Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/GNeTRngSEBX3YgpdCBcxHQhO8ro.roa
File: GNeTRngSEBX3YgpdCBcxHQhO8ro.roa (raw, json)
Hash identifier: OM/9sIex0COApaKuTp55FhLiF9jLtTBHIfbLg6qa3SY=
Subject key identifier: 18:D7:93:46:78:12:10:15:F7:62:0A:5D:08:17:31:1D:08:4E:F2:BA
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 01826D08B51DFB7F79C40E200F97134B7DF4
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/GNeTRngSEBX3YgpdCBcxHQhO8ro.roa
Signing time: Fri 05 Aug 2022 08:04:23 +0000
ROA not before: Fri 05 Aug 2022 08:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208167
IP address blocks: 31.133.42.0/24 maxlen: 24
31.133.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6d:08:b5:1d:fb:7f:79:c4:0e:20:0f:97:13:4b:7d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: Aug 5 08:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18d7934678121015f7620a5d0817311d084ef2ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:64:c7:db:4d:7e:21:01:da:f8:45:09:54:ed:
47:e9:6c:07:10:5c:f7:12:db:f2:bc:13:85:85:3e:
58:75:d9:11:cf:d1:b2:a8:39:b5:6d:32:dd:cd:cf:
01:de:ce:47:79:eb:af:7f:d4:c1:30:1b:6c:f3:d9:
cb:2e:a0:61:c1:7e:e9:38:19:25:26:c0:f9:42:cd:
0b:bf:20:fe:dc:45:f9:e2:ad:93:67:ab:7d:79:f5:
1c:f5:80:d8:cd:0f:80:fa:9e:83:46:01:eb:7e:9a:
6d:d7:12:8d:f7:ab:c5:12:de:2d:ea:ca:94:0f:25:
91:7f:a4:ee:0a:65:14:3c:f9:e9:33:63:be:7e:58:
00:e4:72:4a:56:30:88:ba:6f:02:ae:f4:72:e3:1e:
48:ce:ce:4d:cf:5a:6c:10:ce:2d:9a:c9:f1:dd:07:
43:cc:40:9d:98:e6:3f:98:cc:6b:14:ad:fe:9d:51:
ef:ab:1f:5a:3a:6c:f1:5e:42:09:3e:1d:05:53:73:
96:f6:c6:fd:08:d5:66:46:c4:87:90:70:c3:b5:53:
ba:7d:18:93:bf:a2:d3:cb:71:aa:44:8a:5c:24:35:
e2:05:90:09:70:76:be:58:94:55:64:c3:51:b2:b8:
0b:21:d0:44:04:08:4a:c3:69:e1:d4:61:8d:7e:28:
00:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D7:93:46:78:12:10:15:F7:62:0A:5D:08:17:31:1D:08:4E:F2:BA
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/GNeTRngSEBX3YgpdCBcxHQhO8ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.42.0/24
31.133.46.0/24
Signature Algorithm: sha256WithRSAEncryption
73:64:89:07:c1:e9:77:c6:f6:b0:d4:46:de:7a:9b:60:6a:59:
e4:cb:23:60:97:98:53:02:70:04:2b:b2:eb:0f:d2:89:c6:35:
7f:c4:cd:ed:5c:d0:3f:3b:b0:76:28:80:70:9a:f1:cb:23:a7:
a4:a8:54:04:1a:0c:59:88:15:8a:42:93:db:d5:1b:0e:37:eb:
19:df:11:ea:62:96:5c:24:df:b3:71:c2:40:28:f1:94:99:d5:
fb:e2:f1:39:cd:76:72:6b:9b:cf:18:54:66:4c:e4:77:b7:a6:
e4:b7:36:e6:c9:23:a0:cc:79:f1:c9:98:43:b1:bd:0c:6c:af:
e7:66:de:ab:ce:23:83:58:45:84:a0:4a:19:57:1e:3a:9a:d5:
30:16:af:1e:42:af:1a:83:a4:fe:31:39:3c:c8:a9:12:19:53:
49:1f:c0:1a:7f:f6:01:39:90:72:23:6d:fc:09:9b:5a:08:e0:
c4:9d:7b:b6:fc:db:ed:c7:2e:24:c6:a8:58:85:e1:19:ca:b0:
ca:e4:3d:09:af:88:49:29:64:b3:81:01:24:68:57:3d:24:d0:
e5:dc:fe:36:8d:57:13:75:3b:a2:95:94:96:cc:58:e1:20:ef:
9e:51:e3:5c:38:5d:ff:a0:d8:cc:3b:2e:34:1b:40:9b:f6:19:
06:a1:ad:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:29 2024 by rpki-client on console-fra.rpki-client.org