Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/66Sm62akIp8xtX-fOUarcSES8So.roa
File: 66Sm62akIp8xtX-fOUarcSES8So.roa (raw, json)
Hash identifier: gFAXLC/GVUg5kvK258dr53yAd81F/jzytiC5ZaMdT2I=
Subject key identifier: EB:A4:A6:EB:66:A4:22:9F:31:B5:7F:9F:39:46:AB:71:21:12:F1:2A
Certificate issuer: /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Certificate serial: 01CE1794
Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/66Sm62akIp8xtX-fOUarcSES8So.roa
Signing time: Sat 01 Jan 2022 03:59:21 +0000
ROA not before: Sat 01 Jan 2022 03:59:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2856
IP address blocks: 31.130.240.0/23 maxlen: 24
178.212.56.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30283668 (0x1ce1794)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Validity
Not Before: Jan 1 03:59:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eba4a6eb66a4229f31b57f9f3946ab712112f12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5a:36:4c:40:0b:f0:a7:aa:dc:7b:5e:75:ba:
d5:86:dd:1e:b6:8f:3d:e7:5d:5d:5d:aa:5f:13:96:
f4:ee:86:df:6e:ff:d9:93:94:e3:8a:62:ed:69:00:
be:7b:6e:79:ae:a4:a7:e5:e9:6d:ca:f7:1d:ff:25:
a3:40:2a:a2:0a:37:c6:0c:2b:5c:6d:7d:4a:56:4b:
46:1a:6f:88:c7:67:77:9a:f7:3d:ff:cf:3c:04:46:
75:33:e1:3a:b3:81:62:4b:2e:0a:91:f0:6b:35:bd:
9b:b6:e4:4b:61:f0:47:fc:0d:90:aa:e6:90:5f:78:
66:50:50:b1:57:b8:ff:ae:27:b2:1d:d1:b9:17:d1:
12:9d:ee:cb:7b:0e:c4:08:de:c3:81:3a:14:f1:17:
70:4b:3c:b6:2f:1b:e2:9f:c2:8d:69:f3:14:36:15:
77:27:10:ea:63:50:07:c8:db:bb:26:5d:a4:49:21:
b7:a6:d2:40:a4:51:ea:55:dc:0c:71:9c:bd:40:e1:
e9:6a:48:64:2e:f3:7c:da:7a:04:3b:fd:d7:e2:68:
b1:4d:7f:9d:a5:df:d9:1d:cc:08:46:21:f7:e9:c3:
8b:75:1c:f1:05:a4:b2:89:bd:26:bf:9b:25:06:b6:
4a:84:ed:37:c3:00:3f:45:1c:2a:9e:4d:c3:ae:a1:
3d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A4:A6:EB:66:A4:22:9F:31:B5:7F:9F:39:46:AB:71:21:12:F1:2A
X509v3 Authority Key Identifier:
keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/66Sm62akIp8xtX-fOUarcSES8So.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.240.0/23
178.212.56.0/23
Signature Algorithm: sha256WithRSAEncryption
26:be:97:b3:c1:36:50:9c:f0:4e:b1:5d:6d:7a:67:11:12:81:
6c:6d:2d:f7:ac:de:2f:17:ca:7a:00:ec:00:d4:8c:c7:22:9d:
a6:24:3f:76:2f:47:37:e5:6a:7d:2e:6b:a2:21:0a:5d:c8:0d:
75:30:24:e1:74:6a:d6:79:c8:5a:43:9b:89:ad:34:20:56:4d:
cd:ac:fe:ca:92:2a:58:3d:3b:77:48:1d:eb:c2:7d:a4:a0:84:
bd:bb:61:79:9f:78:78:df:e7:00:b7:6c:d4:14:94:74:3d:bb:
b5:19:cb:1a:ce:6a:a6:b4:22:a2:94:13:2d:ce:cf:60:aa:13:
a5:5d:a7:bc:44:da:17:9b:d0:75:60:0a:83:f1:6f:c1:be:3c:
76:ee:36:5b:99:a6:97:21:4b:d9:43:4a:47:38:44:e6:dc:d2:
43:82:c0:ff:b4:29:8e:0b:a5:b0:c9:e8:18:59:99:c7:a8:ff:
df:7c:00:07:ee:e0:d1:c3:63:29:ce:fa:90:25:19:ca:c7:8a:
f5:0b:ca:76:77:55:25:26:ea:14:fd:a3:78:08:74:92:5d:8c:
8f:36:21:f3:8e:48:41:68:5c:52:e0:95:bf:2f:f8:f9:30:61:
61:ab:80:87:bf:b8:d3:ed:50:1b:9a:43:c3:ae:f3:8c:56:91:
2b:20:d8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:00 2024 by rpki-client on console-ams.rpki-client.org