Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/cyw_bx0fTKXD-060VTgStPXQcQE.roa
File: cyw_bx0fTKXD-060VTgStPXQcQE.roa (raw, json)
Hash identifier: Q28AGpNBWKeEMxHDnG6XqLWx6C5MaFK2xYanxqC7Ta0=
Subject key identifier: 73:2C:3F:6F:1D:1F:4C:A5:C3:FB:4E:B4:55:38:12:B4:F5:D0:71:01
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 0B6832E7
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/cyw_bx0fTKXD-060VTgStPXQcQE.roa
Signing time: Sat 01 Jan 2022 08:58:42 +0000
ROA not before: Sat 01 Jan 2022 08:58:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60146
IP address blocks: 31.206.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191378151 (0xb6832e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 08:58:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=732c3f6f1d1f4ca5c3fb4eb4553812b4f5d07101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2d:f9:17:58:f1:3f:e3:a0:c9:f1:c4:95:39:
2c:88:55:c1:de:bf:fe:ef:14:e4:54:ee:3c:56:8f:
48:3b:f2:b7:e6:b8:c4:e8:a2:d4:f2:ca:de:f2:5e:
2b:1e:9a:8b:31:45:c8:92:9a:58:69:6b:5b:fc:55:
cf:d8:a4:5b:d2:83:e4:c2:31:66:b0:8f:67:ff:e7:
0a:29:65:6a:25:4d:38:28:f1:36:8e:1a:aa:83:a1:
55:45:f9:d8:5d:ae:11:c5:8a:89:af:d9:d7:3c:ee:
9e:b9:3b:a9:9d:7a:5b:09:4d:d7:5d:e4:5b:41:13:
e9:88:a5:e4:8b:1a:94:df:a5:c3:f1:59:01:39:41:
eb:09:70:55:f9:6b:2c:7e:b9:c2:30:a7:fb:7d:15:
d8:d4:cc:d4:50:35:74:cd:31:dd:e4:29:fa:42:fb:
4c:a0:0d:7c:d5:52:2f:ec:15:bb:de:35:b5:89:8a:
33:68:1b:56:ae:2a:da:97:64:22:be:ea:7b:f9:a3:
06:d7:c2:ed:d0:3f:b2:0f:69:33:db:9c:7d:d2:ed:
d6:b0:5c:0b:fa:80:27:97:81:e4:dc:7b:d7:c3:e5:
7f:7c:9c:d8:f6:eb:ed:8c:24:16:51:b5:35:96:ab:
4f:2b:c9:89:7c:4a:89:da:af:33:65:a0:87:a0:a6:
e7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:2C:3F:6F:1D:1F:4C:A5:C3:FB:4E:B4:55:38:12:B4:F5:D0:71:01
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/cyw_bx0fTKXD-060VTgStPXQcQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.206.40.0/24
Signature Algorithm: sha256WithRSAEncryption
83:97:5e:95:d6:e0:f7:db:d3:b8:c0:db:45:df:c7:9f:0a:ea:
76:ad:05:95:41:35:a7:84:6c:21:60:22:f8:3c:cf:85:52:92:
e2:b0:1c:51:7b:84:4c:7d:7a:e9:0e:f1:29:45:14:73:e5:da:
ef:91:28:99:7c:2d:66:21:21:7b:d9:5f:06:cb:56:02:eb:08:
ab:24:d1:44:ac:31:2c:e6:5f:9d:a9:32:d3:21:de:89:5c:14:
9f:07:20:32:c9:90:61:34:47:4e:7e:01:85:b0:5b:96:ba:e7:
cc:8c:ef:45:16:27:79:c5:43:d9:5b:02:6a:07:72:51:de:e3:
80:e2:06:8e:c8:3e:31:94:e3:c2:51:94:72:1e:83:65:98:4f:
ff:cc:e8:6b:05:8a:64:c4:f2:95:58:86:9c:df:df:5f:03:df:
74:66:1e:14:44:c9:d9:35:79:41:5d:65:57:db:53:5c:8d:7d:
33:08:ab:6d:52:ed:2f:8b:aa:1e:12:af:4e:02:49:3d:44:e0:
15:52:27:04:fe:88:05:9b:7c:a8:78:ec:f1:ca:a1:b2:49:fd:
81:30:cf:2d:77:41:b6:55:e3:eb:00:e2:46:bc:77:e8:5b:b8:
14:23:2e:f7:e1:7a:dc:08:ee:25:13:09:c2:00:be:c7:23:02:
98:de:7a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:56 2024 by rpki-client on console-fra.rpki-client.org