Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/uERXCD0a85jmuLJBhAfwFc0oJ9I.roa
File: uERXCD0a85jmuLJBhAfwFc0oJ9I.roa (raw, json)
Hash identifier: y99NO1nOROdYpjWmYNzOYGKpteiv6WQD+cRxPpuCl7c=
Subject key identifier: B8:44:57:08:3D:1A:F3:98:E6:B8:B2:41:84:07:F0:15:CD:28:27:D2
Certificate issuer: /CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Certificate serial: 07BEDA8B
Authority key identifier: 60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/uERXCD0a85jmuLJBhAfwFc0oJ9I.roa
Signing time: Tue 22 Mar 2022 07:33:46 +0000
ROA not before: Tue 22 Mar 2022 07:33:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 192.35.206.0/24 maxlen: 24
147.189.163.0/24 maxlen: 24
31.25.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129948299 (0x7beda8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Validity
Not Before: Mar 22 07:33:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b84457083d1af398e6b8b2418407f015cd2827d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4b:79:25:3a:37:31:69:e6:c7:e5:a0:77:5e:
2f:3f:54:1d:70:37:4f:0f:a1:87:a7:41:3f:6c:bc:
0f:1a:05:d7:8e:be:6f:22:26:b7:66:31:fc:0a:8b:
94:5c:cd:52:12:f0:09:ed:59:3f:b2:ae:56:c2:0b:
b4:c2:89:bd:d8:db:70:37:a4:69:86:48:2e:b1:1c:
ed:39:ae:76:d1:76:19:68:03:cf:79:7a:d7:7f:a7:
2e:6f:76:23:80:4f:1a:75:c1:78:c5:7a:f9:2d:ba:
fb:dc:2b:37:4f:06:75:42:28:94:ce:1f:e3:49:00:
ce:58:65:07:cc:bf:32:96:65:88:08:ba:b1:42:86:
fb:aa:7a:ef:c9:de:0e:1d:9b:32:79:ec:51:25:f4:
ce:b2:fe:ae:b1:d9:37:f8:0b:47:f7:8e:43:22:2a:
a4:64:09:e9:bf:a4:71:cd:05:48:62:64:06:b9:d8:
f4:76:cf:95:2d:87:2a:c4:c5:e4:70:90:7c:46:0e:
70:2d:a2:69:ca:bd:71:ac:24:27:01:35:61:c6:82:
df:bd:40:6d:87:24:4e:d7:af:d1:91:93:59:ca:80:
ec:ae:d4:26:9c:99:1a:25:51:48:4d:fc:9c:6f:1d:
bf:ba:a0:b6:2d:cd:ca:74:89:b4:89:1a:d6:83:66:
9a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:44:57:08:3D:1A:F3:98:E6:B8:B2:41:84:07:F0:15:CD:28:27:D2
X509v3 Authority Key Identifier:
keyid:60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/uERXCD0a85jmuLJBhAfwFc0oJ9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.11.0/24
147.189.163.0/24
192.35.206.0/24
Signature Algorithm: sha256WithRSAEncryption
65:14:62:35:b2:95:e0:51:75:d1:dc:d3:ff:df:a7:da:82:d5:
3a:e4:b2:d6:d1:8c:c1:e4:63:36:c6:89:f2:41:2d:c3:bf:d8:
82:ec:6b:34:25:28:45:b1:28:6d:17:31:b6:91:86:e4:da:b3:
3d:db:cc:3b:eb:7e:03:3b:63:3d:c4:7c:1d:0b:bf:0e:26:79:
67:10:05:bb:8f:0e:10:18:af:1f:c7:39:6a:1d:83:f2:49:83:
07:b1:38:fc:63:62:2d:1b:cd:67:22:fa:ca:d7:5e:4d:f8:1a:
9c:b6:dd:9f:6a:45:36:57:e8:79:1f:94:fa:c7:91:3f:f5:6c:
36:87:4d:b7:54:a7:a1:60:c7:38:f1:2f:73:77:e5:2b:d3:d5:
0e:54:61:ec:96:4d:34:44:d8:88:84:34:a9:bd:5d:f7:65:a7:
07:e7:98:26:67:33:29:99:0c:7d:58:1c:f6:bc:25:35:2d:a3:
31:9a:51:f4:26:81:b1:7a:07:4b:be:db:ca:86:59:42:aa:f0:
47:02:6d:c2:67:39:a3:33:4c:34:1c:ad:fb:44:ce:de:a4:f0:
08:a4:c3:bc:e8:8c:a4:a0:1c:3e:2c:3e:4e:2e:4a:46:99:21:
96:51:bb:39:5a:32:f9:80:35:ce:c8:1b:86:4a:fd:fa:2b:db:
28:22:9b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:06 2024 by rpki-client on console-ams.rpki-client.org