Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/zgZ2n4JJxDFUB6__HDID3GxIFtI.roa
File: zgZ2n4JJxDFUB6__HDID3GxIFtI.roa (raw, json)
Hash identifier: n9E+iRfw/aPHcMz6a+dOMdPJz9l/Do08DJrZDNYFme0=
Subject key identifier: CE:06:76:9F:82:49:C4:31:54:07:AF:FF:1C:32:03:DC:6C:48:16:D2
Certificate issuer: /CN=588394e3910d94a7bf0a78a0f302d02ae9907273
Certificate serial: 0181D9766393AC8C570EBF41DF744E44675E
Authority key identifier: 58:83:94:E3:91:0D:94:A7:BF:0A:78:A0:F3:02:D0:2A:E9:90:72:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIOU45ENlKe_Cnig8wLQKumQcnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/zgZ2n4JJxDFUB6__HDID3GxIFtI.roa
Signing time: Thu 07 Jul 2022 16:20:23 +0000
ROA not before: Thu 07 Jul 2022 16:20:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56851
IP address blocks: 193.111.60.0/22 maxlen: 24
31.131.16.0/20 maxlen: 24
2001:67c:15e4::/48 maxlen: 48
2001:67c:15f0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d9:76:63:93:ac:8c:57:0e:bf:41:df:74:4e:44:67:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588394e3910d94a7bf0a78a0f302d02ae9907273
Validity
Not Before: Jul 7 16:20:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce06769f8249c4315407afff1c3203dc6c4816d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:be:ef:68:c1:bf:57:f9:11:79:b1:ea:bf:0b:
62:4c:ff:6d:23:98:8c:cb:47:0d:19:24:0c:77:84:
39:7e:d5:a5:f9:3b:59:eb:23:12:41:24:ce:19:67:
e3:de:44:29:a2:7a:8a:7f:b3:14:fe:f2:04:31:e6:
2a:56:f1:bd:e3:1e:dc:7a:4c:31:38:71:65:5b:68:
91:55:0f:e6:c4:24:65:10:50:2f:5e:32:9c:f7:59:
e0:09:fb:12:75:a9:48:1b:af:88:59:bd:55:02:4c:
c2:43:35:ac:61:d6:44:ea:f8:e2:7a:ac:9a:79:63:
81:ae:40:4c:8f:4c:56:2c:1a:b6:66:71:3b:59:65:
e1:8c:2b:49:bd:02:61:14:fb:29:4f:1f:a0:8f:65:
b1:8f:a0:7e:71:6e:7b:e8:9e:96:cd:c3:7c:ae:48:
1e:8c:1e:9c:67:ea:b5:11:80:a7:62:54:64:de:2a:
d7:35:cf:35:be:88:13:9d:50:17:33:84:e0:0e:e3:
7b:fe:35:04:47:f7:c0:c0:5d:15:b5:5c:5a:62:50:
9b:d5:5b:6c:95:cc:b9:cb:a5:d6:1a:87:b2:ac:fc:
0b:1a:b9:c5:d5:e9:a6:40:95:bb:aa:db:63:f1:61:
70:b0:9d:47:da:72:2d:4f:0f:71:1a:ab:4c:4a:2a:
47:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:06:76:9F:82:49:C4:31:54:07:AF:FF:1C:32:03:DC:6C:48:16:D2
X509v3 Authority Key Identifier:
keyid:58:83:94:E3:91:0D:94:A7:BF:0A:78:A0:F3:02:D0:2A:E9:90:72:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIOU45ENlKe_Cnig8wLQKumQcnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/zgZ2n4JJxDFUB6__HDID3GxIFtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.16.0/20
193.111.60.0/22
IPv6:
2001:67c:15e4::/48
2001:67c:15f0::/48
Signature Algorithm: sha256WithRSAEncryption
3b:9e:69:45:4c:89:6c:fa:6a:7c:02:34:06:35:9b:f8:cd:79:
4c:ea:f6:06:b7:ab:4e:b9:ac:15:38:83:17:20:8a:b3:b8:99:
44:9a:9a:77:76:03:23:68:61:23:52:84:e9:9f:00:df:b5:88:
1e:c5:6b:ff:80:ef:8a:2f:7b:ab:ad:12:57:b1:04:b8:ec:c4:
84:b2:1f:5e:37:83:33:5b:1c:76:db:c3:0a:7e:c0:11:09:3f:
47:71:02:08:76:99:83:84:49:3a:16:a6:81:95:d2:ed:e6:ac:
8a:6c:87:e0:8e:21:e8:5a:15:62:90:82:e0:fd:0a:f3:33:2a:
5f:61:4c:55:cd:0d:72:95:79:14:af:6f:97:47:33:49:08:3d:
59:63:c7:5b:57:f8:5e:97:72:9b:a7:90:42:ee:0b:4f:01:26:
72:61:3b:20:05:4a:20:ec:e4:a3:f1:e3:c0:d2:b8:24:f1:b0:
ac:6d:d3:64:de:f7:8b:86:c5:12:c8:c5:f8:fa:d5:f3:fc:02:
bc:7e:79:55:dc:c3:b5:eb:57:47:42:7d:34:6a:29:91:16:3c:
09:e3:90:e1:15:b6:a7:94:bd:8b:88:ca:9c:04:85:77:fd:19:
7f:95:49:c5:3a:3a:79:90:1f:a8:0b:09:57:fe:a6:e9:6c:df:
86:e2:ce:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:58 2024 by rpki-client on console-ams.rpki-client.org