Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/04e8f4-05db-4eff-9dda-f32cfa059e2f/1/yJzkdGQlukFfBreVN_GGL6sNX20.roa
File: yJzkdGQlukFfBreVN_GGL6sNX20.roa (raw, json)
Hash identifier: O/AJDLh9MHC01Gj4TTVONYq+YwYjwabijlKfJn+NX3Q=
Subject key identifier: C8:9C:E4:74:64:25:BA:41:5F:06:B7:95:37:F1:86:2F:AB:0D:5F:6D
Certificate issuer: /CN=3d9b6b7cc780ab030191c19690aff70fe1beef45
Certificate serial: BE617A
Authority key identifier: 3D:9B:6B:7C:C7:80:AB:03:01:91:C1:96:90:AF:F7:0F:E1:BE:EF:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZtrfMeAqwMBkcGWkK_3D-G-70U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/04e8f4-05db-4eff-9dda-f32cfa059e2f/1/yJzkdGQlukFfBreVN_GGL6sNX20.roa
Signing time: Sat 01 Jan 2022 06:57:46 +0000
ROA not before: Sat 01 Jan 2022 06:57:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 31.222.252.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12476794 (0xbe617a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9b6b7cc780ab030191c19690aff70fe1beef45
Validity
Not Before: Jan 1 06:57:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c89ce4746425ba415f06b79537f1862fab0d5f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:79:aa:22:14:f0:d9:5f:e8:df:9b:78:95:70:
60:44:c8:76:04:7d:2a:9a:2a:1d:59:a0:02:b2:f7:
5f:4a:a5:a6:77:0c:97:75:ca:81:60:34:14:a9:12:
e9:8b:99:63:e5:79:60:67:87:1f:d9:8b:e4:23:6c:
fe:26:b3:fc:3d:7b:c4:56:f7:3e:8d:ec:e0:e4:7a:
df:68:24:b3:df:25:bb:b1:fe:20:3e:b8:66:4d:e3:
91:53:4f:00:d7:f2:f3:f1:d8:cc:4b:90:cb:b5:4c:
d5:83:15:33:39:b6:eb:44:da:6e:5f:5f:91:8c:b2:
21:24:81:06:a8:06:f3:95:7e:c6:45:28:1d:36:b1:
e7:06:1a:25:9b:f8:1e:63:fc:33:b6:33:bf:96:21:
bc:ca:79:a9:c5:d2:09:ef:0c:76:81:c9:5f:b4:dd:
bc:aa:90:0b:90:60:f3:69:71:41:2c:a3:07:4d:1b:
e2:6d:f1:2a:86:e9:16:bd:a8:bb:d7:75:58:d3:dc:
c9:b0:ec:ac:a1:6d:fd:33:53:01:27:92:3a:53:95:
1e:75:a0:e7:22:72:fb:64:36:c3:5d:62:c9:1d:0a:
5d:87:a0:75:11:5b:12:86:5e:81:a3:e4:7c:c6:ec:
c8:2c:40:cf:34:f7:89:9f:6e:ca:f4:d1:6c:0d:e6:
61:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9C:E4:74:64:25:BA:41:5F:06:B7:95:37:F1:86:2F:AB:0D:5F:6D
X509v3 Authority Key Identifier:
keyid:3D:9B:6B:7C:C7:80:AB:03:01:91:C1:96:90:AF:F7:0F:E1:BE:EF:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZtrfMeAqwMBkcGWkK_3D-G-70U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/04e8f4-05db-4eff-9dda-f32cfa059e2f/1/yJzkdGQlukFfBreVN_GGL6sNX20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/04e8f4-05db-4eff-9dda-f32cfa059e2f/1/PZtrfMeAqwMBkcGWkK_3D-G-70U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.252.0/24
Signature Algorithm: sha256WithRSAEncryption
51:86:3c:4a:6d:59:9c:3a:be:a6:64:f3:f3:84:06:8d:3d:74:
61:b5:bc:84:6c:3c:e7:86:74:24:c1:e7:b8:d4:9c:83:43:53:
68:5c:03:fb:05:dc:f7:37:be:95:d0:74:26:4e:25:ed:12:ba:
23:17:27:64:3a:97:ab:e8:98:f5:8f:e4:17:73:71:90:c1:78:
29:bd:02:25:6f:4b:6a:97:d2:5d:9f:38:f6:0a:f0:92:89:8c:
13:d8:59:ab:81:03:80:ee:39:84:de:bf:0f:f7:f9:e9:40:aa:
09:7c:a5:c8:8a:fa:99:24:e6:d0:1a:ea:1e:e8:3a:be:b5:06:
c4:21:ea:d8:60:db:7b:8f:3b:eb:6d:3f:ba:6e:f3:eb:d4:3c:
e1:a5:2b:44:9f:2b:bd:5e:22:bc:ab:1c:ea:7e:64:3d:45:3e:
fb:39:9a:9e:d3:cf:63:de:31:8f:19:89:ba:c5:ce:5a:d8:dd:
da:e3:0b:ce:eb:04:72:eb:e7:c0:45:ab:1f:63:49:df:fa:29:
67:ac:5f:98:4e:53:3b:59:78:b3:01:c9:20:99:93:94:89:49:
ff:a8:a1:cd:8c:bc:f6:63:eb:1b:f7:87:1a:68:b1:a1:0f:c1:
2f:46:ea:54:74:18:d1:02:06:fd:76:c6:3f:a6:24:40:5f:60:
63:8c:cc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:36 2023 by rpki-client on console-fra.rpki-client.org