Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/Rpyk9Sx-xoadXqut6iZttj31tBE.roa
File: Rpyk9Sx-xoadXqut6iZttj31tBE.roa (raw, json)
Hash identifier: BTkaKet53eOWEURjF7o4MmbstF4ud+eqCvsQJPlOVvQ=
Subject key identifier: 46:9C:A4:F5:2C:7E:C6:86:9D:5E:AB:AD:EA:26:6D:B6:3D:F5:B4:11
Certificate issuer: /CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Certificate serial: 0181F144E0D2AE6CCA3ED8C18C6B50130C14
Authority key identifier: 3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/Rpyk9Sx-xoadXqut6iZttj31tBE.roa
Signing time: Tue 12 Jul 2022 07:17:11 +0000
ROA not before: Tue 12 Jul 2022 07:17:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6663
IP address blocks: 31.210.8.0/21 maxlen: 21
86.106.122.0/23 maxlen: 23
185.74.20.0/22 maxlen: 22
89.43.132.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f1:44:e0:d2:ae:6c:ca:3e:d8:c1:8c:6b:50:13:0c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Validity
Not Before: Jul 12 07:17:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=469ca4f52c7ec6869d5eabadea266db63df5b411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1e:df:48:2d:61:8b:fe:96:ab:ed:a8:62:9e:
fa:54:de:b9:b5:f3:37:ba:01:63:97:ba:75:ae:32:
17:ad:63:f7:9d:b6:e2:93:8c:d6:7a:1f:f8:45:80:
58:95:d8:d0:9f:0d:de:ff:db:4d:16:ef:1a:8d:11:
6b:ab:7a:75:b7:e4:e5:a7:75:84:e3:4c:77:5f:bf:
7a:6a:a3:34:3f:c4:d6:f2:c5:ac:44:21:8c:df:cc:
9e:e6:98:ae:b7:50:eb:5a:35:ee:7e:75:5e:1a:70:
49:7a:c6:99:13:6d:80:39:71:09:10:b3:c8:aa:74:
47:67:90:cc:16:f6:de:d1:58:e9:c9:eb:62:9b:4f:
4a:27:fc:87:2f:40:fe:a7:08:c6:5b:4f:45:c3:fa:
7a:a6:7b:b8:9a:f3:e8:e6:d8:b8:48:7f:37:ed:6d:
7e:ba:d5:ab:27:7d:39:c4:a2:7b:6f:13:45:2e:1e:
74:bf:f6:41:48:1d:cc:5b:8f:e1:15:10:de:7d:11:
40:89:4c:3f:dd:9d:3d:89:87:2c:ff:75:5c:88:d2:
14:41:57:6e:7c:66:8d:49:08:ae:40:2b:83:0a:bb:
4f:ed:32:80:bd:a6:c1:d3:c6:ec:94:4b:fa:95:41:
44:34:34:b8:e3:52:64:c7:b2:70:2f:98:93:c4:15:
87:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:9C:A4:F5:2C:7E:C6:86:9D:5E:AB:AD:EA:26:6D:B6:3D:F5:B4:11
X509v3 Authority Key Identifier:
keyid:3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/Rpyk9Sx-xoadXqut6iZttj31tBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.8.0/21
86.106.122.0/23
89.43.132.0/22
185.74.20.0/22
Signature Algorithm: sha256WithRSAEncryption
99:6a:51:2f:3a:06:aa:70:cf:0e:d9:8e:b3:d1:12:4f:c8:39:
54:d8:fa:04:cb:71:50:55:1c:07:77:2f:a1:75:9f:1c:7e:be:
70:38:9a:1b:12:1e:03:9a:06:ec:10:77:54:ec:9a:b2:f0:c4:
f4:8a:57:21:39:a1:d5:86:0c:e2:8c:53:97:98:22:8b:c6:39:
e1:cb:2a:ed:af:ad:66:52:e3:45:b1:16:69:11:a5:66:7a:96:
aa:10:75:6a:f8:65:06:29:39:9f:00:40:b9:26:07:c0:48:2e:
f5:5b:88:95:9d:a8:5f:cd:40:f0:b3:45:88:61:fb:69:47:72:
93:12:8c:63:7a:c5:e4:a9:c6:4c:6a:cc:26:79:70:a3:2f:87:
d2:6a:b7:1d:92:b9:f3:5b:0b:59:fb:58:16:f5:d1:15:71:a9:
83:a2:7d:ef:c7:fd:87:1e:0d:70:19:89:af:d2:99:ab:25:a2:
7a:43:cb:ad:1c:02:56:c8:ea:6a:aa:aa:20:32:86:65:85:11:
32:94:8f:65:46:0b:b6:5b:87:94:40:f7:30:42:a1:d1:2d:d5:
b7:e2:96:23:36:bb:32:97:c9:be:c3:06:c0:ba:6d:1f:7e:10:
03:5f:3a:4c:6b:6f:c9:20:82:81:b9:13:49:20:bf:ba:ed:85:
70:92:24:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:33 2024 by rpki-client on console-ams.rpki-client.org