Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/GoGvJb2PibMKdzOtvDzd74mrgx4.roa
File: GoGvJb2PibMKdzOtvDzd74mrgx4.roa (raw, json)
Hash identifier: K+k0Y6OuxInN0U/j+sUk3DjcFLqJZbeVvvjSyuRhCtY=
Subject key identifier: 1A:81:AF:25:BD:8F:89:B3:0A:77:33:AD:BC:3C:DD:EF:89:AB:83:1E
Certificate issuer: /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Certificate serial: 02764C39
Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/GoGvJb2PibMKdzOtvDzd74mrgx4.roa
Signing time: Mon 14 Feb 2022 13:41:58 +0000
ROA not before: Mon 14 Feb 2022 13:41:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50130
IP address blocks: 31.129.227.0/24 maxlen: 24
31.129.240.0/22 maxlen: 22
31.129.234.0/24 maxlen: 24
31.129.240.0/23 maxlen: 23
31.129.242.0/23 maxlen: 23
31.129.252.0/22 maxlen: 22
31.129.252.0/23 maxlen: 23
31.129.252.0/24 maxlen: 24
31.129.253.0/24 maxlen: 24
31.129.254.0/24 maxlen: 24
31.129.254.0/23 maxlen: 23
31.129.255.0/24 maxlen: 24
31.129.224.0/22 maxlen: 22
31.129.224.0/24 maxlen: 24
31.129.224.0/23 maxlen: 23
31.129.225.0/24 maxlen: 24
31.129.226.0/23 maxlen: 23
31.129.226.0/24 maxlen: 24
213.5.192.0/24 maxlen: 24
213.5.194.0/24 maxlen: 24
213.5.193.0/24 maxlen: 24
213.5.195.0/24 maxlen: 24
213.5.196.0/23 maxlen: 23
213.5.196.0/24 maxlen: 24
213.5.197.0/24 maxlen: 24
213.5.198.0/24 maxlen: 24
213.5.198.0/23 maxlen: 23
213.5.199.0/24 maxlen: 24
213.5.196.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41307193 (0x2764c39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Validity
Not Before: Feb 14 13:41:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a81af25bd8f89b30a7733adbc3cddef89ab831e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:64:8d:67:88:a2:8b:0f:14:42:c6:d8:35:fa:
2d:b4:e6:0f:0f:b0:aa:3a:4f:30:bd:b8:ef:38:ce:
64:8b:7a:97:03:e1:0b:4e:3f:1c:2f:6f:b8:7e:c9:
d9:58:97:5d:e7:e5:2c:98:4c:2c:9f:96:5d:19:e2:
3e:e7:a8:02:9f:5b:1d:28:ef:f5:c0:b8:4d:d2:cc:
09:67:62:cf:09:5f:f0:02:cf:8f:2a:cc:27:fb:10:
44:88:87:6a:87:7c:18:42:fc:83:67:2d:23:5c:31:
cf:7e:47:65:f5:a2:89:6f:c5:ea:f7:d0:ca:86:da:
6d:ee:e3:67:ae:b5:8d:f7:95:1d:d8:60:60:3a:e1:
ba:cc:8b:0d:65:9f:78:aa:8b:94:96:c8:04:ae:58:
b4:74:a0:be:6a:54:05:49:66:9d:27:f7:32:53:af:
66:32:3a:1c:3b:b9:4e:27:52:f0:81:d9:f2:d5:25:
c1:b2:44:01:4c:6a:da:54:ea:c7:cc:9f:36:8e:dd:
2f:45:1c:6b:e7:2c:d1:55:ba:7c:49:2a:fe:d4:b7:
aa:c5:4a:61:77:cb:56:f7:41:17:08:c5:08:dc:47:
09:6e:87:85:a8:a1:73:88:a4:3c:a3:d4:ba:34:d9:
d5:bd:70:53:f7:24:b8:7a:e3:3a:13:e4:41:80:5a:
a4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:81:AF:25:BD:8F:89:B3:0A:77:33:AD:BC:3C:DD:EF:89:AB:83:1E
X509v3 Authority Key Identifier:
keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/GoGvJb2PibMKdzOtvDzd74mrgx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.224.0/22
31.129.234.0/24
31.129.240.0/22
31.129.252.0/22
213.5.192.0/21
Signature Algorithm: sha256WithRSAEncryption
36:01:0b:07:16:8e:68:e6:f3:b6:71:c4:77:16:2f:57:a7:27:
13:8d:b7:67:58:f1:e9:c9:e0:29:f5:45:c9:76:cf:61:d5:6d:
b7:b7:56:c0:35:5d:e5:9b:11:fb:cb:8e:5a:0d:2e:bd:ff:5f:
3d:1b:63:df:e9:f1:e1:54:bf:90:e1:42:ec:4a:4f:f4:97:26:
bc:ce:a4:37:37:14:86:78:22:f7:02:12:45:d1:3d:1c:85:81:
77:d8:3b:d9:22:91:c3:02:0a:dc:1b:86:96:c8:10:b4:03:c1:
e3:5b:c9:11:ba:23:e5:64:c4:e2:9b:b9:83:6b:81:e2:84:e2:
be:c5:29:3f:70:d4:c0:af:b0:03:46:b5:97:b0:19:29:bf:24:
e2:a1:12:0d:9b:bb:91:e1:30:4e:8d:0a:8d:2e:16:52:59:5b:
f4:9d:98:df:2d:b6:ff:84:2d:16:00:04:ad:bf:ab:95:c5:f1:
90:2a:73:78:31:81:85:bc:35:03:6b:5c:21:5b:e7:8f:54:8b:
75:72:a4:42:5e:88:bd:ad:fe:50:a1:28:12:a5:ab:0c:55:e3:
3e:f3:b0:a4:0a:65:ff:56:eb:f6:06:69:10:a7:c2:b8:fa:eb:
59:5e:a2:c1:da:51:38:22:4e:a1:36:b3:8a:fc:64:84:b1:97:
63:1b:75:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:57 2024 by rpki-client on console-ams.rpki-client.org