Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/X-2TuEPoxc9K3Lu1TRsKht2bW7c.roa
File: X-2TuEPoxc9K3Lu1TRsKht2bW7c.roa (raw, json)
Hash identifier: Mro6/6k1XqcCM+OtDG3UwaEdnBUN80mGL3wKGMT/m40=
Subject key identifier: 5F:ED:93:B8:43:E8:C5:CF:4A:DC:BB:B5:4D:1B:0A:86:DD:9B:5B:B7
Certificate issuer: /CN=e87cc680c85983e7bf74498d0e6be800f86451c3
Certificate serial: 0184ECC67769BF383455193263B318FF25C7
Authority key identifier: E8:7C:C6:80:C8:59:83:E7:BF:74:49:8D:0E:6B:E8:00:F8:64:51:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6HzGgMhZg-e_dEmNDmvoAPhkUcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/X-2TuEPoxc9K3Lu1TRsKht2bW7c.roa
Signing time: Wed 07 Dec 2022 13:29:00 +0000
ROA not before: Wed 07 Dec 2022 13:29:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51048
IP address blocks: 185.2.196.0/22 maxlen: 24
31.210.24.0/21 maxlen: 24
64.253.32.0/19 maxlen: 24
2a03:4300::/29 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ec:c6:77:69:bf:38:34:55:19:32:63:b3:18:ff:25:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e87cc680c85983e7bf74498d0e6be800f86451c3
Validity
Not Before: Dec 7 13:29:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5fed93b843e8c5cf4adcbbb54d1b0a86dd9b5bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:38:3f:84:f6:23:8c:5f:bb:6d:a6:c0:dd:e7:
c8:03:24:f0:9d:d0:65:87:a3:c8:a5:f9:e5:73:c0:
c0:ce:60:8f:44:3b:0c:d3:46:6d:66:64:f6:58:af:
b5:22:28:10:43:82:a1:11:00:52:f4:bc:5f:86:fa:
ef:10:b7:4c:b1:b7:98:6b:29:84:2e:6f:7e:64:6d:
06:2e:f7:a3:b1:0a:6d:97:d6:6f:95:fe:0b:27:fd:
f4:3c:02:56:b8:0f:9e:df:c4:c6:08:6e:c4:b6:68:
be:2e:4d:12:b8:dd:a7:7f:18:ee:d0:6c:1f:5b:e0:
6b:70:a9:7c:ef:de:cd:91:b6:a3:0f:15:61:c6:c7:
4a:9b:52:75:fe:70:d4:fd:a6:89:b6:24:d8:bd:1d:
ff:23:81:54:14:ac:f3:c7:38:df:81:ab:fa:92:4e:
45:fe:29:0e:77:43:d7:5b:11:31:12:97:aa:7d:b9:
b6:47:32:fe:0f:7e:32:88:95:ab:94:bb:24:cc:58:
ca:3c:eb:21:53:6c:e9:f5:8b:16:55:52:56:ee:5a:
18:8e:d5:c5:9a:e7:a1:c3:3a:7d:70:87:13:32:cc:
72:e7:f5:e4:36:22:7c:0b:71:80:b6:56:9e:ee:98:
35:2e:28:29:cc:38:3a:a8:43:83:a3:3b:3f:e8:8a:
02:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:ED:93:B8:43:E8:C5:CF:4A:DC:BB:B5:4D:1B:0A:86:DD:9B:5B:B7
X509v3 Authority Key Identifier:
keyid:E8:7C:C6:80:C8:59:83:E7:BF:74:49:8D:0E:6B:E8:00:F8:64:51:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HzGgMhZg-e_dEmNDmvoAPhkUcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/X-2TuEPoxc9K3Lu1TRsKht2bW7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.24.0/21
64.253.32.0/19
185.2.196.0/22
IPv6:
2a03:4300::/29
Signature Algorithm: sha256WithRSAEncryption
50:8c:39:d9:83:eb:da:26:7b:0f:6b:50:f4:92:a7:a6:b7:fe:
77:7f:34:45:62:ae:99:38:77:f6:ff:c3:f7:f8:3d:7a:da:ef:
a2:33:39:c0:94:6f:76:49:77:58:e3:6c:62:6b:d5:a1:fb:62:
45:c2:fc:13:18:36:3d:6a:82:05:9c:07:db:dd:a6:16:7f:21:
48:f5:ab:f9:51:13:02:44:fe:50:1e:0f:47:96:f3:c9:53:07:
04:25:20:8c:0f:06:f0:92:9e:ff:fe:af:16:77:bd:6d:23:e6:
23:20:01:09:c6:d5:62:ad:7d:05:a5:42:7a:53:4f:ce:bc:b0:
36:5a:59:27:05:68:92:38:e8:fc:6d:de:37:fd:30:fb:4a:ec:
fd:49:bc:f4:07:09:64:17:72:6c:47:65:4b:73:93:4d:a2:36:
85:d2:ce:b8:f0:2b:ac:1e:00:08:00:49:8c:74:2f:d0:f9:e7:
c9:82:f3:d4:60:f6:58:43:f1:f4:6d:7b:5e:a5:aa:78:e6:08:
bf:e9:71:91:3b:5e:d2:10:2e:f2:d9:c9:4f:ec:f5:65:62:96:
60:09:41:44:a4:8a:4b:17:89:0a:df:89:44:8f:68:61:72:b4:
ae:68:65:a0:74:b9:8d:3b:3c:34:4e:f2:8c:5e:0a:4c:a9:fd:
ca:c3:d3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:39 2024 by rpki-client on console-fra.rpki-client.org