Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/b8EME_MbKOvZmZOOlNSSAdRkuWI.roa
File: b8EME_MbKOvZmZOOlNSSAdRkuWI.roa (raw, json)
Hash identifier: kk1Fb9GoI/Y20teLioFBCzf3mAT46iRb+F4NZp9EolM=
Subject key identifier: 6F:C1:0C:13:F3:1B:28:EB:D9:99:93:8E:94:D4:92:01:D4:64:B9:62
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 0B671E31
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/b8EME_MbKOvZmZOOlNSSAdRkuWI.roa
Signing time: Sat 01 Jan 2022 08:58:42 +0000
ROA not before: Sat 01 Jan 2022 08:58:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60096
IP address blocks: 31.206.32.0/24 maxlen: 24
31.145.70.0/24 maxlen: 24
31.145.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191307313 (0xb671e31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 08:58:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6fc10c13f31b28ebd999938e94d49201d464b962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:60:08:b9:0f:14:55:04:d1:b1:86:13:6d:8b:
9a:e7:d9:43:64:d1:05:f6:4e:63:54:3f:2e:27:b5:
86:44:c7:f1:cd:bf:8f:5d:d4:c5:e3:0a:de:79:26:
d6:29:7e:fe:da:bf:1a:df:06:62:69:fa:a3:d4:71:
3f:c9:84:fb:b7:41:18:b0:96:6b:6a:1f:32:b7:4c:
e5:48:93:d3:03:ad:64:f7:58:02:92:51:39:e2:a7:
38:df:10:de:e0:56:c8:55:bb:dc:20:34:41:00:85:
67:4f:5f:e7:a6:e1:d9:d0:82:8f:c3:97:5f:f1:99:
c0:2a:76:dd:2a:eb:9b:cb:91:10:5d:1b:9c:ec:1d:
2d:79:4c:6e:82:4e:8e:a5:bb:88:0c:0c:03:53:d4:
56:9b:58:82:ca:8e:1c:2b:98:f9:5f:e7:1c:36:3d:
2e:92:4f:ff:33:e4:df:e4:08:27:90:fd:f5:94:81:
d3:da:e9:bd:19:b5:1a:69:be:b1:c1:14:dc:8e:bc:
f8:9b:1b:95:f3:c0:55:d3:78:c2:bb:10:9a:53:29:
53:f0:59:a9:c4:0f:50:57:e8:4b:92:a0:8d:93:e9:
05:47:84:98:e4:71:b4:1f:49:85:bc:4c:60:b4:91:
73:97:7f:26:6e:12:6a:10:40:b1:02:18:77:98:ab:
49:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C1:0C:13:F3:1B:28:EB:D9:99:93:8E:94:D4:92:01:D4:64:B9:62
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/b8EME_MbKOvZmZOOlNSSAdRkuWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.145.70.0/23
31.206.32.0/24
Signature Algorithm: sha256WithRSAEncryption
24:37:69:7e:d9:1b:5f:89:de:37:75:f6:8c:36:29:64:63:bb:
10:5b:19:76:94:dd:9e:7d:a4:db:17:71:7d:fe:4f:1d:47:da:
07:f9:a8:b3:ee:72:e0:87:7f:9c:e8:db:f2:c3:6e:a4:2d:e0:
d4:1e:e5:22:01:06:1d:f8:d6:fb:ce:83:21:f5:02:01:85:9b:
b3:82:5b:56:79:7e:eb:e4:4b:96:1f:a9:32:73:da:3e:28:cf:
2a:c7:e4:65:77:79:ef:51:98:bb:7d:ed:c6:74:31:ac:60:5b:
29:6a:22:79:11:11:de:77:df:6a:48:26:21:15:96:a2:8b:1b:
b1:e9:39:42:08:13:26:63:17:d4:c4:74:5a:b2:2f:9e:e5:43:
12:ad:cc:77:26:ee:53:65:b3:ea:53:3e:30:5f:a3:93:23:c3:
b1:86:85:bb:15:a3:fa:12:2c:e6:1e:c9:57:bd:f8:37:49:00:
81:11:93:71:bb:3a:14:60:55:21:cf:97:df:61:f0:fb:1f:2d:
92:47:89:67:72:0d:c5:90:39:36:e2:38:ac:fe:d4:85:11:bb:
72:41:4b:56:c9:c6:1c:0e:ca:94:d9:d2:06:40:be:3d:40:c6:
c6:86:b0:aa:6f:6d:6a:e1:dd:39:67:43:74:3c:ba:a3:f2:3d:
0e:51:9b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:56 2024 by rpki-client on console-fra.rpki-client.org