Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/U6zavE5YcvT6tTiTcZmJcnvIHgQ.roa
File: U6zavE5YcvT6tTiTcZmJcnvIHgQ.roa (raw, json)
Hash identifier: lUqEzRcaBqvpsDyENz1f6B7o79e+3SiLEyb8R29YSE0=
Subject key identifier: 53:AC:DA:BC:4E:58:72:F4:FA:B5:38:93:71:99:89:72:7B:C8:1E:04
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 018532CD304FCE6F82FF279F75B2336FE312
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/U6zavE5YcvT6tTiTcZmJcnvIHgQ.roa
Signing time: Wed 21 Dec 2022 03:49:46 +0000
ROA not before: Wed 21 Dec 2022 03:49:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41789
IP address blocks: 31.129.17.0/24 maxlen: 24
31.129.16.0/24 maxlen: 24
31.129.18.0/24 maxlen: 24
31.129.21.0/24 maxlen: 24
31.129.20.0/24 maxlen: 24
31.129.19.0/24 maxlen: 24
31.129.24.0/24 maxlen: 24
31.129.23.0/24 maxlen: 24
31.129.29.0/24 maxlen: 24
31.129.28.0/24 maxlen: 24
31.129.27.0/24 maxlen: 24
31.129.26.0/24 maxlen: 24
31.129.31.0/24 maxlen: 24
31.129.25.0/24 maxlen: 24
46.16.12.0/24 maxlen: 24
46.16.15.0/24 maxlen: 24
46.16.14.0/24 maxlen: 24
31.129.0.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:32:cd:30:4f:ce:6f:82:ff:27:9f:75:b2:33:6f:e3:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Dec 21 03:49:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53acdabc4e5872f4fab53893719989727bc81e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:84:f5:d3:a3:e8:82:27:1b:2f:40:0a:ce:06:
2a:77:00:67:eb:ac:41:c3:7a:5e:07:56:2c:a0:d7:
ef:65:b4:fb:e4:24:75:d9:e4:7b:41:22:7c:b0:43:
6c:6d:6f:5e:dd:b6:de:51:62:b0:d4:52:c3:c0:c8:
14:f1:96:67:a4:2f:40:93:2b:97:85:6a:58:53:47:
21:cd:a8:3f:5c:76:3b:2d:1e:7d:10:3f:3e:2e:92:
4a:37:af:e1:49:9d:db:4a:aa:73:02:a7:8a:a9:a6:
22:76:a7:ec:8f:c5:4c:75:c3:93:d2:0f:5d:33:8c:
9f:d2:6b:4f:14:21:35:9b:7b:41:1b:dc:d3:36:b9:
e9:d7:67:63:96:aa:42:b2:9a:1e:fb:16:04:0f:06:
0d:f6:b4:18:69:40:89:7f:06:49:f5:e4:3f:1c:58:
7e:68:f6:99:70:55:32:ca:d0:59:91:fd:c3:ac:94:
6f:67:8d:f6:30:0e:58:e1:10:43:f9:dd:48:cf:db:
06:f5:b0:26:aa:08:1f:59:25:c8:46:1e:fe:ab:d4:
96:64:fd:e5:19:a4:83:ed:2d:9e:5b:89:10:e0:34:
41:9c:97:77:a3:d4:88:4e:21:1b:0b:ee:f2:da:e3:
85:0f:01:e3:8e:fb:02:b9:f0:9f:67:68:03:bb:dc:
da:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:AC:DA:BC:4E:58:72:F4:FA:B5:38:93:71:99:89:72:7B:C8:1E:04
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/U6zavE5YcvT6tTiTcZmJcnvIHgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.0.0-31.129.21.255
31.129.23.0-31.129.29.255
31.129.31.0/24
46.16.12.0/24
46.16.14.0/23
Signature Algorithm: sha256WithRSAEncryption
80:23:65:e7:bb:e0:09:7a:8f:8d:a8:56:5f:62:c1:f5:2e:27:
c4:05:f0:dc:2f:d3:6a:3c:2a:27:2e:18:91:22:0b:a9:65:94:
82:19:80:1a:e5:2b:d6:ee:46:9a:ef:91:49:10:a6:72:fa:b5:
65:08:35:e3:df:3d:df:56:44:b3:a7:2e:21:5f:95:7c:6d:2e:
bd:b4:df:ac:24:9b:03:21:05:40:75:ba:10:2b:05:94:ab:78:
72:8a:ae:3c:8d:20:82:18:13:0e:e1:50:0e:00:56:26:92:d8:
cf:88:ae:59:db:b3:dd:e1:e8:5d:f2:7c:a8:95:3c:8c:5e:8d:
50:86:2d:11:56:89:b2:86:fe:dd:dd:f4:35:95:3b:41:14:6c:
80:17:98:85:f1:07:07:99:75:91:d1:f3:76:ff:02:e9:07:49:
71:af:d2:3e:8b:c4:ee:bd:07:5d:c7:76:83:93:15:e4:37:82:
3b:f9:d3:9f:04:4b:ac:4b:55:8a:c5:d5:4a:cd:b7:f3:a7:37:
23:69:d3:36:b7:18:b5:c7:28:fc:47:b9:b1:93:96:00:87:1c:
2a:ab:68:28:df:32:3e:7b:fd:1c:e3:1d:67:c0:7f:b2:c3:f0:
8f:a5:f2:45:e3:63:d0:74:65:1d:6a:b5:21:ca:87:f8:a7:56:
52:1d:8a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:54 2023 by rpki-client on console-fra.rpki-client.org