Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/YvkZDIz6WcIMZ1zrKVmZ5ftT0r0.roa
File: YvkZDIz6WcIMZ1zrKVmZ5ftT0r0.roa (raw, json)
Hash identifier: xDMR5vsm99Cp61jvj3mN5DF9pWc8YO0kZNTYoTQ9fqs=
Subject key identifier: 62:F9:19:0C:8C:FA:59:C2:0C:67:5C:EB:29:59:99:E5:FB:53:D2:BD
Certificate issuer: /CN=c56f772bf3c4641a71bf7f4bc4de11c93addfea6
Certificate serial: CD8217
Authority key identifier: C5:6F:77:2B:F3:C4:64:1A:71:BF:7F:4B:C4:DE:11:C9:3A:DD:FE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/YvkZDIz6WcIMZ1zrKVmZ5ftT0r0.roa
Signing time: Sat 01 Jan 2022 06:03:41 +0000
ROA not before: Sat 01 Jan 2022 06:03:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210670
IP address blocks: 31.222.232.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13468183 (0xcd8217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c56f772bf3c4641a71bf7f4bc4de11c93addfea6
Validity
Not Before: Jan 1 06:03:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62f9190c8cfa59c20c675ceb295999e5fb53d2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e6:81:fb:be:53:ec:55:fe:b8:b7:c1:a5:88:
cd:66:82:16:13:c3:03:fd:8c:6d:e7:51:49:17:95:
9d:9b:f5:6b:52:b5:0d:ad:4e:16:bf:ba:6a:80:4d:
96:de:b9:89:27:c4:d7:05:97:ad:5f:1d:1d:23:c9:
8f:56:c9:67:ca:ae:a3:65:cf:a8:5f:26:6c:08:0e:
f4:75:19:cb:e5:ac:e8:29:3b:a7:07:8e:21:47:4d:
3a:b3:cd:4f:75:4b:d9:c6:00:9c:50:39:68:9f:76:
de:95:85:c1:c0:45:fd:bc:17:0d:04:9a:bd:21:35:
8c:fe:89:86:5b:42:67:fa:6e:5d:28:02:80:17:97:
0a:24:07:a3:84:78:0d:93:f1:5c:14:1d:3d:6c:3d:
81:2c:4f:96:c9:7c:e0:c6:7e:b5:8a:84:4e:3e:62:
5a:05:61:68:61:4c:67:af:5c:d8:2a:6c:93:95:98:
4e:a6:e2:8c:09:c3:3b:13:50:15:f0:61:bd:be:88:
6d:93:13:1b:7a:b2:93:b1:b6:b0:25:87:f0:1d:10:
af:64:62:84:cc:e9:e6:6e:58:88:fb:d9:ed:f7:af:
6a:48:34:a1:47:ff:a2:43:3d:ac:6b:d0:aa:f7:f3:
7b:e2:2e:d3:8e:e0:6f:be:f9:64:5f:ee:7f:6f:33:
48:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F9:19:0C:8C:FA:59:C2:0C:67:5C:EB:29:59:99:E5:FB:53:D2:BD
X509v3 Authority Key Identifier:
keyid:C5:6F:77:2B:F3:C4:64:1A:71:BF:7F:4B:C4:DE:11:C9:3A:DD:FE:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/YvkZDIz6WcIMZ1zrKVmZ5ftT0r0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.232.0/24
Signature Algorithm: sha256WithRSAEncryption
58:5f:bd:c8:29:a8:f1:61:c6:c3:6a:86:54:f6:9f:0f:e2:88:
b6:c5:36:04:a4:6d:79:13:91:9c:f0:88:f7:ee:1b:1c:d1:f3:
60:ee:5c:e7:c3:0d:04:47:c2:00:a4:eb:86:c6:50:13:f2:70:
