Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/5GP7EFi0XH50_s2JNKo9HjkRjT0.roa
File: 5GP7EFi0XH50_s2JNKo9HjkRjT0.roa (raw, json)
Hash identifier: Uwja+woD8BDOi5hImNSn0/Uqa2Fg6sZWvaFloMz4FEI=
Subject key identifier: E4:63:FB:10:58:B4:5C:7E:74:FE:CD:89:34:AA:3D:1E:39:11:8D:3D
Certificate issuer: /CN=c722ad43471b606bcc853bba11b8ed663c151882
Certificate serial: 0A570B
Authority key identifier: C7:22:AD:43:47:1B:60:6B:CC:85:3B:BA:11:B8:ED:66:3C:15:18:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/5GP7EFi0XH50_s2JNKo9HjkRjT0.roa
Signing time: Thu 28 Apr 2022 14:36:41 +0000
ROA not before: Thu 28 Apr 2022 14:36:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197617
IP address blocks: 31.24.64.0/22 maxlen: 22
31.24.70.0/24 maxlen: 24
185.61.108.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 677643 (0xa570b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c722ad43471b606bcc853bba11b8ed663c151882
Validity
Not Before: Apr 28 14:36:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e463fb1058b45c7e74fecd8934aa3d1e39118d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:49:ff:f2:2d:a9:e6:10:0e:e5:f6:40:b1:90:
e1:2c:9b:3d:1f:ae:cc:1d:b7:2a:ac:78:7f:b3:de:
10:1a:09:49:50:b6:9c:20:f2:95:52:19:0a:95:1c:
97:6b:ef:77:a0:c1:ef:e6:91:cb:2d:bb:45:a6:64:
4c:bf:0b:c9:40:02:f5:5d:07:43:66:62:5d:08:f6:
d6:1c:6d:13:53:89:95:77:82:26:30:dc:07:03:b9:
58:74:bb:bc:5e:cd:74:14:6c:ed:fb:c3:a0:fd:22:
b0:f7:c0:98:a4:2b:79:3c:d6:c4:44:ac:a5:da:76:
73:b4:2c:23:fc:c2:31:30:49:9e:77:a9:ee:2c:59:
eb:6c:ab:dd:85:7e:56:6c:63:ad:2c:c9:99:08:03:
c7:32:6b:49:55:9c:a1:a3:91:bc:72:85:c5:78:e5:
76:dd:40:6f:ff:04:63:23:b0:7e:65:22:4c:ac:a1:
97:8f:fc:96:52:eb:64:5b:9b:4a:da:48:d9:aa:11:
5c:29:39:e8:08:47:3c:93:da:d6:da:ef:93:52:a7:
28:a4:6a:c4:74:f9:ad:69:40:c3:47:97:ac:13:d5:
32:cd:f3:d7:fa:77:46:1e:48:36:47:c6:30:30:a3:
e5:bd:e8:ea:48:89:49:50:ae:02:9d:a6:73:dd:8a:
ce:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:63:FB:10:58:B4:5C:7E:74:FE:CD:89:34:AA:3D:1E:39:11:8D:3D
X509v3 Authority Key Identifier:
keyid:C7:22:AD:43:47:1B:60:6B:CC:85:3B:BA:11:B8:ED:66:3C:15:18:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/5GP7EFi0XH50_s2JNKo9HjkRjT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.64.0/22
31.24.70.0/24
185.61.108.0/22
Signature Algorithm: sha256WithRSAEncryption
d7:b6:71:07:1a:9b:49:09:ba:59:c1:db:d5:4a:fc:af:38:5e:
7e:2b:0b:d4:93:4d:95:f1:c2:32:0d:1c:bb:b0:5b:0e:8d:df:
41:6e:b2:5d:3d:51:d6:81:9c:e7:33:1c:30:62:7b:fa:76:ba:
f6:2a:87:96:05:af:ba:e5:0f:43:5b:b3:31:cf:ed:bd:62:2b:
a9:48:ef:c5:dd:d1:df:96:78:41:87:83:19:e3:6b:f4:db:db:
83:34:72:37:45:30:c7:8e:0f:17:0f:c1:b9:97:18:ca:63:f9:
37:03:29:69:ef:6d:3a:8a:97:75:a3:ef:97:e0:4a:8b:4a:a1:
22:54:f7:b3:1a:bb:a2:16:be:c4:50:c9:ba:2d:3d:17:51:13:
05:90:06:d6:51:5f:6d:c9:ac:43:dc:4c:dc:b0:b9:d4:16:6b:
d1:aa:72:12:30:d8:eb:08:15:1f:06:19:95:fb:22:99:e3:a9:
1b:17:49:d4:da:db:ba:10:0b:01:fb:dc:fe:23:ac:41:86:6e:
cb:d7:ab:ba:2e:62:26:8c:18:96:0c:06:51:ce:a5:67:be:e7:
1d:3c:ff:a6:e7:f3:c8:a9:59:b7:ed:00:a8:f0:ae:7a:da:7e:
4d:77:50:23:ee:7a:88:a6:32:c4:5a:8c:ad:a2:4d:f8:ce:14:
9b:0e:ab:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:54 2024 by rpki-client on console-fra.rpki-client.org