Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/c6HTSpmSjHV1gceH_cYIdSghXUU.roa
File: c6HTSpmSjHV1gceH_cYIdSghXUU.roa (raw, json)
Hash identifier: gEbwn+VtWd2Ld5TO/aK877Gn3DxHBvoloP+7hQckzzI=
Subject key identifier: 73:A1:D3:4A:99:92:8C:75:75:81:C7:87:FD:C6:08:75:28:21:5D:45
Certificate issuer: /CN=8ecc229e5699105828564b78509f3b72f3090a21
Certificate serial: 0633A444
Authority key identifier: 8E:CC:22:9E:56:99:10:58:28:56:4B:78:50:9F:3B:72:F3:09:0A:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/c6HTSpmSjHV1gceH_cYIdSghXUU.roa
Signing time: Sat 01 Jan 2022 10:01:23 +0000
ROA not before: Sat 01 Jan 2022 10:01:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48024
IP address blocks: 31.22.104.0/22 maxlen: 24
31.22.104.0/24 maxlen: 24
31.22.105.0/24 maxlen: 24
31.22.107.0/24 maxlen: 24
31.22.106.0/24 maxlen: 24
2a02:7080:3000::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104047684 (0x633a444)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ecc229e5699105828564b78509f3b72f3090a21
Validity
Not Before: Jan 1 10:01:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=73a1d34a99928c757581c787fdc6087528215d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:88:24:34:5a:c0:5c:23:60:da:ca:c4:38:11:
2e:96:be:ae:fc:c9:36:c8:d4:30:88:95:b5:4b:b4:
80:39:a4:5a:8d:12:09:7e:21:5b:92:5d:38:eb:52:
98:d5:3f:19:b7:71:53:35:df:32:74:f0:4c:30:2f:
d5:c7:66:9f:8f:f7:33:53:3f:33:b9:1c:30:44:89:
54:2d:f9:49:a4:90:9f:31:66:e2:bd:bc:58:e8:42:
6c:b7:2a:8e:2d:bf:b3:79:83:b2:a9:4a:00:56:f0:
7a:7d:a4:41:05:68:fd:08:6c:9a:88:c5:55:4e:11:
fd:1c:41:74:c8:b2:86:7d:c6:b8:f5:a7:60:64:a6:
27:fe:66:73:80:cd:20:8b:3c:98:f7:21:20:a2:b6:
55:5c:26:7b:fe:e6:aa:f7:cc:1b:2f:13:70:82:02:
04:f4:90:98:3e:ea:57:cb:f4:bd:15:8d:cd:d2:72:
94:5c:0a:23:6e:02:74:5e:da:df:af:33:f9:f6:b6:
fc:bb:1d:74:0a:5c:39:bc:8e:f8:52:03:b6:b5:f8:
e2:89:a1:f1:c0:1e:f6:0c:aa:83:a4:b5:86:f9:7c:
ef:31:87:66:6b:70:d4:b3:33:5a:65:4c:df:77:46:
ef:81:6e:c1:72:f8:68:31:1b:13:de:8b:91:10:4c:
fb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A1:D3:4A:99:92:8C:75:75:81:C7:87:FD:C6:08:75:28:21:5D:45
X509v3 Authority Key Identifier:
keyid:8E:CC:22:9E:56:99:10:58:28:56:4B:78:50:9F:3B:72:F3:09:0A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/c6HTSpmSjHV1gceH_cYIdSghXUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.104.0/22
IPv6:
2a02:7080:3000::/36
Signature Algorithm: sha256WithRSAEncryption
23:c7:ab:90:39:d6:e9:69:c6:15:6e:53:c4:2f:38:f7:67:ce:
8f:6c:0c:5f:1b:1e:15:70:be:20:a2:a2:8f:70:1f:41:6c:83:
b1:36:23:d2:44:9b:26:d2:70:0b:b3:a3:b2:c9:7f:fd:2c:e7:
92:0b:c0:1b:08:64:e0:ce:19:a3:0b:6c:fc:59:85:53:9b:92:
83:6a:00:57:2d:12:e3:10:40:e5:9c:c0:1e:3d:75:83:d1:e8:
11:8f:75:f8:5c:de:6b:08:98:ab:9a:c0:88:a7:cf:14:53:6e:
b3:9d:4c:5d:d0:ba:1b:0a:6b:64:af:4d:a8:66:d1:ea:9b:71:
35:9d:09:a5:00:f2:0e:a4:f4:49:75:b3:97:81:ac:f4:cf:9f:
8c:92:0d:78:89:d2:ec:98:74:2c:b6:8a:46:ee:2d:78:ea:1d:
7c:54:f8:7a:30:ce:02:d5:5b:1a:4b:a2:80:28:97:52:77:ce:
77:b6:80:54:ec:31:96:7a:47:62:f8:7e:87:cd:db:d9:33:49:
35:61:8d:56:9d:c0:0e:44:0f:20:9a:ce:e3:cf:bf:62:8a:a8:
e7:c7:68:23:07:bf:35:63:56:93:0f:45:10:cb:df:8d:2f:5a:
6a:fe:86:07:78:6a:57:c2:de:4f:f9:db:3d:25:52:42:87:2b:
7b:46:bd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:34 2024 by rpki-client on console-ams.rpki-client.org