Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/UwOzK2OGFu0-55uWgQxcsJR7hrA.roa
File: UwOzK2OGFu0-55uWgQxcsJR7hrA.roa (raw, json)
Hash identifier: W2wf96AzY1/y4yw82lAbBPtNje8qTvqobJTFrOOMCUw=
Subject key identifier: 53:03:B3:2B:63:86:16:ED:3E:E7:9B:96:81:0C:5C:B0:94:7B:86:B0
Certificate issuer: /CN=c722ad43471b606bcc853bba11b8ed663c151882
Certificate serial: ADFDD0
Authority key identifier: C7:22:AD:43:47:1B:60:6B:CC:85:3B:BA:11:B8:ED:66:3C:15:18:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/UwOzK2OGFu0-55uWgQxcsJR7hrA.roa
Signing time: Tue 05 Jul 2022 02:18:25 +0000
ROA not before: Tue 05 Jul 2022 02:18:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197617
IP address blocks: 31.24.64.0/22 maxlen: 22
31.24.71.0/24 maxlen: 24
31.24.65.0/24 maxlen: 24
31.24.70.0/24 maxlen: 24
185.61.108.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11402704 (0xadfdd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c722ad43471b606bcc853bba11b8ed663c151882
Validity
Not Before: Jul 5 02:18:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5303b32b638616ed3ee79b96810c5cb0947b86b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:60:f3:07:5d:39:92:35:c8:85:8e:6c:6c:62:
f3:45:eb:ae:b3:e0:38:0c:0c:66:7b:17:61:24:b8:
6f:2f:3e:3c:72:8d:9d:0a:11:85:b6:58:b5:74:a4:
ca:ed:77:34:a6:cc:63:f7:47:91:3a:f7:a6:f6:1c:
7d:b2:a9:56:ab:e4:ed:2f:b5:db:ea:d1:0a:8a:16:
2e:a2:0d:91:5f:1c:ad:b7:df:b9:67:22:86:ac:2b:
67:8a:69:0b:5e:0d:6b:a0:dd:6f:68:76:5c:21:e6:
b1:74:41:b6:da:5e:41:19:5f:43:7b:88:1a:0b:f2:
29:54:73:ed:0d:67:27:67:83:f1:4b:a3:30:16:66:
6a:db:6b:41:af:4c:39:83:c7:13:73:11:08:64:ca:
73:2e:d1:60:a3:e2:6c:2b:b1:ea:64:9d:2b:5f:f9:
b3:35:87:16:0f:d9:3e:3d:43:76:f9:0e:8b:66:7a:
e4:2d:5f:fa:0f:58:fb:3c:f1:c8:57:d0:00:fe:2b:
bf:9b:18:b8:bc:10:f8:65:cb:aa:a5:e1:90:d3:00:
27:80:93:f4:b5:75:81:e9:3a:51:8c:ab:1d:5e:d6:
77:d8:11:03:51:a3:51:dd:61:b9:c8:b6:0c:eb:3f:
9c:bf:6c:30:d5:02:87:6f:63:9f:a4:9b:6c:f1:a1:
a3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:03:B3:2B:63:86:16:ED:3E:E7:9B:96:81:0C:5C:B0:94:7B:86:B0
X509v3 Authority Key Identifier:
keyid:C7:22:AD:43:47:1B:60:6B:CC:85:3B:BA:11:B8:ED:66:3C:15:18:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/UwOzK2OGFu0-55uWgQxcsJR7hrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.64.0/22
31.24.70.0/23
185.61.108.0/22
Signature Algorithm: sha256WithRSAEncryption
32:15:f1:fa:6b:25:32:04:ea:2b:50:78:4a:2b:78:49:b5:5b:
0d:fc:d9:45:6d:5a:f1:d6:53:67:30:a8:1f:5f:3a:54:c7:d6:
da:cf:04:db:b9:ed:5b:a9:61:cd:07:1b:fb:a0:35:15:57:d3:
c4:02:1f:87:4f:eb:61:c5:b4:f5:45:83:07:3a:f2:1d:df:53:
47:3c:4c:8e:71:a3:49:51:32:95:5e:5c:cc:04:1e:f3:b9:1d:
96:ea:7d:80:2a:b9:33:49:d0:08:3f:92:24:a2:24:b5:2f:0e:
d7:df:c1:00:22:46:09:81:2c:fe:47:7d:96:13:0f:5c:91:88:
e6:42:69:c8:c5:96:0e:89:8f:49:81:e7:be:a3:98:9e:5b:b6:
db:e6:26:98:0d:31:81:86:e1:b8:41:cb:d0:ac:dd:09:0a:94:
db:a2:2b:2e:95:ee:47:02:21:8e:45:a2:b5:98:59:ae:3f:c1:
fc:bb:8c:f7:60:09:1d:a7:d4:06:a9:5a:80:e2:46:5c:16:d2:
6b:48:e6:bb:52:38:2f:9a:b7:80:e9:fe:06:96:96:69:34:7d:
6e:8e:55:dd:db:12:fb:17:bc:74:ca:9b:66:a3:d9:4c:a7:41:
97:b9:5b:19:22:a3:22:0a:c2:cd:b7:99:d3:f2:72:87:59:d7:
5a:0d:83:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:29 2024 by rpki-client on console-ams.rpki-client.org