Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/1t4rM2kZ-le-ZZ3sJTIHxzRnllI.roa
File: 1t4rM2kZ-le-ZZ3sJTIHxzRnllI.roa (raw, json)
Hash identifier: pEluGjN7UZW7d+cXWSr/EPsaW5KFfj7UhbwNLg+p2wc=
Subject key identifier: D6:DE:2B:33:69:19:FA:57:BE:65:9D:EC:25:32:07:C7:34:67:96:52
Certificate issuer: /CN=2688ef373f8f00e01c25cf924b4f2e8ec6a219d1
Certificate serial: 4154C6DC
Authority key identifier: 26:88:EF:37:3F:8F:00:E0:1C:25:CF:92:4B:4F:2E:8E:C6:A2:19:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/1t4rM2kZ-le-ZZ3sJTIHxzRnllI.roa
Signing time: Sat 01 Jan 2022 11:57:56 +0000
ROA not before: Sat 01 Jan 2022 11:57:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3549
IP address blocks: 31.204.115.0/24 maxlen: 24
79.171.60.0/24 maxlen: 24
37.130.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1096074972 (0x4154c6dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2688ef373f8f00e01c25cf924b4f2e8ec6a219d1
Validity
Not Before: Jan 1 11:57:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6de2b336919fa57be659dec253207c734679652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cc:6a:59:a7:70:a3:d0:30:b8:28:fe:83:2d:
62:73:2b:98:c7:7e:09:f1:17:60:69:6e:f2:bc:85:
2f:96:74:a9:e0:7c:51:24:92:a8:31:e5:13:44:34:
bc:b1:80:c3:8c:21:b6:a8:48:28:5e:df:fd:2c:8a:
ec:8f:dc:5d:da:00:b1:34:93:75:37:01:79:4c:80:
96:b4:d8:4c:20:f2:0f:e0:a8:a0:76:a0:69:48:dc:
ae:0d:7d:40:b4:34:42:c6:c5:c7:27:6f:67:52:e4:
ab:52:16:f3:65:37:13:91:b7:9e:17:71:eb:d1:db:
80:00:12:17:68:50:9a:d2:03:0a:9b:3b:7c:cf:1b:
4c:aa:da:15:06:a1:b2:c1:36:74:61:a0:57:71:d3:
d2:b0:52:8f:ef:d5:d6:0a:25:30:81:ad:03:a2:a2:
a8:33:0b:3a:ba:a9:ae:0f:16:7b:07:f5:1a:ff:2c:
fa:fc:34:5d:14:c1:4d:71:73:f3:ab:28:f0:be:ba:
cf:2c:18:49:5c:81:4f:2b:eb:58:29:7f:c9:6f:2b:
d1:ff:71:d4:cb:d8:9a:bb:a4:03:ff:1a:ae:dd:31:
11:0a:6a:4f:ec:fc:3f:15:c5:86:0b:9b:e2:29:af:
ba:37:3b:96:0f:51:86:8f:ab:de:b3:86:7f:20:6e:
ae:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DE:2B:33:69:19:FA:57:BE:65:9D:EC:25:32:07:C7:34:67:96:52
X509v3 Authority Key Identifier:
keyid:26:88:EF:37:3F:8F:00:E0:1C:25:CF:92:4B:4F:2E:8E:C6:A2:19:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/1t4rM2kZ-le-ZZ3sJTIHxzRnllI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.204.115.0/24
37.130.130.0/24
79.171.60.0/24
Signature Algorithm: sha256WithRSAEncryption
06:ef:2a:29:e9:ff:af:b6:df:f7:82:21:c1:dd:d1:44:6c:03:
8b:84:22:a5:9f:5d:e6:e3:e6:70:5d:aa:dd:3b:3f:0f:32:75:
e5:ca:bb:62:9b:8f:18:ef:43:8c:f5:c1:65:11:e1:d9:dc:de:
d3:d0:95:3b:c1:35:38:50:18:77:f0:47:b3:16:98:67:69:2a:
84:40:b3:c7:2f:bc:ca:7a:c3:dd:b9:0e:b4:9a:0f:36:e7:d7:
52:18:e8:8c:d3:07:b9:1c:3d:9e:21:fb:09:a7:13:ee:f2:fc:
42:27:20:53:ae:10:ae:90:b7:6c:da:f8:d9:80:f9:5e:30:2f:
02:96:37:e8:e7:87:34:43:35:ad:38:27:b2:78:0c:6d:96:b2:
98:b2:91:17:7a:b3:09:10:5e:68:d0:d8:96:4c:73:a1:3a:9b:
3f:e4:a9:3b:0a:7c:83:e8:94:e4:da:e6:6e:b5:38:59:25:11:
bf:46:ef:62:10:37:2b:21:34:61:ff:51:a3:e2:7b:0b:24:b4:
3e:e5:fd:ad:92:54:ea:22:53:30:fd:2b:6a:fc:90:e0:f4:87:
fb:d1:c2:dc:e3:eb:de:7e:bd:cc:9c:75:d7:10:2d:74:63:04:
60:05:d4:b9:a0:fb:b0:07:6b:0e:cd:93:6c:54:c5:38:53:2f:
01:b9:6c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:45 2024 by rpki-client on console-ams.rpki-client.org