Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/1bJQJqDTl3K0GAyPbulDdJuuM9Y.roa
File: 1bJQJqDTl3K0GAyPbulDdJuuM9Y.roa (raw, json)
Hash identifier: 3cEbXyY0e0EXRFULa7L2W4DV7r+Wh9zy5g9W07opInc=
Subject key identifier: D5:B2:50:26:A0:D3:97:72:B4:18:0C:8F:6E:E9:43:74:9B:AE:33:D6
Certificate issuer: /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Certificate serial: 027CEE06
Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/1bJQJqDTl3K0GAyPbulDdJuuM9Y.roa
Signing time: Wed 16 Feb 2022 23:43:02 +0000
ROA not before: Wed 16 Feb 2022 23:43:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207889
IP address blocks: 31.129.228.0/24 maxlen: 24
31.129.229.0/24 maxlen: 24
31.129.230.0/24 maxlen: 24
31.129.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41741830 (0x27cee06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Validity
Not Before: Feb 16 23:43:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d5b25026a0d39772b4180c8f6ee943749bae33d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:52:19:40:03:67:02:f1:78:64:ff:3f:b7:ae:
40:e7:eb:69:8c:fc:df:93:9b:ed:ff:71:07:f6:20:
63:59:02:61:ad:02:69:18:b4:2a:30:b4:f0:2c:eb:
1a:5b:00:ea:be:47:af:6a:fc:ae:18:99:45:1b:70:
ba:78:90:60:cc:96:03:96:af:1e:40:a4:e5:45:f1:
a7:f3:70:8e:3f:c5:75:a4:5a:88:df:92:5d:7f:3b:
34:45:94:09:09:eb:43:e2:8e:1d:08:e4:9f:b1:52:
50:34:6f:be:95:7f:de:f2:86:ce:0e:48:c7:84:b0:
f8:d7:3b:96:b0:63:47:1e:d3:15:d8:6d:d5:38:f3:
8c:22:d3:f4:0a:e2:71:10:cc:3b:0e:50:21:ed:a9:
d5:be:e8:e0:85:fd:32:09:ba:d8:77:4e:6f:21:de:
12:4c:f0:c2:02:e7:84:24:b0:56:1c:0f:1d:24:dd:
e6:bf:5a:e4:3f:bc:ca:17:73:37:47:6c:16:48:a0:
1f:3d:4e:59:f7:78:f8:52:97:d3:64:15:2e:26:df:
0c:55:6b:06:dd:5b:95:54:4b:e9:95:55:77:59:d1:
1c:53:ac:99:3c:ba:fe:18:09:79:0d:f7:41:96:cf:
6f:24:6a:4c:bf:b3:bb:78:b5:88:5f:4d:02:c2:64:
d3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B2:50:26:A0:D3:97:72:B4:18:0C:8F:6E:E9:43:74:9B:AE:33:D6
X509v3 Authority Key Identifier:
keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/1bJQJqDTl3K0GAyPbulDdJuuM9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.228.0/22
Signature Algorithm: sha256WithRSAEncryption
44:ad:51:ff:01:06:e4:b1:bb:8d:23:36:7e:42:98:da:eb:f6:
0d:81:a4:9e:f4:61:89:5c:95:9e:60:9a:d8:6a:df:78:78:e8:
25:a1:c9:42:dc:64:6c:ff:d5:a2:c6:cc:70:6b:e2:96:11:dc:
11:c8:59:c4:33:25:31:bc:03:7a:3d:e8:fd:6d:d5:7e:f4:ac:
df:b4:ae:ce:09:ae:58:fd:c8:f6:d3:90:f5:32:74:09:ec:17:
ed:a3:a4:5f:c5:00:85:33:a6:02:dd:3f:2d:65:53:e2:f2:4a:
84:ab:65:d0:2c:1e:e3:4c:97:ef:3e:b6:f1:01:db:c4:58:22:
fa:2f:a0:9d:67:b3:9d:ed:5f:72:92:b3:11:60:27:bc:83:1a:
13:a0:48:a1:a7:3a:64:b6:4c:0c:94:74:d8:bc:0b:bd:4c:7e:
31:fc:98:9b:e1:c5:24:fd:ea:4c:91:e9:3b:f9:aa:59:46:bc:
f3:1e:dd:b7:cc:37:28:70:ec:59:39:4f:e7:2e:4d:c1:6b:5c:
9e:b3:bd:b2:40:6e:1b:f2:bd:d7:b2:b6:ce:c3:0d:99:05:78:
72:95:f7:a2:68:d1:97:c6:1c:2f:9b:25:79:e0:dc:e6:84:d5:
f9:b8:6c:28:ad:9b:fd:5d:3d:c8:98:6a:b6:2f:3b:3a:41:ce:
62:91:8d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:57 2024 by rpki-client on console-ams.rpki-client.org