Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/TZMby4gF25TA0-SiPUPRtbSl1c8.roa
File: TZMby4gF25TA0-SiPUPRtbSl1c8.roa (raw, json)
Hash identifier: XPexw5oK2G+zOFqmQWlZELFWXWfq4WaUYUEV3R2gFfo=
Subject key identifier: 4D:93:1B:CB:88:05:DB:94:C0:D3:E4:A2:3D:43:D1:B5:B4:A5:D5:CF
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 0BD82FBA
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/TZMby4gF25TA0-SiPUPRtbSl1c8.roa
Signing time: Sat 01 Jan 2022 10:53:51 +0000
ROA not before: Sat 01 Jan 2022 10:53:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202279
IP address blocks: 31.133.48.0/21 maxlen: 21
31.133.48.0/22 maxlen: 22
31.133.55.0/24 maxlen: 24
31.133.53.0/24 maxlen: 24
31.133.52.0/24 maxlen: 24
31.133.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198717370 (0xbd82fba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: Jan 1 10:53:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d931bcb8805db94c0d3e4a23d43d1b5b4a5d5cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b9:71:89:54:24:53:a5:76:e2:76:87:79:28:
e3:34:7d:86:dc:e9:8b:c6:fa:d1:68:d1:89:81:70:
d2:e9:3c:90:20:51:be:e3:29:6e:69:55:a5:1d:6e:
7a:bb:88:3d:de:1f:b6:fe:76:a4:21:14:f4:0b:63:
2a:b1:b7:1c:13:b0:cb:1d:53:01:6f:f3:4b:96:21:
88:fd:cb:a4:ee:37:aa:77:63:a7:ad:ba:b8:db:82:
35:d1:b6:f4:0e:fd:16:95:63:1f:5d:46:f2:2d:6c:
1c:04:cb:12:ef:40:a1:3b:06:3b:54:c1:9e:08:4c:
7f:a1:87:c5:db:4c:cd:8c:fb:58:a1:7b:dd:05:73:
3b:1e:93:fb:fa:b5:51:a0:80:8c:02:4a:35:57:cc:
0f:1f:59:90:e4:3d:a2:c0:26:7d:4f:48:f2:55:1d:
cb:ae:a7:26:e7:39:53:30:38:e6:ab:03:ce:3d:eb:
d1:29:bb:0d:82:16:3d:ff:65:bf:d1:f8:91:aa:ce:
db:c5:b8:f5:a8:5f:0e:21:09:8a:f7:c4:d0:55:e7:
c7:46:47:8a:c6:0d:02:07:38:54:e8:82:0b:2b:5c:
ee:18:ce:f3:15:35:b5:f9:12:55:8d:48:2f:0f:5e:
ac:5b:bf:c5:74:75:b7:1a:d2:0b:ce:4d:2b:3b:fb:
4e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:93:1B:CB:88:05:DB:94:C0:D3:E4:A2:3D:43:D1:B5:B4:A5:D5:CF
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/TZMby4gF25TA0-SiPUPRtbSl1c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.48.0/21
Signature Algorithm: sha256WithRSAEncryption
9c:fc:62:1c:58:6f:9a:11:b5:18:a1:f5:0e:2b:85:ab:9d:4b:
c8:3e:de:fc:b0:1a:ce:ea:21:ec:ab:d4:0e:ca:6f:71:91:5b:
41:d6:a5:52:48:c1:ba:1b:7a:e2:70:a8:de:b9:cc:3f:7f:b5:
7a:6f:88:63:b7:76:f5:fc:ad:6e:24:4d:29:e5:49:93:61:41:
06:05:e1:aa:69:2f:55:d9:1c:1f:08:7c:06:8e:57:7d:a2:b3:
3d:50:ab:a7:17:a4:54:46:ab:ca:8b:33:68:0a:ab:c4:46:93:
b8:0f:48:fb:35:cf:fc:8c:f8:6a:d9:79:9f:31:7b:91:1d:db:
31:56:56:72:28:e2:ae:8f:0a:9d:0a:82:e4:2e:d9:d9:32:31:
80:38:a5:ba:73:03:32:d4:d4:0e:50:80:a9:e2:22:34:57:bc:
ea:e0:72:61:9d:d1:5c:ea:dd:7a:80:3b:6c:c7:7f:ec:37:05:
f5:4e:98:57:d7:62:10:14:20:a4:21:51:22:cd:64:8b:fa:25:
3d:7b:15:85:1d:69:88:cc:84:4a:e1:a1:9c:87:a3:6d:41:47:
a3:ec:85:85:96:63:2f:29:11:37:92:8c:26:c0:d6:ce:2b:3d:
ae:27:14:4d:a0:60:31:b8:a8:e5:46:82:92:af:2e:e0:5a:5a:
3f:5d:6a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:41 2024 by rpki-client on console-ams.rpki-client.org