Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/jyTP6vWa5-BLDRfsmaeUYlb94mA.roa
File: jyTP6vWa5-BLDRfsmaeUYlb94mA.roa (raw, json)
Hash identifier: JIk0U+DBTia57OP1HdI97+b3P/bPuW+GJGZYF4R5gcU=
Subject key identifier: 8F:24:CF:EA:F5:9A:E7:E0:4B:0D:17:EC:99:A7:94:62:56:FD:E2:60
Certificate issuer: /CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Certificate serial: 07571C9D
Authority key identifier: 60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/jyTP6vWa5-BLDRfsmaeUYlb94mA.roa
Signing time: Wed 09 Feb 2022 11:08:18 +0000
ROA not before: Wed 09 Feb 2022 11:08:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 31.25.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123149469 (0x7571c9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Validity
Not Before: Feb 9 11:08:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f24cfeaf59ae7e04b0d17ec99a7946256fde260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f3:20:26:31:aa:0d:7f:6d:d7:62:2f:96:77:
56:e4:da:a5:70:14:1c:76:49:92:a9:50:d2:ff:a7:
2b:22:95:78:25:00:12:35:74:62:02:a2:f4:8e:55:
d8:48:48:f0:32:a7:c3:ce:e8:3d:00:b0:f7:fc:21:
5a:0f:ac:3d:e1:01:c7:df:ff:a0:29:04:64:be:d4:
9b:9b:f6:68:ee:81:f9:2b:14:a1:53:81:11:7a:df:
45:47:21:a6:71:8f:e9:1f:13:d5:a4:04:92:92:b1:
5b:ea:72:90:80:1a:13:47:b8:43:03:3c:ad:25:36:
dd:cd:06:89:fb:52:42:4a:db:48:b0:7a:fc:66:b1:
93:4d:8e:f5:9b:2e:a9:21:fd:cb:7c:c7:e2:7b:79:
21:d9:62:aa:e8:46:aa:7c:c7:3e:36:80:87:85:8a:
4a:38:00:03:af:d1:23:7b:42:d7:d4:73:68:d5:74:
14:a0:df:af:82:e8:e2:f1:f3:17:1c:dd:c6:b5:47:
aa:c1:f9:5e:c1:c5:b7:eb:b7:5b:ba:de:e0:62:62:
8e:d7:45:e6:fd:7c:ca:bd:54:3f:60:f4:0d:49:be:
54:0b:b3:9f:b5:cd:20:41:4e:f0:09:b0:7d:4c:e5:
f9:8c:0e:7f:45:a1:fe:9a:9c:3b:f4:d5:21:06:c1:
4a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:24:CF:EA:F5:9A:E7:E0:4B:0D:17:EC:99:A7:94:62:56:FD:E2:60
X509v3 Authority Key Identifier:
keyid:60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/jyTP6vWa5-BLDRfsmaeUYlb94mA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.11.0/24
Signature Algorithm: sha256WithRSAEncryption
57:60:64:22:fc:03:52:84:c7:4b:25:ad:c5:bb:5e:8d:1f:f9:
52:0f:cc:f6:d1:d2:ba:7f:d4:a8:1f:2b:fd:5c:83:9b:39:ad:
2c:7e:33:b9:62:11:3d:ce:f8:66:cf:b1:2b:00:05:f4:5d:76:
d7:c3:3a:17:b4:1e:59:85:f4:3c:eb:3e:46:f3:7d:d6:2a:85:
3f:3e:ef:dc:ef:fa:76:fa:72:11:5f:10:d4:06:3c:fc:08:7a:
f1:5d:10:e1:72:c8:c9:f4:17:1f:a4:59:74:02:92:20:e8:bb:
f6:9f:a2:a9:b4:6b:ae:fa:8d:e6:07:73:c6:7d:96:03:bb:df:
33:dc:69:16:3f:b0:f5:cc:f1:6c:5b:18:6f:3b:a5:a0:11:32:
d0:1e:5a:10:73:65:a5:5f:a0:67:5d:87:83:09:1b:0b:c3:c9:
35:91:40:ca:eb:f6:a9:f6:2e:eb:10:2c:e1:6b:73:dc:68:73:
69:0b:58:dc:79:21:c9:97:41:ac:9b:ff:bd:4f:9a:75:c2:89:
03:9d:9c:3a:5c:c0:27:49:0b:bf:63:59:42:67:da:c6:3c:9d:
9b:96:af:de:9b:50:37:ec:36:fc:fc:a4:07:4d:aa:c0:83:5d:
81:71:09:47:91:5b:55:e1:92:8d:6c:fb:93:60:37:a3:67:3c:
b7:ef:d8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:37 2024 by rpki-client on console-fra.rpki-client.org