Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/SEfqiezXYCw4dYRUV5Sd2rWsTzY.roa
File: SEfqiezXYCw4dYRUV5Sd2rWsTzY.roa (raw, json)
Hash identifier: 7ObY2ogAMT+cJ4XIckwol6XRRDAPl2hv5VH9W4yG+LE=
Subject key identifier: 48:47:EA:89:EC:D7:60:2C:38:75:84:54:57:94:9D:DA:B5:AC:4F:36
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 0BD69269
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/SEfqiezXYCw4dYRUV5Sd2rWsTzY.roa
Signing time: Sat 01 Jan 2022 10:53:51 +0000
ROA not before: Sat 01 Jan 2022 10:53:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52091
IP address blocks: 31.133.42.0/23 maxlen: 24
31.133.40.0/23 maxlen: 23
31.133.40.0/24 maxlen: 24
2a0d:df80::/31 maxlen: 31
2a0d:df80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198611561 (0xbd69269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: Jan 1 10:53:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4847ea89ecd7602c3875845457949ddab5ac4f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:71:2f:2f:6f:9f:c0:5a:ce:ef:55:bf:ba:8e:
c2:c8:13:97:67:9e:03:42:19:3d:96:f0:3c:92:26:
fe:01:88:d8:00:d1:0d:b3:74:85:2d:cc:32:ba:5a:
64:ba:62:60:0a:ea:d2:b3:e5:fe:85:97:eb:00:4b:
b1:ea:53:3c:3e:70:ea:4d:d1:4f:1f:fe:b3:1d:e2:
27:7e:af:1e:c0:71:ea:01:e4:a5:83:51:7f:39:83:
95:5a:93:ba:93:f0:fd:7c:3a:54:93:96:17:22:a2:
18:ae:34:2f:73:d6:ed:d3:72:7a:de:d2:ec:7f:27:
10:f8:01:76:a3:15:9a:4e:4e:0d:47:bd:14:67:bf:
55:3c:92:b2:52:65:1a:15:e3:ff:97:3c:35:40:cb:
b4:36:69:20:37:0d:1b:40:bd:bd:c9:cd:48:4d:f7:
60:8a:0a:c9:66:31:b5:dc:4c:69:e6:fc:89:17:28:
24:9d:9b:bc:92:c7:bb:de:f4:69:11:e7:df:8e:8f:
73:ad:44:0c:73:b5:7b:93:65:76:75:ef:11:36:45:
89:73:da:dd:ee:6c:88:94:20:5e:07:fe:cc:0d:16:
61:d6:1a:fa:09:c2:b3:76:b8:63:05:8f:ed:49:88:
0b:c1:88:56:c8:21:35:8c:79:82:67:01:a0:52:14:
57:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:47:EA:89:EC:D7:60:2C:38:75:84:54:57:94:9D:DA:B5:AC:4F:36
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/SEfqiezXYCw4dYRUV5Sd2rWsTzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.40.0/22
IPv6:
2a0d:df80::/29
Signature Algorithm: sha256WithRSAEncryption
8c:ff:fd:54:20:77:00:dd:1f:b8:34:81:06:a9:88:03:1c:a5:
42:46:c7:ba:fa:72:62:b2:0c:eb:45:bd:44:8b:e0:6d:01:87:
c4:67:f6:50:99:8b:84:20:d0:24:c1:a1:87:9d:43:9b:1e:e4:
f9:fd:d8:4c:1a:71:1d:c6:87:75:b3:79:2b:02:b8:3f:fb:d1:
60:4b:df:33:12:a0:90:17:de:fd:6e:89:8e:d0:97:6f:3c:eb:
c9:48:74:b4:fd:ba:1a:ff:b7:d2:d7:56:3e:35:6c:cb:08:62:
f3:7d:b6:ff:5b:c6:e1:50:bd:2a:59:d2:ed:5e:18:37:3a:57:
36:fe:41:ba:1a:e6:0f:d7:4d:09:ba:7b:83:1b:86:4b:6b:73:
95:a4:f0:1f:9f:64:e9:e8:07:73:ca:86:de:b5:12:b5:33:ae:
ce:c9:92:6f:af:31:c7:58:35:33:f0:18:90:76:3c:b5:92:26:
f7:30:f4:06:22:ad:7d:d3:82:5a:5e:79:4e:13:1f:a6:ab:22:
5d:7e:c6:58:22:a6:6e:4c:9f:a3:68:8f:77:4d:85:ae:c6:e3:
23:17:d7:0a:9d:b4:7d:83:60:ab:73:f0:93:2e:58:e0:6e:4a:
29:09:0b:0f:36:77:53:c6:ce:54:2c:1a:a1:77:1d:77:d1:d7:
42:82:18:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:41 2024 by rpki-client on console-ams.rpki-client.org