:C3:ED:5D
Certificate issuer: /CN=d2ebb1166c060db25df94f02bd2f8f9da6c4dd4b
Certificate serial: 02BF7DFB
Authority key identifier: D2:EB:B1:16:6C:06:0D:B2:5D:F9:4F:02:BD:2F:8F:9D:A6:C4:DD:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/Z8QDB678zAVMbLm-IbFwEk_D7V0.roa
Signing time: Sat 01 Jan 2022 10:57:52 +0000
ROA not before: Sat 01 Jan 2022 10:57:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59595
IP address blocks: 31.135.184.0/22 maxlen: 22
31.135.191.0/24 maxlen: 24
31.135.188.0/23 maxlen: 23
31.135.190.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46104059 (0x2bf7dfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ebb1166c060db25df94f02bd2f8f9da6c4dd4b
Validity
Not Before: Jan 1 10:57:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67c40307aefccc054c6cb9be21b170124fc3ed5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b2:43:a3:3f:6c:0a:60:90:3a:d4:f1:a6:ab:
28:55:04:ae:32:6b:87:4b:be:53:ae:21:f8:78:56:
52:42:f0:26:41:a9:59:e4:a4:6d:da:11:58:40:e0:
41:2a:69:78:11:68:81:5d:4a:dd:8e:52:29:6f:bc:
45:4b:7f:df:36:c7:a2:ad:52:1e:90:8a:8f:3e:ba:
bb:ee:d6:62:e4:68:ec:4b:ed:02:8e:df:9b:0b:d0:
ca:b3:f6:f7:5e:36:15:6e:4b:86:59:02:94:9f:3e:
ac:89:39:78:c3:73:64:9c:36:a1:de:eb:21:99:6f:
40:fd:33:4f:2b:ba:c9:6c:88:f8:4b:7b:1d:f7:69:
cf:d8:38:fd:78:2e:ca:57:01:15:31:a4:be:36:26:
fe:b9:1e:72:a5:e3:5e:e7:25:1c:60:e3:84:99:0a:
d8:8e:39:91:55:23:8a:f8:3b:cb:4a:9e:0b:da:07:
1c:b5:58:1d:02:3c:7d:e4:0c:a9:6f:d2:00:d9:18:
be:71:e8:5b:21:d6:ce:c4:3f:5c:d0:6b:eb:c2:9d:
2e:8d:57:58:b3:cc:1b:4a:16:5e:5b:b1:f1:6d:83:
d5:1f:1a:a9:96:da:08:a7:14:e7:89:93:00:be:9b:
ce:00:8b:fa:58:dc:e5:8a:f2:b2:c3:0f:24:ea:df:
ff:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C4:03:07:AE:FC:CC:05:4C:6C:B9:BE:21:B1:70:12:4F:C3:ED:5D
X509v3 Authority Key Identifier:
keyid:D2:EB:B1:16:6C:06:0D:B2:5D:F9:4F:02:BD:2F:8F:9D:A6:C4:DD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/Z8QDB678zAVMbLm-IbFwEk_D7V0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.135.184.0/21
Signature Algorithm: sha256WithRSAEncryption
4b:9c:53:9d:77:e0:e3:a5:5a:4c:d6:d7:05:e5:cb:48:e9:56:
87:f7:60:2e:17:61:77:75:c7:18:d4:7f:aa:fe:86:1f:55:ef:
ae:ab:d2:34:f0:55:88:a6:01:81:7d:5d:f7:29:de:24:6f:40:
02:7b:a2:4f:e1:b5:85:68:04:a4:b3:d8:c4:32:5e:10:76:a5:
fa:d6:5f:80:61:44:81:2d:7a:c9:b5:0b:1e:7c:6b:ce:1c:76:
f5:de:a0:4a:19:3e:8d:18:e1:66:14:9f:4a:a4:29:69:25:0a:
b1:95:1d:e8:a3:f0:0b:a1:3c:8c:da:52:85:a0:62:93:43:d3:
02:66:e8:7b:72:31:49:33:4e:3e:c1:e5:02:06:51:74:c9:6c:
29:47:e8:91:4d:7d:f3:bb:39:ae:d0:b8:46:ed:14:c5:d7:03:
86:d8:a8:6a:70:da:b7:dc:b9:d7:ae:ba:f1:db:8a:ea:49:69:
86:5b:e7:5e:44:ce:62:80:75:29:b7:3b:14:07:17:c7:35:18:
42:c1:ca:57:7f:d9:68:37:16:13:2d:ce:64:a6:ef:50:d3:ac:
dc:89:24:89:75:ae:4d:37:75:c1:cf:1c:6f:73:23:c0:5c:1a:
f9:c9:46:07:90:c7:c5:0c:93:1c:76:c3:7d:f1:c6:d2:f5:38:
a9:78:1f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:17 2023 by rpki-client on console.sobornost.net