Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/wsecj3SDX433KYWv0i9t1cMREP8.roa
File: wsecj3SDX433KYWv0i9t1cMREP8.roa (raw, json)
Hash identifier: Q6Po2XNsIZXqG0OhIeOb8S/zbCci/LQ1XQd0T+BNvhI=
Subject key identifier: C2:C7:9C:8F:74:83:5F:8D:F7:29:85:AF:D2:2F:6D:D5:C3:11:10:FF
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 1227005D
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/wsecj3SDX433KYWv0i9t1cMREP8.roa
Signing time: Thu 24 Mar 2022 07:21:49 +0000
ROA not before: Thu 24 Mar 2022 07:21:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41789
IP address blocks: 31.129.17.0/24 maxlen: 24
31.129.16.0/24 maxlen: 24
31.129.18.0/24 maxlen: 24
31.129.22.0/24 maxlen: 24
31.129.21.0/24 maxlen: 24
31.129.20.0/24 maxlen: 24
31.129.19.0/24 maxlen: 24
31.129.24.0/24 maxlen: 24
31.129.23.0/24 maxlen: 24
31.129.29.0/24 maxlen: 24
31.129.28.0/24 maxlen: 24
31.129.27.0/24 maxlen: 24
31.129.26.0/24 maxlen: 24
31.129.31.0/24 maxlen: 24
31.129.25.0/24 maxlen: 24
31.129.0.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 304545885 (0x1227005d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Mar 24 07:21:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2c79c8f74835f8df72985afd22f6dd5c31110ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:35:2a:a1:7f:e0:ae:ba:5e:9c:6e:9d:bb:81:
1e:f5:5d:c4:7a:c8:fd:cc:98:ff:4b:da:25:01:b6:
e2:73:8d:fe:13:0e:56:96:11:e7:10:71:7e:18:9d:
3d:67:e2:74:48:37:10:1d:4d:b0:d3:9f:ad:e9:af:
dd:2c:95:da:a7:49:88:8f:9c:d8:1f:c0:e8:7d:0b:
8e:1e:03:7a:24:05:4c:60:80:3e:a7:fc:02:ed:d3:
42:cc:aa:c0:ed:a2:2f:cc:3f:6e:f0:cb:6a:f1:d3:
7d:b2:0e:57:8c:1d:49:56:73:73:a0:94:53:b3:b3:
62:78:a3:a9:44:80:d5:12:7e:16:5a:a1:98:6a:99:
15:e6:c0:f1:4d:48:91:f7:83:77:c4:ed:12:9c:b0:
c4:b9:f6:c6:e2:fe:ac:11:e5:67:c8:ed:b4:aa:fb:
67:05:4c:dd:a4:37:c7:47:b7:ce:f5:5e:55:af:25:
ca:d8:3b:55:28:0d:78:68:1b:a0:f9:f1:e4:5d:47:
af:1f:a5:fd:89:67:61:46:ff:95:70:24:83:67:aa:
06:3f:4d:0a:1b:1d:ac:14:f9:30:16:1f:50:28:c9:
73:df:0e:4e:68:1e:14:a1:3e:f2:e3:5d:3e:38:0d:
69:4c:41:7a:bd:b0:c5:1a:44:35:22:4c:8f:e7:08:
95:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C7:9C:8F:74:83:5F:8D:F7:29:85:AF:D2:2F:6D:D5:C3:11:10:FF
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/wsecj3SDX433KYWv0i9t1cMREP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.0.0-31.129.29.255
31.129.31.0/24
Signature Algorithm: sha256WithRSAEncryption
27:b7:e4:6e:36:f8:60:c6:7e:8f:ce:b9:5b:56:e0:15:8a:40:
fe:2c:31:b3:62:4a:95:55:51:01:d2:18:16:91:a8:6a:e7:07:
17:4a:24:49:8c:c9:23:2e:4c:13:fb:6a:88:a1:ae:94:b4:11:
0c:f5:3b:59:6a:19:ac:41:3f:76:87:81:8e:c3:b3:2f:55:af:
0a:97:61:1e:10:a4:0a:e4:0d:83:ae:69:29:b0:7d:d9:5e:8c:
64:42:a0:c9:83:96:79:f4:23:1a:d8:19:01:e4:4e:16:65:82:
12:37:1e:9d:1d:70:fc:d8:f1:cb:af:d4:51:c7:f3:c8:62:79:
37:2e:85:26:95:21:ef:f6:5b:8b:e8:97:bd:e4:d8:af:8e:7c:
e2:41:df:3e:b7:0c:09:c9:55:9d:0f:94:d6:be:5b:0b:b5:1c:
69:6b:da:24:0b:93:9b:b3:fd:49:e3:f8:1f:c1:f4:09:f5:93:
ba:9b:73:9a:42:2d:ac:42:77:9c:e0:8d:d6:d7:0b:38:65:36:
9d:c3:25:f6:3a:cb:27:be:8e:b6:ff:19:c3:15:49:e4:05:8f:
af:18:6f:e0:71:cd:fe:04:7d:6d:86:be:0e:b9:b0:7d:90:0e:
92:06:be:be:f1:37:40:74:d5:1b:10:52:f2:23:e1:69:99:e8:
b2:76:13:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:55 2023 by rpki-client on console-fra.rpki-client.org