Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/NEmBAQNoDi0keexnrltoeGogePE.roa
File: NEmBAQNoDi0keexnrltoeGogePE.roa (raw, json)
Hash identifier: lnVBRcuQswyiRZSxSelhzNAV+1TtUQnvJCH5c5W4mDA=
Subject key identifier: 34:49:81:01:03:68:0E:2D:24:79:EC:67:AE:5B:68:78:6A:20:78:F1
Certificate issuer: /CN=1942817a29882d433bf1bb8ebc59b2ff256e803f
Certificate serial: 01856E6FAD3D17BBD5547B0441EE1DDC42FF
Authority key identifier: 19:42:81:7A:29:88:2D:43:3B:F1:BB:8E:BC:59:B2:FF:25:6E:80:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/NEmBAQNoDi0keexnrltoeGogePE.roa
Signing time: Sun 01 Jan 2023 17:44:50 +0000
ROA not before: Sun 01 Jan 2023 17:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15935
IP address blocks: 31.130.168.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:ad:3d:17:bb:d5:54:7b:04:41:ee:1d:dc:42:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1942817a29882d433bf1bb8ebc59b2ff256e803f
Validity
Not Before: Jan 1 17:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3449810103680e2d2479ec67ae5b68786a2078f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:63:c0:7e:cb:e7:50:dc:a8:70:a9:11:55:18:
0b:27:b6:23:f1:ce:1c:31:d3:d1:78:14:ba:5d:08:
89:d6:98:ff:c2:88:e2:38:62:9a:9e:d2:f9:09:0c:
f3:16:b6:22:74:27:43:8d:4f:9b:09:aa:67:78:d1:
46:5c:06:f0:5f:e9:f4:67:d8:08:6c:a4:e3:3b:4c:
5b:70:ba:1e:79:12:42:85:4b:22:12:e3:71:28:7a:
eb:b2:0d:df:53:82:fc:31:a9:36:f7:a2:32:eb:5f:
42:c7:ce:39:cd:cf:3c:41:ea:f7:0b:e4:46:16:3f:
97:11:6a:de:67:75:78:6c:7f:87:c9:13:85:7d:d7:
23:3e:d4:87:70:7d:0e:48:0d:52:9c:88:55:97:15:
d0:80:5a:c4:db:4a:ea:b3:f2:f3:68:f1:a2:d1:34:
6c:2d:f6:b3:ad:c0:1b:a8:3d:26:76:3b:b9:74:53:
29:f0:2a:58:4a:b2:c4:47:b1:55:65:ee:07:46:43:
f3:4c:41:ed:09:c0:bc:11:ca:07:e5:4b:d8:03:bf:
b9:0f:53:09:6c:d1:3e:1d:89:e8:00:0c:57:b0:10:
af:88:5a:26:95:07:5f:6b:9e:c7:b4:f8:a0:15:4b:
33:f9:51:d9:ea:8d:f8:d5:ae:7f:32:c1:ac:ea:70:
5c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:49:81:01:03:68:0E:2D:24:79:EC:67:AE:5B:68:78:6A:20:78:F1
X509v3 Authority Key Identifier:
keyid:19:42:81:7A:29:88:2D:43:3B:F1:BB:8E:BC:59:B2:FF:25:6E:80:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/NEmBAQNoDi0keexnrltoeGogePE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.168.0/21
Signature Algorithm: sha256WithRSAEncryption
40:2b:a7:92:2b:d4:7f:06:09:7b:13:ac:70:87:53:36:e1:99:
db:e5:35:78:b3:2a:60:c6:f9:c1:2d:f0:67:93:b0:c5:1e:2d:
dc:18:20:a1:d7:89:a6:4e:fa:c6:a3:8c:31:02:99:2e:08:04:
28:fb:0b:81:58:07:43:58:63:65:de:91:c3:ac:13:44:fa:40:
ef:76:74:2e:6f:61:e4:32:eb:a1:a3:cd:19:41:4d:24:a9:39:
71:1c:c2:88:19:37:6f:00:c4:36:e9:d5:70:fc:b0:11:87:8f:
10:6a:90:a2:bb:22:77:78:88:c0:90:a9:a2:ea:26:0d:ca:ba:
9c:dd:5e:9e:3d:f3:1f:cc:22:f8:c5:d6:ee:5a:dc:71:53:0b:
e6:e1:62:47:d0:00:83:f5:0f:1d:48:92:6c:15:49:d2:45:38:
5d:00:d6:ab:5a:6b:5f:17:0d:91:c3:f1:15:fc:1b:4a:cb:2d:
63:b8:bb:76:33:30:c5:fd:90:37:f1:09:a6:88:3b:8b:d4:12:
85:ff:e6:46:b4:9e:b1:08:50:51:78:1d:54:9b:b9:f2:05:f9:
b6:fd:02:9e:5b:fb:c9:8a:89:e4:73:76:ad:ef:dc:31:a2:29:
c9:31:33:e1:7b:3e:f0:e7:be:a0:2e:c7:5d:dc:66:a7:d6:c9:
70:a5:dc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:40 2025 by rpki-client