Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/uo6Z8wysTSZxBRrBneeZ0giSDEQ.roa
File: uo6Z8wysTSZxBRrBneeZ0giSDEQ.roa (raw, json)
Hash identifier: Vh7n+Q9CWUsbqO9J7mX+2hShEwGwh3G9u1dcNCIXOAU=
Subject key identifier: BA:8E:99:F3:0C:AC:4D:26:71:05:1A:C1:9D:E7:99:D2:08:92:0C:44
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 0CFEE4FC
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/uo6Z8wysTSZxBRrBneeZ0giSDEQ.roa
Signing time: Wed 18 May 2022 14:22:17 +0000
ROA not before: Wed 18 May 2022 14:22:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52091
IP address blocks: 31.133.42.0/23 maxlen: 24
31.133.40.0/23 maxlen: 23
31.133.40.0/24 maxlen: 24
31.133.41.0/24 maxlen: 24
2a0d:df80::/31 maxlen: 31
2a0d:df80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 218031356 (0xcfee4fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: May 18 14:22:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba8e99f30cac4d2671051ac19de799d208920c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c6:39:d1:95:8f:61:d7:66:41:ae:f1:10:ad:
bd:21:65:ee:8d:8a:92:bf:b5:e5:b5:29:1d:94:3c:
2a:66:b3:9f:fd:20:aa:3e:e5:f1:74:bd:62:d9:28:
d6:2f:b5:56:5e:fd:8f:c1:df:10:89:71:2f:e5:91:
dd:27:12:89:7d:5d:27:b9:56:8c:79:c4:d3:c1:17:
d2:90:bc:cc:b4:17:ef:8f:5e:a6:29:f2:af:86:9b:
cf:81:fc:0c:9d:ba:45:92:b4:a6:64:f1:b1:9c:41:
a2:ce:5f:12:66:21:20:a6:c1:d1:1b:3f:b7:85:0b:
23:91:8c:70:86:c5:93:86:ac:cb:56:18:cc:8e:99:
44:3a:e0:f0:25:c5:88:e9:e5:99:09:fc:21:25:03:
1e:78:b7:92:8f:1e:96:3e:04:73:9d:07:83:c1:09:
73:e1:58:b5:64:03:5e:bb:c2:96:6f:50:57:db:7c:
b4:f9:9a:c0:fe:90:77:b8:5c:ad:46:d8:72:f8:f0:
db:9b:33:c7:45:cb:8b:5b:21:74:31:6e:d3:99:ce:
15:66:12:94:45:1d:54:f8:5c:65:a7:d6:a9:26:00:
96:b9:31:23:34:c6:af:76:48:c9:66:b4:71:82:bd:
a8:1c:d0:6f:90:36:fa:1a:4a:6e:0f:d1:6a:10:57:
e0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8E:99:F3:0C:AC:4D:26:71:05:1A:C1:9D:E7:99:D2:08:92:0C:44
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/uo6Z8wysTSZxBRrBneeZ0giSDEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.40.0/22
IPv6:
2a0d:df80::/29
Signature Algorithm: sha256WithRSAEncryption
10:18:15:f0:3f:28:46:87:47:16:2b:58:e0:ae:c3:0b:58:96:
ff:25:36:f3:2e:35:ca:54:35:02:39:8c:b6:26:87:51:82:05:
2e:96:e7:e0:ca:0f:67:63:41:2d:cc:6a:b3:04:c2:08:b5:5d:
a1:18:be:fd:b7:ad:66:b5:c0:73:a1:12:07:85:a3:a7:ee:ce:
1e:3d:e3:11:09:c5:da:7d:4d:d6:b1:41:b6:9c:54:d8:e1:42:
6f:76:f2:7a:4a:56:31:44:05:01:4c:75:f2:65:ac:10:cf:b2:
8c:d6:69:5e:ab:7d:8a:6c:ad:95:83:88:86:13:ca:61:9b:51:
c8:f5:4b:c2:f4:84:cf:bf:7c:d7:5d:14:48:c6:65:0c:06:18:
d4:01:fb:44:63:30:db:28:30:71:ce:cf:ca:8d:77:b5:05:5d:
22:42:4c:84:4c:31:2a:db:34:d6:92:f6:b8:67:43:43:8a:7f:
7e:b1:31:19:1e:50:06:3e:62:b1:6f:89:5b:50:a1:25:ef:a1:
76:61:ed:e7:46:18:f0:c6:27:aa:9a:11:72:6d:8a:85:36:49:
73:e7:48:72:87:c1:3b:6a:92:70:23:9e:ed:ff:75:48:a7:1a:
99:8c:7a:26:a4:0b:18:c6:5d:7b:6d:3a:af:68:48:7f:7c:5d:
a0:94:2d:30
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEDP7k/DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
YzY0ZjlkMDRlZmQ1YTlmYzJlMjNiNDJkNWI1MWFlZmQ5YTUwMjUwMB4XDTIyMDUx
ODE0MjIxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmE4ZTk5ZjMwY2Fj
NGQyNjcxMDUxYWMxOWRlNzk5ZDIwODkyMGM0NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANHGOdGVj2HXZkGu8RCtvSFl7o2Kkr+15bUpHZQ8Kmazn/0g
qj7l8XS9Ytko1i+1Vl79j8HfEIlxL+WR3ScSiX1dJ7lWjHnE08EX0pC8zLQX749e
pinyr4abz4H8DJ26RZK0pmTxsZxBos5fEmYhIKbB0Rs/t4ULI5GMcIbFk4asy1YY
zI6ZRDrg8CXFiOnlmQn8ISUDHni3ko8elj4Ec50Hg8EJc+FYtWQDXrvClm9QV9t8
tPmawP6Qd7hcrUbYcvjw25szx0XLi1shdDFu05nOFWYSlEUdVPhcZafWqSYAlrkx
IzTGr3ZIyWa0cYK9qBzQb5A2+hpKbg/RahBX4JECAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBS6jpnzDKxNJnEFGsGd55nSCJIMRDAfBgNVHSMEGDAWgBRcZPnQTv1an8Li
O0LVtRrv2aUCUDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1hHVDUwRTc5V3BfQzRqdEMxYlVhNzltbEFsQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjkvMTg0OWE2LWY5MjEtNGI1MC05MTVlLWI2NmZhNGY0NzYzYS8x
L3VvNlo4d3lzVFNaeEJSckJuZWVaMGdpU0RFUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkv
MTg0OWE2LWY5MjEtNGI1MC05MTVlLWI2NmZhNGY0NzYzYS8xL1hHVDUwRTc5V3Bf
QzRqdEMxYlVhNzltbEFsQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAh+FKDANBAIAAjAHAwUDKg3fgDAN
BgkqhkiG9w0BAQsFAAOCAQEAEBgV8D8oRodHFitY4K7DC1iW/yU28y41ylQ1AjmM
tiaHUYIFLpbn4MoPZ2NBLcxqswTCCLVdoRi+/betZrXAc6ESB4Wjp+7OHj3jEQnF
2n1N1rFBtpxU2OFCb3byekpWMUQFAUx18mWsEM+yjNZpXqt9imytlYOIhhPKYZtR
yPVLwvSEz798110USMZlDAYY1AH7RGMw2ygwcc7Pyo13tQVdIkJMhEwxKts01pL2
uGdDQ4p/frExGR5QBj5isW+JW1ChJe+hdmHt50YY8MYnqpoRcm2KhTZJc+dIcofB
O2qScCOe7f91SKcamYx6JqQLGMZde206r2hIf3xdoJQtMA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:48 2024 by rpki-client on console-ams.rpki-client.org