Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/b9Wj_0Qx9lPZssoItmRXVbk7de0.roa
File: b9Wj_0Qx9lPZssoItmRXVbk7de0.roa (raw, json)
Hash identifier: gSIvhX2qSalWifhgv9ccD8E5JB8LZwGr/BwzHbtlkGo=
Subject key identifier: 6F:D5:A3:FF:44:31:F6:53:D9:B2:CA:08:B6:64:57:55:B9:3B:75:ED
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 01826D08B49F904F4B3BC197F4B34D4E0044
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/b9Wj_0Qx9lPZssoItmRXVbk7de0.roa
Signing time: Fri 05 Aug 2022 08:04:23 +0000
ROA not before: Fri 05 Aug 2022 08:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52091
IP address blocks: 31.133.40.0/23 maxlen: 23
31.133.40.0/24 maxlen: 24
31.133.41.0/24 maxlen: 24
2a0d:df80::/31 maxlen: 31
2a0d:df80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6d:08:b4:9f:90:4f:4b:3b:c1:97:f4:b3:4d:4e:00:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: Aug 5 08:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6fd5a3ff4431f653d9b2ca08b6645755b93b75ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8e:1b:d9:8d:19:45:1d:1a:56:de:db:3a:18:
b1:17:a5:ee:60:a6:55:c5:ea:7b:98:da:94:4f:a8:
03:9c:bd:fe:64:e2:d9:ca:0f:1a:dc:96:01:d4:3c:
3e:82:39:82:f6:49:dd:01:b1:04:eb:af:97:a2:79:
ef:36:2e:e3:9d:11:22:76:7e:2a:98:47:aa:25:10:
7d:98:06:ec:b1:de:1b:62:6b:6a:26:be:a5:29:f1:
d9:d3:aa:17:21:89:9f:02:57:3b:4d:69:72:c0:a7:
27:82:19:da:32:ad:38:9c:78:06:c3:3f:b6:e1:d8:
49:41:ad:0e:39:31:65:a2:6a:8a:a1:98:ed:61:1a:
f9:d6:fc:4e:03:88:e8:80:b9:32:e6:2f:98:8e:f9:
bd:2f:2a:4b:ce:c8:6d:80:a1:1b:21:af:cf:7f:17:
29:9c:d1:f5:e5:bc:b8:57:02:d7:db:13:b2:cc:2c:
9b:af:9f:65:d4:61:57:8f:80:3c:3f:ee:6d:c6:a6:
2e:04:91:cf:ec:c0:a1:ca:97:b6:b0:27:fb:83:e6:
a4:11:4e:6d:02:fb:93:9d:c7:00:ff:b3:68:cb:2b:
0e:aa:3b:77:c3:ef:ee:5f:35:aa:9c:1d:80:40:c3:
85:71:26:6b:cc:e8:0d:97:c5:f2:2d:4a:72:7f:6d:
64:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D5:A3:FF:44:31:F6:53:D9:B2:CA:08:B6:64:57:55:B9:3B:75:ED
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/b9Wj_0Qx9lPZssoItmRXVbk7de0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.40.0/23
IPv6:
2a0d:df80::/29
Signature Algorithm: sha256WithRSAEncryption
b1:15:f8:9e:87:5a:48:5b:37:2a:c0:de:36:31:77:98:56:39:
5f:16:84:86:83:f7:3c:91:83:2e:94:bc:14:c3:6c:fc:1e:7e:
2c:e4:cc:68:f1:62:77:e9:25:79:b4:8c:e5:07:b2:14:dd:f5:
49:86:47:57:c4:f6:b8:17:f2:e9:ad:43:b7:06:55:5c:8e:99:
47:43:5e:58:12:0b:3a:78:4e:a6:fd:16:2e:c3:c0:0e:30:4e:
67:13:68:03:07:c4:26:89:e6:60:87:2b:51:2b:ac:25:5e:e2:
40:7f:b4:d2:4a:3c:62:06:3b:1a:76:f8:b7:54:8b:e8:ff:d9:
88:df:93:6e:5b:dc:5a:23:9d:70:e6:02:22:84:ad:a7:64:21:
49:82:6d:7d:e6:3f:b1:a8:a4:88:50:5c:2f:2a:cf:b3:c9:e7:
f9:c1:6b:57:6f:01:5f:b0:02:db:f1:db:d9:14:22:8d:80:db:
ba:ba:ab:e6:1f:03:dd:4c:76:f5:76:8a:27:81:a9:5c:22:c3:
ba:88:0e:2a:57:bb:cd:3b:53:0a:6e:f7:ee:c9:fc:1d:7a:02:
a6:cd:e2:c8:dd:0b:58:8b:5b:20:d1:3c:5c:72:74:38:02:b5:
8c:49:1e:91:17:59:a3:2f:8b:7b:88:20:66:4d:e0:96:60:12:
04:19:41:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:29 2024 by rpki-client on console-fra.rpki-client.org