Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/31XwHTecFZ_Z36zDvh9s6XZ3Gi0.roa
File: 31XwHTecFZ_Z36zDvh9s6XZ3Gi0.roa (raw, json)
Hash identifier: ae1gdb4OP4Z0U4HSc5TNyBTS7SgaKZxJEgtiCjVXFpY=
Subject key identifier: DF:55:F0:1D:37:9C:15:9F:D9:DF:AC:C3:BE:1F:6C:E9:76:77:1A:2D
Certificate issuer: /CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Certificate serial: 0744C243
Authority key identifier: 60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/31XwHTecFZ_Z36zDvh9s6XZ3Gi0.roa
Signing time: Thu 03 Feb 2022 08:34:32 +0000
ROA not before: Thu 03 Feb 2022 08:34:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 212.11.64.0/24 maxlen: 24
192.35.206.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121946691 (0x744c243)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Validity
Not Before: Feb 3 08:34:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=df55f01d379c159fd9dfacc3be1f6ce976771a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d1:6d:04:82:36:b2:63:84:6b:4b:e7:ea:11:
7f:d3:2e:6c:98:a4:e2:5c:2d:a3:b2:bc:55:5e:4a:
57:0a:c2:ac:12:34:01:12:d2:73:4c:73:a6:6e:25:
95:4a:63:0e:b7:0c:96:d3:c5:c2:02:00:f5:6b:03:
1e:c9:92:39:ee:a8:23:dc:c9:4e:57:f6:a3:95:89:
81:86:db:6c:cb:d4:37:87:a7:86:95:df:48:f4:a6:
6f:1e:78:cc:fc:06:97:82:7a:e1:85:19:8b:59:93:
7a:0b:3f:70:3f:14:05:70:f8:8d:12:85:71:7d:ec:
1b:68:f8:98:e7:05:fc:50:ad:2c:61:5d:87:70:d9:
22:32:19:87:4e:e7:2c:e3:e3:d0:de:9c:25:b0:6a:
ee:47:c9:de:d8:07:41:7e:9c:95:8b:54:2f:64:5d:
90:96:55:b8:cd:2d:12:f9:50:a7:49:a4:c5:01:fe:
a6:ba:39:fc:3c:45:78:3b:fe:af:a1:b9:fe:5c:d0:
a2:53:c5:7a:9a:30:0c:c5:cf:66:c3:2a:63:96:b7:
8e:65:f6:7c:ba:0f:e8:35:69:d5:52:99:97:dc:ef:
38:9c:d5:95:f0:9f:b3:5a:05:1a:e8:29:e8:65:b7:
89:cd:9e:77:5c:7c:42:22:2f:b5:e5:46:78:a4:9c:
87:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:55:F0:1D:37:9C:15:9F:D9:DF:AC:C3:BE:1F:6C:E9:76:77:1A:2D
X509v3 Authority Key Identifier:
keyid:60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/31XwHTecFZ_Z36zDvh9s6XZ3Gi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.35.206.0/24
212.11.64.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:e2:63:ba:90:a0:dc:75:c3:64:3c:a5:dd:1e:c4:da:a3:2e:
af:c2:a1:fc:d7:5f:c1:0a:38:29:cc:5a:ff:a6:2f:c4:93:19:
e6:b5:1e:e9:bc:f8:da:4c:09:6a:c5:80:17:68:73:b2:e9:00:
43:62:e9:60:cb:a5:b7:a4:a2:84:90:0c:a9:3f:47:c1:59:21:
10:e0:64:18:48:2f:bd:6c:3a:d7:19:4c:06:64:ef:41:16:58:
e6:8a:10:79:c3:d2:56:58:ea:00:15:50:d4:31:21:c9:b8:79:
d9:ca:b0:ad:77:36:ea:3e:ab:f9:b0:10:a2:ad:b8:dc:e2:03:
74:78:5a:14:d4:c2:a6:a1:ed:b3:f3:85:26:50:e6:0a:72:9e:
8c:e9:d0:7f:a1:b5:86:45:74:62:69:5a:f4:19:fd:6c:07:0a:
c6:ba:97:b6:fd:af:78:64:ad:93:f6:63:db:3f:46:bf:64:35:
ff:c6:1a:20:77:78:31:33:f3:6b:ad:b6:df:23:15:94:e9:4c:
e0:d5:35:4e:e2:26:bc:85:32:5d:23:93:ed:a7:e4:86:0b:0a:
45:bb:89:75:61:1d:c9:c2:7b:db:af:d7:d4:76:a3:0e:41:43:
2c:2a:5f:f8:e9:92:0f:ec:68:85:0d:f6:20:c9:fe:f6:d5:79:
2f:6b:5d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:06 2024 by rpki-client on console-ams.rpki-client.org