Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/dDQZkkIbwq5sViyCP4D5a0LdSHA.roa
File: dDQZkkIbwq5sViyCP4D5a0LdSHA.roa (raw, json)
Hash identifier: kygRidfHSMb6ASTY7Ln+oQFUwJY/TKEoGLpCg17fB94=
Subject key identifier: 74:34:19:92:42:1B:C2:AE:6C:56:2C:82:3F:80:F9:6B:42:DD:48:70
Certificate issuer: /CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Certificate serial: 19F89791
Authority key identifier: 60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/dDQZkkIbwq5sViyCP4D5a0LdSHA.roa
Signing time: Sat 01 Jan 2022 11:03:12 +0000
ROA not before: Sat 01 Jan 2022 11:03:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42833
IP address blocks: 5.104.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435722129 (0x19f89791)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Validity
Not Before: Jan 1 11:03:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=74341992421bc2ae6c562c823f80f96b42dd4870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4e:d3:80:ee:b8:bb:08:ce:cb:d1:95:f1:2a:
a5:53:f3:19:08:9f:2a:9f:f8:b8:18:b4:7f:d6:bc:
f1:4f:90:0f:97:01:42:03:b0:a4:77:fe:17:90:a9:
93:52:4d:4d:bd:1e:5f:35:aa:9b:00:8d:db:d0:5c:
e5:f4:bf:da:41:59:c0:8b:8b:91:4f:27:49:8e:88:
8c:68:8e:ce:66:8a:f5:62:a9:49:4b:2c:25:c9:1c:
bd:72:db:73:07:c7:bb:0f:4d:92:7f:f4:04:81:a3:
12:9f:a6:26:cd:33:65:be:93:06:27:32:1f:26:c0:
00:23:51:5d:02:cc:1b:b5:73:61:3e:b2:2b:58:3a:
58:88:9f:00:34:86:5a:b9:fc:24:b5:13:65:86:5d:
5e:fd:78:a9:ff:7c:fa:54:4a:54:8a:9a:35:15:3e:
10:47:fc:73:59:95:e6:36:35:c8:a5:e2:e6:fe:93:
82:53:af:54:1b:2a:3f:21:43:23:b2:24:93:3e:9f:
ef:72:ea:bc:a6:21:26:97:9b:58:89:62:5b:56:7d:
a7:71:d5:8c:be:69:29:53:ce:ad:86:34:c4:11:32:
68:ef:db:de:f6:3a:87:7a:cb:e4:b2:a9:ae:41:76:
89:d4:b0:47:78:1f:2d:80:62:41:ca:6a:58:8f:5c:
bc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:34:19:92:42:1B:C2:AE:6C:56:2C:82:3F:80:F9:6B:42:DD:48:70
X509v3 Authority Key Identifier:
keyid:60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/dDQZkkIbwq5sViyCP4D5a0LdSHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.31.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:47:b7:13:66:a5:2e:b3:54:ba:22:e9:d9:aa:a2:c7:be:1f:
e6:5a:d2:2f:52:ce:85:f9:2c:47:1e:3a:58:97:f9:94:13:0d:
81:10:34:ea:49:85:d0:ff:23:ff:bd:00:01:48:d1:da:f8:cc:
fa:4b:97:6d:ef:20:17:65:f2:d5:81:45:3d:6a:a3:01:06:8d:
ba:c1:e8:fe:a8:d4:6d:d0:49:af:13:ef:75:d0:95:4b:49:fa:
91:1d:f1:19:d7:50:59:00:a5:b0:e8:68:c8:5a:43:7e:c1:58:
3b:29:b5:cc:df:82:99:62:cb:b6:c3:1b:3a:e6:81:de:39:41:
5f:21:b2:76:6f:34:97:d9:df:eb:e1:4d:57:d0:83:f3:21:67:
8b:e6:69:07:38:be:ec:38:29:8c:54:ac:fb:22:06:78:fd:27:
fd:c6:9b:0e:9a:b1:63:5b:9b:9c:45:86:06:89:cd:cb:99:39:
3e:53:b0:ff:32:44:d1:a0:53:aa:8a:c2:26:58:e2:8e:72:8e:
e4:9c:96:d8:2b:85:3f:5d:5b:88:99:9b:bb:a2:df:68:34:9e:
47:46:7b:6f:7c:c9:8d:4c:73:c7:2e:49:64:ff:4a:15:d3:62:
9f:19:3e:ce:38:b3:40:45:5f:ac:c0:37:43:ae:0c:03:d2:d0:
64:2c:84:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:10 2023 by rpki-client on console-ams.rpki-client.org