c2:bf:b8:c6:01:90:56:f5:f6:e6:3a:42:32:18:3a:74:40:97:
39:d9:b3:12:c9:03:7d:09:94:e5:5b:3a:8f:b3:e9:97:db:9b:
5b:a7:6c:6d:51:f4:bc:b2:a4:86:d7:92:e2:93:fa:95:fb:ca:
e8:f9:1e:3b:c9:31:fe:38:f2:34:61:6b:ea:df:30:98:91:b6:
85:e7:09:83:44:01:ba:af:48:c9:2f:55:db:1e:3f:45:90:d5:
6b:2e:d7:aa:47:68:49:c8:92:2e:5f:e9:f3:90:37:b7:97:75:
b2:ac:6a:91:f4:d7:5d:09:02:01:f0:80:d1:37:8a:d6:fd:6f:
36:b8:03:6a:66:e1:e3:6f:9f:56:b0:c8:9c:69:d2:96:da:da:
ae:d0:ee:7d:e6:92:82:22:ca:96:c5:e2:8c:33:90:73:38:ae:
54:dd:e7:25:88:62:6b:e6:22:7e:fa:d5:93:60:df:36:d6:77:
b9:bc:ca:e3:8c:42:93:a6:9e:3d:3b:c4:99:25:e4:1d:df:c4:
80:0a:79:98
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAM2CFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NTZmNzcyYmYzYzQ2NDFhNzFiZjdmNGJjNGRlMTFjOTNhZGRmZWE2MB4XDTIyMDEw
MTA2MDM0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjJmOTE5MGM4Y2Zh
NTljMjBjNjc1Y2ViMjk1OTk5ZTVmYjUzZDJiZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJbmgfu+U+xV/ri3waWIzWaCFhPDA/2MbedRSReVnZv1a1K1
Da1OFr+6aoBNlt65iSfE1wWXrV8dHSPJj1bJZ8quo2XPqF8mbAgO9HUZy+Ws6Ck7
pweOIUdNOrPNT3VL2cYAnFA5aJ923pWFwcBF/bwXDQSavSE1jP6JhltCZ/puXSgC
gBeXCiQHo4R4DZPxXBQdPWw9gSxPlsl84MZ+tYqETj5iWgVhaGFMZ69c2Cpsk5WY
TqbijAnDOxNQFfBhvb6IbZMTG3qyk7G2sCWH8B0Qr2RihMzp5m5YiPvZ7fevakg0
oUf/okM9rGvQqvfze+Iu047gb775ZF/uf28zSPsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRi+RkMjPpZwgxnXOspWZnl+1PSvTAfBgNVHSMEGDAWgBTFb3cr88RkGnG/
f0vE3hHJOt3+pjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hXOTNLX1BFWkJweHYzOUx4TjRSeVRyZF9xWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDQvOTk2Y2Y0LTY3ZWEtNDEzZC05MzE3LTdlY2EyMDVmYWZjYi8x
L1l2a1pESXo2V2NJTVoxenJLVm1aNWZ0VDByMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQv
OTk2Y2Y0LTY3ZWEtNDEzZC05MzE3LTdlY2EyMDVmYWZjYi8xL3hXOTNLX1BFWkJw
eHYzOUx4TjRSeVRyZF9xWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAB/e6DANBgkqhkiG9w0BAQsFAAOC
AQEAWF+9yCmo8WHGw2qGVPafD+KItsU2BKRteRORnPCI9+4bHNHzYO5c58MNBEfC
AKTrhsZQE/Jwwr+4xgGQVvX25jpCMhg6dECXOdmzEskDfQmU5Vs6j7Ppl9ubW6ds
bVH0vLKkhteS4pP6lfvK6PkeO8kx/jjyNGFr6t8wmJG2hecJg0QBuq9IyS9V2x4/
RZDVay7XqkdoSciSLl/p85A3t5d1sqxqkfTXXQkCAfCA0TeK1v1vNrgDambh42+f
VrDInGnSltrartDufeaSgiLKlsXijDOQcziuVN3nJYhia+YifvrVk2DfNtZ3ubzK
44xCk6aePTvEmSXkHd/EgAp5mA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:21 2024 by rpki-client on console-fra.rpki-client.org