Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/wIPXLMjHkMOEDUw7GheJrgtPGiA.roa
File: wIPXLMjHkMOEDUw7GheJrgtPGiA.roa (raw, json)
Hash identifier: kf1RTQaGUUoPjKKIfdy3U4oaOWV1MJCUGTB/u+I5uWs=
Subject key identifier: C0:83:D7:2C:C8:C7:90:C3:84:0D:4C:3B:1A:17:89:AE:0B:4F:1A:20
Certificate issuer: /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Certificate serial: 0181D2597B51228C6BBF59293D94998193F3
Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/wIPXLMjHkMOEDUw7GheJrgtPGiA.roa
Signing time: Wed 06 Jul 2022 07:11:28 +0000
ROA not before: Wed 06 Jul 2022 07:11:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207889
IP address blocks: 31.129.230.0/24 maxlen: 24
31.129.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d2:59:7b:51:22:8c:6b:bf:59:29:3d:94:99:81:93:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Validity
Not Before: Jul 6 07:11:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c083d72cc8c790c3840d4c3b1a1789ae0b4f1a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a1:bc:8b:e7:90:ed:bd:df:97:4f:27:fb:5c:
23:da:78:18:d9:2f:38:9f:2c:a6:6a:ec:c5:0d:f1:
db:5d:32:f8:77:e8:a5:62:1c:ba:96:e0:53:ce:a9:
45:51:81:78:47:e2:7c:ae:c3:04:5e:c8:b7:1c:9e:
48:9d:11:f5:83:64:ed:8f:84:79:eb:c7:3b:80:83:
cd:3a:f0:f0:ca:c0:c6:8e:e4:ea:7e:cc:98:c9:8f:
5e:a2:54:fa:8a:67:96:6e:ed:e3:d9:56:9f:27:e3:
66:6b:33:f6:f0:fc:b2:c7:1c:2b:13:48:c7:62:6d:
13:3d:0e:8f:61:12:24:e8:d5:0c:e9:02:44:f1:18:
81:2d:77:d5:a0:25:f4:4b:20:25:ee:f2:a0:15:47:
21:4e:26:1b:dc:da:19:34:bb:18:eb:ff:7f:f5:37:
2a:1f:99:f8:60:ed:1c:fa:73:6e:81:93:29:fa:a4:
6c:f0:38:08:64:88:f7:22:a9:a7:31:d9:7e:5d:fa:
01:0b:71:26:d2:6c:34:dc:79:43:d8:85:3a:1a:79:
3b:b6:8c:86:49:d3:e7:fe:4e:15:93:32:50:60:92:
b9:52:a2:24:9c:76:74:91:6e:75:2a:0a:17:84:4b:
cc:01:9e:7d:da:06:03:cb:28:62:a2:b5:48:f8:d2:
51:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:83:D7:2C:C8:C7:90:C3:84:0D:4C:3B:1A:17:89:AE:0B:4F:1A:20
X509v3 Authority Key Identifier:
keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/wIPXLMjHkMOEDUw7GheJrgtPGiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.230.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:e8:fb:15:7a:c2:fe:10:bd:5c:ea:f6:24:ff:e8:4c:89:70:
58:32:25:ea:95:35:d2:e4:a7:13:b9:2e:4b:93:1b:6d:36:89:
ab:d9:b1:ea:d1:3a:26:92:83:17:6c:26:b7:fc:13:a2:81:80:
d8:6f:84:3d:41:29:a2:d6:0a:f8:64:95:73:71:7e:3f:3c:c9:
84:8f:93:53:d3:9b:40:a4:2b:0e:84:5e:da:f1:43:fb:20:85:
1a:51:8f:57:5b:b7:89:af:54:ce:fa:fc:06:37:4e:b3:08:00:
2b:4e:1e:3e:b0:ec:26:8c:91:62:15:f8:4d:d8:37:eb:f2:e5:
5e:9a:91:11:83:a1:db:b9:18:e0:2e:6c:c9:75:27:3f:55:4b:
23:32:1c:77:f3:1b:8b:00:8b:43:64:ad:69:f0:60:01:d8:6b:
7e:aa:73:81:92:eb:eb:a3:45:b0:f9:a0:2f:0d:b1:1b:ab:2c:
36:79:81:d3:fc:8c:92:5d:8d:9f:25:ef:20:65:f4:09:8c:e7:
04:5a:40:f2:a4:af:5b:bf:17:bf:6e:61:a5:32:14:59:1a:f9:
1b:2d:a6:d3:7c:10:e3:b8:06:e5:74:c2:65:6a:a6:d5:08:a4:
46:cc:99:e0:56:7e:93:90:b1:87:f8:14:ca:3b:73:bf:e6:ce:
c0:d5:a2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:11 2024 by rpki-client on console-fra.rpki-client.org