Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/Uyfd5Ct5fZFBfRaRFTRe_UlvNV8.roa
File: Uyfd5Ct5fZFBfRaRFTRe_UlvNV8.roa (raw, json)
Hash identifier: lakm7ChGATLs2TaJgjsNsbo51L8eSTrOZ7uLWPbANYg=
Subject key identifier: 53:27:DD:E4:2B:79:7D:91:41:7D:16:91:15:34:5E:FD:49:6F:35:5F
Certificate issuer: /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Certificate serial: 02771EB7
Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/Uyfd5Ct5fZFBfRaRFTRe_UlvNV8.roa
Signing time: Mon 14 Feb 2022 13:43:06 +0000
ROA not before: Mon 14 Feb 2022 13:43:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207889
IP address blocks: 31.129.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41361079 (0x2771eb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Validity
Not Before: Feb 14 13:43:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5327dde42b797d91417d169115345efd496f355f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a8:0f:78:46:5f:35:7f:cd:37:21:52:50:d6:
1c:72:2f:ba:4c:e6:2c:fe:0f:27:1a:d1:21:2d:cc:
ba:9d:69:ad:6b:2d:32:17:3b:c1:8f:d7:6f:ef:63:
d3:89:90:f1:54:32:e1:dc:5a:fa:9d:ce:93:3b:5d:
55:d1:9a:36:eb:a9:2b:c8:f2:c6:9b:b4:6d:6e:34:
37:e6:91:b3:c2:b0:67:f9:a3:3a:de:4b:07:33:d1:
44:64:b6:98:75:4a:55:80:63:33:a2:93:8f:0a:d9:
48:b1:c1:a0:17:f0:6e:96:8b:15:55:f5:29:0d:68:
91:aa:1c:a4:b7:08:fd:06:8c:01:13:72:0d:f3:30:
d4:d2:3b:68:c2:27:66:e9:cd:9b:3e:e7:d8:c3:28:
94:77:75:6f:51:15:8b:9e:62:19:1b:7b:cc:5a:71:
7e:67:af:ba:05:f3:1b:72:f0:2d:b3:c1:bb:36:96:
a5:bf:d2:bd:19:39:39:7c:f8:e5:40:e6:eb:c9:79:
aa:01:d1:18:b1:1e:84:bc:e3:f9:71:94:4a:9a:2c:
91:fa:70:99:fe:ca:ce:0e:7b:96:af:17:1e:57:5d:
75:b1:48:85:01:56:10:4d:48:1d:5d:73:f7:15:05:
0f:45:90:7c:9b:0e:46:ac:0b:b8:b9:21:7d:1f:84:
b5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:27:DD:E4:2B:79:7D:91:41:7D:16:91:15:34:5E:FD:49:6F:35:5F
X509v3 Authority Key Identifier:
keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/Uyfd5Ct5fZFBfRaRFTRe_UlvNV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.228.0/24
Signature Algorithm: sha256WithRSAEncryption
88:3d:14:1c:b4:2a:43:92:90:43:73:de:51:e4:14:e6:42:b4:
5c:b4:7d:68:c6:d9:6b:fc:1f:b7:d8:54:5e:1c:0e:b6:64:5a:
54:25:06:26:13:64:c8:c6:4d:b1:ae:ae:78:8f:97:1b:ef:0b:
ba:e6:37:d7:b8:1b:c5:9d:7c:44:2d:80:4e:8e:96:09:8b:ed:
b4:75:bb:b6:ba:7d:37:88:6e:0d:cf:2d:3a:06:e2:a8:a7:85:
7d:39:ef:dc:d8:af:5e:e7:b7:20:76:82:c2:92:9c:52:22:09:
cf:89:e2:54:a2:03:88:2c:f5:ef:59:51:28:5a:f9:18:f9:08:
3f:f3:08:be:e3:e0:53:ef:cc:7d:8e:54:11:6a:f9:94:b4:12:
2c:1a:d5:92:45:e0:de:a9:8c:13:ce:9f:e0:13:bc:b0:ab:c0:
e8:25:f4:81:d2:7d:1c:1e:69:5c:12:91:56:a3:d5:9a:08:e7:
4e:5f:48:3c:43:08:c9:2d:f2:71:36:17:43:63:8c:8b:c9:4b:
f1:bf:0a:d8:1a:ed:e8:fd:25:ee:bf:da:91:04:f0:f8:75:0e:
0b:45:a6:04:4a:f9:ad:b1:a5:9e:25:46:88:84:bf:3c:18:d9:
48:c0:69:70:20:8a:c3:ae:fc:75:1e:96:45:1e:2f:9e:b1:40:
28:04:f3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:10 2024 by rpki-client on console-fra.rpki-client.org