Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/TMfMSwySNcxK6YuLxwkEOBXDzc0.roa
File: TMfMSwySNcxK6YuLxwkEOBXDzc0.roa (raw, json)
Hash identifier: XwBv0MLp9g14/3GsxSylGLuFolUdRhOJNiUuQ9NaOuo=
Subject key identifier: 4C:C7:CC:4B:0C:92:35:CC:4A:E9:8B:8B:C7:09:04:38:15:C3:CD:CD
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 0183F23FCFE0830E2DA034F59512AA216F1D
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/TMfMSwySNcxK6YuLxwkEOBXDzc0.roa
Signing time: Wed 19 Oct 2022 21:56:51 +0000
ROA not before: Wed 19 Oct 2022 21:56:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57235
IP address blocks: 81.31.224.0/20 maxlen: 24
81.31.238.0/24 maxlen: 24
81.31.240.0/23 maxlen: 24
81.31.234.0/24 maxlen: 24
81.31.235.0/24 maxlen: 24
81.31.236.0/24 maxlen: 24
81.31.248.0/22 maxlen: 24
81.31.250.0/24 maxlen: 24
81.31.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f2:3f:cf:e0:83:0e:2d:a0:34:f5:95:12:aa:21:6f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Oct 19 21:56:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4cc7cc4b0c9235cc4ae98b8bc709043815c3cdcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:12:46:da:0f:a1:54:01:16:5c:25:4c:e9:37:
52:b1:b6:d0:04:b8:2b:4f:93:4a:c6:51:a8:57:ae:
55:9b:9d:4b:70:6e:13:05:7c:1a:e8:04:d3:c7:20:
61:e3:e7:37:af:17:fc:74:86:2e:33:6a:a8:ed:85:
82:0e:2f:ce:91:1b:c7:6c:8a:76:3f:29:39:66:4c:
88:8a:1b:b5:1a:4b:80:72:3f:13:79:1f:16:ec:38:
3e:fe:f1:62:8e:a1:61:01:bb:4c:2d:ba:fb:87:2b:
d8:b8:ba:27:67:d0:9a:17:1b:e5:7d:da:6f:37:d6:
8e:1c:48:45:be:ea:25:d7:c3:fe:19:2e:da:07:80:
f9:7e:9d:b5:0c:c2:75:d5:aa:e0:52:1d:3a:9d:95:
d2:8d:18:85:a9:84:2f:bf:cb:2f:3c:d5:78:62:05:
b5:ca:4f:ba:2c:36:ca:d4:1a:2a:9a:c2:19:2c:b1:
cc:ae:41:06:6c:86:d5:88:76:51:24:3e:df:fe:ea:
56:2f:f7:ff:1a:c8:6c:0e:d8:39:a4:0b:1b:b1:61:
73:fa:b1:9e:ea:c2:9c:75:d1:32:d1:35:28:f2:5e:
cd:e6:86:40:92:2b:bc:0e:7a:ae:3f:be:06:de:89:
48:45:7f:72:7b:d6:66:14:cf:ff:83:b9:e2:00:68:
c4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C7:CC:4B:0C:92:35:CC:4A:E9:8B:8B:C7:09:04:38:15:C3:CD:CD
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/TMfMSwySNcxK6YuLxwkEOBXDzc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.224.0-81.31.241.255
81.31.248.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:73:f1:45:e4:0a:ec:1a:8e:ca:3c:4f:87:8e:23:75:6f:37:
82:b1:6d:b2:a4:2e:c6:fd:0d:d9:2b:92:dd:e7:63:44:0d:d1:
5c:20:b0:10:54:41:6a:67:1d:47:a5:7e:9c:d2:af:0b:e5:1c:
e7:e2:d6:cd:72:16:a5:b8:d9:7d:66:d8:38:52:28:f6:46:9b:
64:91:b6:4c:83:1f:e5:e4:8a:d4:54:3d:9a:64:51:9d:94:95:
a5:a6:94:db:7e:95:db:cd:75:cf:82:71:ea:50:a2:2b:f1:e0:
7f:5d:82:e1:54:9d:86:39:9f:7b:40:fc:4e:b6:de:e4:38:db:
89:0a:45:df:43:0f:f4:61:42:6d:2c:81:85:88:12:fc:a6:1f:
f3:96:99:35:98:29:71:3d:f6:55:9c:35:33:9b:05:35:a1:05:
12:43:8c:2a:ca:6c:57:72:1a:a4:02:06:63:53:12:d3:97:6f:
a3:96:4f:59:25:76:9a:cb:b1:29:84:f3:b2:80:57:91:20:f0:
b3:0f:d5:9e:d1:bf:65:5e:3b:ca:9c:b2:c3:bf:b0:d9:c2:ea:
4a:83:54:19:00:59:b0:2e:dd:ee:02:c1:2a:a9:d7:f5:53:5f:
40:dd:3b:0a:d3:ac:eb:ee:2e:99:27:1b:ac:27:ab:b6:f4:19:
63:eb:2e:32
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:09 2023 by rpki-client on console-fra.rpki-client.org