Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/tOZts505t34-v3NiL5y-2Ex_EdM.roa
File: tOZts505t34-v3NiL5y-2Ex_EdM.roa (raw, json)
Hash identifier: 8ddiElepJU1QI92z6PYabEvLH3CWwIkNcSg0CQhQNm8=
Subject key identifier: B4:E6:6D:B3:9D:39:B7:7E:3E:BF:73:62:2F:9C:BE:D8:4C:7F:11:D3
Certificate issuer: /CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Certificate serial: 08597416
Authority key identifier: 60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/tOZts505t34-v3NiL5y-2Ex_EdM.roa
Signing time: Wed 25 May 2022 07:55:15 +0000
ROA not before: Wed 25 May 2022 07:55:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 132316
IP address blocks: 31.25.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140080150 (0x8597416)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Validity
Not Before: May 25 07:55:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b4e66db39d39b77e3ebf73622f9cbed84c7f11d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:68:73:fa:70:d6:01:18:7c:34:6f:98:bb:6b:
a5:be:9a:6b:7d:30:ab:16:2c:d4:d4:fc:67:08:bc:
6e:ce:b8:05:82:2e:15:37:6c:fd:ed:25:ed:35:87:
66:49:42:99:79:17:ce:20:92:f3:ce:57:e3:6d:4d:
40:5a:4c:f7:99:05:d7:16:ec:3f:7c:da:13:c0:89:
40:85:b4:83:47:4c:59:ab:75:0a:c2:8f:ee:70:ab:
25:69:eb:dd:f8:83:1a:d9:c1:77:24:ff:56:04:18:
b9:d4:d6:f8:b5:54:ff:ef:f9:62:54:1b:90:f6:14:
7b:77:c9:4e:46:40:19:62:a8:a2:59:12:09:12:cc:
08:b3:b7:91:90:30:86:bf:04:3a:f6:bd:5a:e5:76:
fa:6d:8b:4a:75:86:0f:e6:4e:62:07:e7:2d:0a:1a:
bb:05:29:24:e3:c6:50:d8:b6:1a:dc:7d:57:cd:96:
2b:ba:60:70:7c:e2:00:68:4f:25:b3:c2:19:ba:1b:
b9:04:db:31:36:2a:ab:6b:23:df:7e:40:98:0e:81:
e1:78:c1:78:5c:0a:4b:1c:c3:dd:69:6d:c3:fc:e4:
ed:72:46:0d:93:0f:b0:16:ea:3a:de:45:b7:7b:17:
6e:76:7a:f0:b1:89:5e:7b:5b:0b:28:72:a4:fa:7e:
1a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E6:6D:B3:9D:39:B7:7E:3E:BF:73:62:2F:9C:BE:D8:4C:7F:11:D3
X509v3 Authority Key Identifier:
keyid:60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/tOZts505t34-v3NiL5y-2Ex_EdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.11.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:89:7d:e6:f3:d0:de:0e:8b:47:40:bf:a5:ea:8d:70:e8:8b:
f2:75:bb:7d:78:e7:11:4d:b1:76:94:08:62:e4:38:75:c4:55:
a8:18:24:64:67:f7:17:22:f3:3d:8c:36:54:1d:15:ab:f5:88:
c9:d6:75:81:49:ae:4f:a6:7c:9f:48:3e:01:49:11:9c:8a:66:
80:9b:47:f8:18:34:06:bf:6e:d4:88:d6:8c:e1:e7:d9:14:94:
f2:ff:b2:4a:6a:e4:42:29:66:18:9e:90:70:a1:ed:06:ff:b1:
4c:99:50:c6:28:87:ae:f1:c9:e5:af:7c:dd:9b:5d:d9:8f:57:
f8:cd:a3:37:c9:d2:5a:59:3c:8a:8f:02:53:1a:78:48:12:53:
b7:60:64:50:86:b2:41:e1:8a:1e:f5:3d:db:45:57:e0:27:ca:
0a:ef:65:75:be:a2:69:c8:ed:a5:7e:3f:e7:4c:83:fd:f9:2a:
9b:a0:7c:82:62:92:c8:d1:ab:53:b5:9f:29:e5:f6:2e:ec:cd:
99:d3:b0:06:dd:20:e5:69:d5:c8:e1:a5:63:c0:ad:35:9d:7c:
dc:5a:d2:aa:1e:8a:3d:48:02:12:be:47:7a:7d:90:b0:86:72:
8b:31:8b:07:a8:86:87:2d:49:47:99:2a:21:60:56:db:ba:0e:
ef:62:37:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:37 2024 by rpki-client on console-fra.rpki-client.org