Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/aPuvJ6s2LgMe924NzDTZ8H5ADFk.roa
File: aPuvJ6s2LgMe924NzDTZ8H5ADFk.roa (raw, json)
Hash identifier: kZRSyRw+2NFphL9ZJgzCHq82tBHCCCaBOInghXUSBuw=
Subject key identifier: 68:FB:AF:27:AB:36:2E:03:1E:F7:6E:0D:CC:34:D9:F0:7E:40:0C:59
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 01851F649913D90B147144C7B67140D10D96
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/aPuvJ6s2LgMe924NzDTZ8H5ADFk.roa
Signing time: Sat 17 Dec 2022 09:22:44 +0000
ROA not before: Sat 17 Dec 2022 09:22:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61965
IP address blocks: 31.133.43.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1f:64:99:13:d9:0b:14:71:44:c7:b6:71:40:d1:0d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: Dec 17 09:22:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68fbaf27ab362e031ef76e0dcc34d9f07e400c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:26:af:27:32:f8:eb:45:c3:0d:5c:51:41:e0:
76:cb:e0:92:a5:31:a3:a1:ad:34:e4:ec:53:c3:fa:
ec:57:9a:40:2f:5d:02:48:2c:f0:5f:64:42:80:86:
88:b4:f9:d8:d2:5a:25:a5:19:10:e7:04:c4:b1:b5:
b3:37:e4:04:3f:b7:b2:07:05:8f:99:33:60:7f:81:
44:15:27:78:3f:31:37:f9:2a:9e:54:05:64:fb:65:
7e:dc:12:39:2c:dd:52:00:4f:b6:8d:95:ae:5f:05:
96:ec:a5:16:08:a5:1f:db:02:e9:5a:27:7e:50:c4:
c9:52:bd:33:2e:d2:95:e1:88:d5:88:6d:26:a4:8a:
ce:b1:ac:b5:e1:20:03:53:90:8e:12:70:97:71:91:
8c:d1:68:28:a2:cf:58:60:a7:ce:05:5e:5b:35:7b:
6a:0d:fd:a0:c2:9a:9d:44:fb:ad:f9:92:19:6d:f1:
30:43:8e:85:3c:27:62:ba:a9:a6:1c:22:49:94:35:
98:64:49:98:92:43:7d:6b:e1:82:34:db:21:a9:59:
84:cc:06:66:38:20:68:40:79:ca:65:29:12:55:e6:
77:91:23:7c:ac:d2:8d:39:5e:81:5f:18:87:63:5b:
fc:a7:fe:a4:44:cb:fc:8f:1d:34:73:f8:3b:14:31:
fc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FB:AF:27:AB:36:2E:03:1E:F7:6E:0D:CC:34:D9:F0:7E:40:0C:59
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/aPuvJ6s2LgMe924NzDTZ8H5ADFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.43.0/24
Signature Algorithm: sha256WithRSAEncryption
74:2d:b9:51:ac:1e:d2:bc:b9:41:76:8f:d2:72:b0:a9:01:8e:
42:b1:d3:e5:d9:f9:9c:e6:27:1b:97:9a:2b:2e:0d:2f:fb:ba:
de:40:2b:18:9c:74:57:ab:38:3b:82:ee:f1:80:b0:d6:f0:59:
30:e2:09:49:fd:dc:d0:75:1c:1a:03:eb:0f:14:b1:4d:0b:96:
ee:bf:a8:8f:8d:ff:60:f7:4b:01:c6:15:d3:3b:ac:ce:a8:a4:
7c:ff:6d:b5:50:75:76:73:ae:58:50:01:fc:6e:16:79:84:e8:
af:87:ac:9a:64:70:d8:6e:0f:79:3a:1d:e3:05:6e:d4:d5:0c:
ed:27:2c:ac:82:3a:38:70:e5:a4:3d:78:b0:41:9a:2b:ad:c1:
d9:e4:ed:12:e4:bc:5f:ca:b4:02:eb:b5:68:4a:3c:c7:98:26:
d9:38:d1:9e:e8:66:6b:a7:28:42:b1:7a:2f:4a:64:36:0b:73:
72:b7:f6:2b:af:2d:65:d1:a6:d2:cb:93:ed:46:dd:0d:b4:8c:
30:05:79:b1:65:9a:bb:61:2c:17:59:38:ed:4d:1b:a0:d2:21:
e6:ea:33:9d:a2:1b:1d:47:90:b5:e5:e7:ca:6e:1a:d8:ae:8c:
e2:72:25:68:8a:8d:e8:7c:f5:5c:cf:5a:ef:a3:20:03:4e:a2:
b1:61:f1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:29 2024 by rpki-client on console-fra.rpki-client.org