Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/pHHj0hmFlB2LwX-Inir9eDKiMLA.roa
File: pHHj0hmFlB2LwX-Inir9eDKiMLA.roa (raw, json)
Hash identifier: /zABFXypMRo+377jsBBwvdKqLcmM1JzeX/WS1sZI8Rs=
Subject key identifier: A4:71:E3:D2:19:85:94:1D:8B:C1:7F:88:9E:2A:FD:78:32:A2:30:B0
Certificate issuer: /CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Certificate serial: 071B2E64
Authority key identifier: 60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/pHHj0hmFlB2LwX-Inir9eDKiMLA.roa
Signing time: Mon 17 Jan 2022 22:28:37 +0000
ROA not before: Mon 17 Jan 2022 22:28:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 212.11.64.0/24 maxlen: 24
192.35.206.0/24 maxlen: 24
31.25.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119221860 (0x71b2e64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Validity
Not Before: Jan 17 22:28:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a471e3d21985941d8bc17f889e2afd7832a230b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5a:82:aa:ff:26:2a:c3:fc:73:7f:c7:5d:ee:
e4:d9:08:f8:22:b1:5e:d8:e2:8b:48:36:d5:63:04:
88:97:13:a7:a1:14:f2:87:2e:b0:94:53:8a:e0:c0:
a6:ef:f1:7e:73:4b:af:59:43:c3:ca:bb:38:51:e3:
3b:38:2a:0e:a7:4c:d3:bf:cc:27:3a:7b:0f:20:2a:
3a:93:c2:ee:04:f8:85:39:0d:e1:06:be:27:1d:0b:
61:ce:2d:13:1a:bb:7b:dd:f3:70:b9:12:e0:c5:5d:
22:99:e0:db:d3:c8:ee:b4:95:1c:55:27:b8:f0:7a:
7c:1b:15:32:3a:00:bf:a6:ea:cd:1a:23:de:ba:74:
98:8a:3c:dc:3f:e6:ff:2c:ff:7f:2b:3b:0a:f8:45:
d0:4c:b2:a4:b0:2a:21:15:3a:8e:7b:77:d2:77:9d:
fb:1c:9f:0f:c9:3f:d0:df:a1:77:e1:a4:a1:50:78:
b0:ec:88:93:fe:fb:b3:bc:95:5c:d4:52:39:49:69:
00:99:74:13:b0:d4:ac:74:5e:fc:a2:b0:b6:80:3a:
fb:0d:d4:25:3f:fe:28:e9:01:2d:02:d7:d3:dc:5c:
5c:3e:65:8a:fd:2f:a6:34:65:46:aa:6a:82:d4:74:
07:c3:8c:44:81:28:45:03:d8:10:e9:21:d0:ab:46:
7c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:71:E3:D2:19:85:94:1D:8B:C1:7F:88:9E:2A:FD:78:32:A2:30:B0
X509v3 Authority Key Identifier:
keyid:60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/pHHj0hmFlB2LwX-Inir9eDKiMLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.11.0/24
192.35.206.0/24
212.11.64.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:bc:fe:de:93:74:e3:6e:73:99:2a:e8:6c:f7:df:07:0c:9e:
8c:23:cf:fa:13:3a:be:bc:cc:f8:59:9f:e7:08:08:6e:81:84:
29:d8:ae:50:88:b0:3d:2e:0f:26:bb:03:9a:36:d0:ec:96:18:
c6:c0:a1:16:c8:96:d5:37:3e:50:53:44:d5:6f:b3:bc:e8:24:
49:5d:c3:ae:91:64:55:62:b8:3c:78:6f:52:13:d4:fc:69:b2:
2e:26:13:02:9b:b2:4e:37:62:2e:84:54:3c:2e:60:6c:e5:2b:
96:7e:12:06:17:1f:21:cf:4b:ff:a2:92:0b:89:5a:88:86:32:
49:c4:7b:6f:27:97:66:32:50:51:f4:25:5b:7b:11:95:5e:36:
d3:0b:d7:78:68:63:78:c5:73:0b:ee:9f:2e:0d:a1:b2:1a:88:
b0:1d:5c:5a:6d:2d:c4:e7:d9:7e:1f:2b:16:0b:d8:c8:40:4b:
31:ba:da:f0:fe:7a:19:6e:fa:9e:e2:c7:6f:3f:39:43:02:71:
35:be:fd:3b:d4:2e:4b:33:ce:bc:49:2a:69:c0:2b:cc:87:16:
ea:b7:11:f6:80:2c:a0:aa:66:ea:5c:c8:01:94:3f:e7:62:b4:
c8:97:a4:58:97:bc:38:f9:4c:3b:33:ba:f6:35:74:fa:fa:3b:
cc:28:d7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:06 2024 by rpki-client on console-ams.rpki-client.org