Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/TR0YsGLxisLTaJAAStzoG9SSipo.roa
File: TR0YsGLxisLTaJAAStzoG9SSipo.roa (raw, json)
Hash identifier: FqCG86Udq5hZgnzMExB62hTFU+y/Z3o3p0qufNNya3I=
Subject key identifier: 4D:1D:18:B0:62:F1:8A:C2:D3:68:90:00:4A:DC:E8:1B:D4:92:8A:9A
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 01846C2EE3FDA0B131A4E8248F6A34C687EE
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/TR0YsGLxisLTaJAAStzoG9SSipo.roa
Signing time: Sat 12 Nov 2022 14:12:03 +0000
ROA not before: Sat 12 Nov 2022 14:12:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56766
IP address blocks: 31.133.39.0/24 maxlen: 24
31.133.43.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:6c:2e:e3:fd:a0:b1:31:a4:e8:24:8f:6a:34:c6:87:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: Nov 12 14:12:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d1d18b062f18ac2d36890004adce81bd4928a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:91:7a:5d:e2:de:a7:99:43:e0:47:1a:47:15:
ac:08:ef:d1:fe:4d:ca:2f:e8:81:be:6d:f8:20:5c:
2a:7b:2c:3a:ae:79:a2:05:2c:5f:c7:6c:2a:6f:f1:
5f:a1:ef:38:59:d0:2a:ce:22:69:77:73:44:94:f3:
7c:1f:d8:83:22:ff:eb:ce:85:a4:eb:7f:8b:b8:2a:
bd:9d:a8:cb:f3:1f:32:da:ce:ee:c7:68:53:39:cf:
26:25:81:13:1a:e4:92:72:8e:47:68:03:d0:19:23:
52:23:55:6c:ed:0f:11:7d:cf:c4:9f:c3:ff:9d:b9:
fc:3f:1b:87:2a:ac:cb:4d:56:d0:f9:5e:f5:e7:07:
5a:94:54:1c:f7:b4:09:aa:3b:62:9f:a6:b5:75:23:
bf:fe:14:f9:f4:04:99:3b:1c:30:5a:ca:77:a0:e2:
39:a0:8f:ee:8b:75:5b:03:2c:04:88:b0:81:e1:fc:
4f:0f:ff:42:1d:52:f5:1b:b4:66:ae:01:71:7a:fd:
41:9c:e9:90:e7:e7:e5:19:57:b5:0a:6f:38:ce:d3:
9b:c1:2c:fd:e9:2a:31:85:71:ca:15:f6:05:0c:fb:
73:76:50:a5:ec:cb:b5:36:f0:cd:3c:7b:90:b2:68:
05:be:fc:51:53:a1:79:c5:eb:6f:9b:0c:91:07:34:
d8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:1D:18:B0:62:F1:8A:C2:D3:68:90:00:4A:DC:E8:1B:D4:92:8A:9A
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/TR0YsGLxisLTaJAAStzoG9SSipo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.39.0/24
31.133.43.0/24
Signature Algorithm: sha256WithRSAEncryption
63:0f:29:b8:e1:66:73:6d:9b:86:b1:58:de:36:b3:32:bd:9b:
fc:2a:81:89:3f:ff:12:30:99:19:dd:42:2e:65:0a:40:7d:6e:
41:0a:90:c3:df:86:da:73:70:75:2c:92:f0:8d:27:88:6c:4d:
b5:f2:16:71:a0:35:73:8e:95:06:db:20:5e:85:bf:16:42:89:
ec:a6:82:b4:46:52:f1:0f:31:20:11:2f:02:38:9a:f0:28:6e:
80:e6:d2:47:32:c0:45:b4:18:54:e8:e3:19:df:c9:98:a1:e4:
fa:06:84:66:f4:be:38:f9:3a:63:7e:64:3f:5c:a7:db:74:de:
c5:3e:bf:16:5e:83:43:97:3e:32:ab:63:73:2a:b7:9f:66:e3:
69:03:10:d8:b5:4d:fc:34:b8:63:7f:ce:b8:e3:a1:8b:1e:73:
a2:8c:38:df:0d:0b:8c:46:66:53:b7:28:4a:52:e9:1b:d2:3b:
3d:d3:39:47:e7:10:fe:d1:fc:6d:02:69:25:d6:74:0f:40:06:
4c:90:c8:4f:2c:9c:04:63:22:52:10:db:a3:bd:46:15:29:3b:
83:df:df:f6:c8:32:20:45:d0:f5:74:84:8b:2d:fb:7e:ac:2c:
57:f9:d2:0f:9a:c9:23:ef:11:33:f1:bb:56:2d:23:7f:ff:0e:
2a:ab:39:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:41 2024 by rpki-client on console-ams.rpki-client.org