Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ccc94b-c287-4e5f-8604-7e594f2494cc/1/6_CyYGQGCBF8QHJ-sxfcFDLG7uU.roa
File: 6_CyYGQGCBF8QHJ-sxfcFDLG7uU.roa (raw, json)
Hash identifier: fICWSmG2Op+gBcN8enPRRUmcuJU+D6pAvBGDR0BOO74=
Subject key identifier: EB:F0:B2:60:64:06:08:11:7C:40:72:7E:B3:17:DC:14:32:C6:EE:E5
Certificate issuer: /CN=763d457e5d3cc0acd8a74f8b10e2686bfbc496cb
Certificate serial: 018428C3509811E9EA3CB509F9E6DCBC9DF5
Authority key identifier: 76:3D:45:7E:5D:3C:C0:AC:D8:A7:4F:8B:10:E2:68:6B:FB:C4:96:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dj1Ffl08wKzYp0-LEOJoa_vElss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ccc94b-c287-4e5f-8604-7e594f2494cc/1/6_CyYGQGCBF8QHJ-sxfcFDLG7uU.roa
Signing time: Sun 30 Oct 2022 11:59:59 +0000
ROA not before: Sun 30 Oct 2022 11:59:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57271
IP address blocks: 31.24.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:28:c3:50:98:11:e9:ea:3c:b5:09:f9:e6:dc:bc:9d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=763d457e5d3cc0acd8a74f8b10e2686bfbc496cb
Validity
Not Before: Oct 30 11:59:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ebf0b260640608117c40727eb317dc1432c6eee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d2:ae:9a:83:8e:35:bf:9e:e7:88:29:a2:99:
cf:ec:1b:41:72:98:ab:75:4e:11:c8:73:61:a5:22:
a9:1e:e6:de:ff:2d:2f:a8:aa:77:e0:5b:3c:01:90:
92:50:f3:e0:96:d2:d7:9f:80:2c:0c:1e:8a:6c:cc:
c5:ae:58:bc:dc:e8:93:d8:34:d1:94:0e:6a:1f:6f:
68:e4:29:2f:c1:db:03:a0:69:50:e1:05:c1:f8:25:
6e:d1:f9:d1:1e:d4:07:9b:5a:3a:88:b1:64:17:a8:
32:b9:28:b5:3b:b8:28:de:9b:18:84:ab:13:20:ba:
52:7d:02:f9:60:d3:64:c0:2a:12:d6:5f:83:a3:89:
25:a3:53:72:a4:7b:28:5a:d3:12:a9:89:e2:9a:5b:
34:50:84:9c:51:44:83:9f:90:d8:b2:55:9d:a6:e2:
f9:03:ef:1f:56:d0:3a:21:7a:3f:97:a3:04:a3:e7:
81:f7:f7:72:44:a5:41:25:b7:c2:72:48:8f:e8:28:
1d:4d:fb:da:96:e2:e6:4f:89:9b:9e:d0:35:f5:1d:
3b:65:81:f0:92:92:46:34:11:30:3c:b3:0a:89:ee:
c8:7d:a9:e8:f6:92:f7:27:5e:97:e9:7d:d4:c3:c9:
62:49:b4:ca:a6:32:e7:33:11:03:61:b3:ed:4c:85:
32:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F0:B2:60:64:06:08:11:7C:40:72:7E:B3:17:DC:14:32:C6:EE:E5
X509v3 Authority Key Identifier:
keyid:76:3D:45:7E:5D:3C:C0:AC:D8:A7:4F:8B:10:E2:68:6B:FB:C4:96:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dj1Ffl08wKzYp0-LEOJoa_vElss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ccc94b-c287-4e5f-8604-7e594f2494cc/1/6_CyYGQGCBF8QHJ-sxfcFDLG7uU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ccc94b-c287-4e5f-8604-7e594f2494cc/1/dj1Ffl08wKzYp0-LEOJoa_vElss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.251.0/24
Signature Algorithm: sha256WithRSAEncryption
95:27:1f:d9:ca:76:fc:7e:26:3a:f3:b1:e2:f4:41:73:02:31:
5d:24:09:59:4a:2c:3b:08:12:3a:77:94:29:08:f9:9b:13:20:
d2:71:70:f7:50:f3:04:c2:f3:7f:64:42:0e:ff:4f:af:73:e1:
4d:7e:2c:c8:9c:e9:e7:3a:a5:23:34:02:6d:84:e9:1f:55:64:
1d:f8:34:cb:4b:5a:63:38:f3:d3:45:e5:3b:80:e7:bb:37:b5:
10:3f:f9:b7:4a:de:3c:82:18:6f:9b:d5:64:88:4a:6d:e8:13:
30:87:9e:e9:c0:24:6f:3b:55:eb:5b:76:7e:d5:a2:3f:a1:64:
63:d9:00:f4:82:58:1b:02:b5:d8:56:d1:5b:1b:e3:25:4d:dc:
94:5b:92:4c:25:67:a9:c9:ad:e1:36:aa:b9:4a:28:f5:0e:87:
58:77:8b:16:59:0b:bb:e8:ce:35:1c:6a:64:04:dd:8e:87:bd:
61:0f:6e:7c:13:2a:20:21:74:21:41:8d:c0:94:06:ff:dd:60:
44:34:2a:37:28:ea:d4:88:91:9a:c4:f8:c3:2b:a0:69:a2:8e:
22:59:06:34:41:e8:40:82:26:fa:f8:5c:d2:e5:1a:22:fd:bb:
75:2f:c0:55:0b:07:63:50:3c:26:45:12:aa:77:bf:8f:ee:f8:
7c:2d:7c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:32 2023 by rpki-client on console-fra.rpki-client.org