Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Sw1cYsiapfn12RA7gWh1vGwdoL4.roa
File: Sw1cYsiapfn12RA7gWh1vGwdoL4.roa (raw, json)
Hash identifier: Sym91rH09476Z6Sj3ddu5PMZ3RO5IuTmVJ4zpoQWKWQ=
Subject key identifier: 4B:0D:5C:62:C8:9A:A5:F9:F5:D9:10:3B:81:68:75:BC:6C:1D:A0:BE
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 0B65921A
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Sw1cYsiapfn12RA7gWh1vGwdoL4.roa
Signing time: Sat 01 Jan 2022 08:58:41 +0000
ROA not before: Sat 01 Jan 2022 08:58:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60083
IP address blocks: 31.145.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191205914 (0xb65921a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 08:58:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b0d5c62c89aa5f9f5d9103b816875bc6c1da0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2e:83:8d:35:17:40:16:10:62:f5:ac:2e:87:
a2:de:24:c3:a2:c8:58:e1:8d:9d:f8:97:51:c5:b2:
4b:e0:d7:88:d8:ab:6b:db:17:4e:f6:da:29:ee:50:
0a:b2:9f:51:c7:c0:06:84:7b:55:d0:8f:3b:48:25:
a3:c5:c7:cd:65:f1:83:7e:e2:7c:52:27:92:54:8b:
9f:76:c8:1e:06:c1:b8:f8:18:5a:79:b0:4f:25:e5:
c2:98:d1:50:55:0e:46:50:86:46:74:45:07:a3:ab:
3f:86:cd:c5:94:d9:fa:18:82:33:84:a9:08:4c:58:
08:a6:3c:2a:f2:27:f1:2e:29:f5:70:65:c2:e6:52:
aa:d9:9d:9f:98:35:bd:9f:12:a7:47:b5:bf:87:f6:
07:f3:4b:b2:51:39:10:0f:33:2e:f3:b5:87:a0:43:
ac:69:0f:22:f4:b6:50:91:64:3f:9f:97:2d:8f:39:
36:d0:3c:41:a4:16:a8:59:e9:d8:5a:3c:91:d5:b1:
9d:71:84:3a:c5:93:c8:4c:ee:0d:4f:1a:82:79:08:
c8:96:f9:46:73:ff:3f:d3:fe:a9:a5:71:8d:8b:64:
a7:16:35:06:5a:9a:ec:f0:d4:14:bc:46:5d:ad:d5:
b2:fc:ab:10:0d:5d:b6:62:01:e1:02:96:2e:e6:4d:
c9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0D:5C:62:C8:9A:A5:F9:F5:D9:10:3B:81:68:75:BC:6C:1D:A0:BE
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Sw1cYsiapfn12RA7gWh1vGwdoL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.145.60.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:25:d1:03:0a:e0:a2:f7:9f:fb:c5:e5:d6:ae:f7:03:b5:5b:
54:b6:b4:4e:96:5e:c0:d1:f4:d8:0e:e9:fc:96:6a:ca:08:e4:
bc:3a:69:1b:8e:73:c2:37:21:3a:17:a2:74:e3:92:7d:de:ea:
bd:e1:60:69:3e:e3:68:51:d2:76:ec:3a:b7:61:e6:dc:bd:ab:
88:ff:8a:03:f2:3f:eb:4f:8d:29:27:41:95:34:c0:32:9b:60:
5c:6b:94:1e:90:f0:65:e1:b4:67:f1:f3:69:ae:3e:78:a7:3e:
13:48:e7:31:95:ba:fb:78:6b:a8:9b:91:17:76:64:74:4a:0c:
56:d9:97:19:1e:a9:bf:e4:1b:28:8f:f3:36:44:54:00:48:e7:
1f:be:a8:28:61:34:c2:f9:9a:33:a7:6b:12:73:7c:99:ab:51:
0b:44:c6:31:f9:7a:73:0e:57:ad:02:6e:4c:a4:e3:7e:65:b7:
5d:90:a7:52:5d:e2:f1:c2:a8:be:ca:d8:76:54:6a:95:14:86:
3c:73:e2:66:3e:e4:87:f4:9d:de:cd:32:f5:4b:23:5b:db:45:
51:09:0f:7c:c5:fe:24:5d:d9:e6:b3:e5:ef:1b:05:c3:45:1b:
28:73:57:fc:14:90:4c:0a:2d:17:a4:44:57:5f:9c:85:84:c1:
85:a5:68:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:11 2023 by rpki-client on console-fra.rpki-client.org