Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/G31WAyXkzvV7FTU825_5_I8jY9E.roa
File: G31WAyXkzvV7FTU825_5_I8jY9E.roa (raw, json)
Hash identifier: u2Zpuvmaj5LLXdYIALWfv+AXotVcKVIe+uurQW1+4Lw=
Subject key identifier: 1B:7D:56:03:25:E4:CE:F5:7B:15:35:3C:DB:9F:F9:FC:8F:23:63:D1
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 01882F5315EB27FBCDECED27A9B9A9205C55
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/G31WAyXkzvV7FTU825_5_I8jY9E.roa
Signing time: Thu 18 May 2023 14:45:54 +0000
ROA not before: Thu 18 May 2023 14:45:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54339
IP address blocks: 212.113.120.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2f:53:15:eb:27:fb:cd:ec:ed:27:a9:b9:a9:20:5c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: May 18 14:45:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b7d560325e4cef57b15353cdb9ff9fc8f2363d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c6:a7:e7:2a:10:c5:6c:44:37:56:3a:b3:c7:
8a:9c:ed:45:ed:77:2a:42:c1:3b:a6:87:a1:d5:e2:
43:d8:f0:a9:f7:90:8a:dd:b9:00:e7:d3:9b:63:92:
f0:1a:de:7e:fd:0d:a0:a6:14:a4:25:45:15:98:40:
27:64:75:6f:cf:31:33:f3:a5:f5:08:5e:58:f6:d6:
65:e5:a2:1d:50:46:61:87:5d:50:1e:9d:29:f6:77:
f2:7c:1a:c4:7e:af:a9:ef:7c:a8:57:72:ec:82:df:
63:78:db:09:ad:3d:dc:68:f7:66:e2:fb:91:34:55:
5c:a6:1f:18:8d:ae:f2:ff:93:e5:6f:44:25:ad:45:
1f:2f:cb:56:56:ae:be:52:8e:cd:ef:d7:50:22:a1:
1a:12:85:ee:85:5b:3e:76:7b:8f:e3:0f:c9:ad:bd:
90:f1:c7:e0:3f:9b:6f:0c:06:d7:96:c2:c3:73:0c:
c5:8e:ed:df:a2:36:58:47:fb:53:c2:fc:8e:d5:19:
54:14:40:f5:5d:a5:f6:ef:ce:b9:26:5e:ee:8a:3c:
39:18:2e:ca:ae:e1:72:e1:a1:49:81:78:96:c4:40:
dc:34:9f:4e:d3:1b:e4:3f:da:d9:92:b4:21:bf:20:
cf:57:cb:69:e3:1c:f8:3f:d3:67:a5:e9:91:56:69:
ed:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7D:56:03:25:E4:CE:F5:7B:15:35:3C:DB:9F:F9:FC:8F:23:63:D1
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/G31WAyXkzvV7FTU825_5_I8jY9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.113.120.0/22
Signature Algorithm: sha256WithRSAEncryption
45:74:ba:73:1d:bd:e3:79:0c:35:61:d7:8f:e9:01:a2:39:f2:
2d:bb:bf:1b:e5:ed:6f:c0:19:9f:2d:f0:da:f2:1a:2d:1f:d0:
e1:13:95:6f:9f:3a:c2:c0:66:80:ec:2d:ca:b9:c6:1e:69:ad:
a4:92:96:d8:04:e0:ff:45:20:07:3e:bb:b7:a4:1c:3b:b1:e6:
2d:c2:62:89:4c:44:24:0f:46:de:48:35:2a:37:96:63:5f:f3:
c4:15:46:9a:50:e0:d6:42:2c:bd:67:b4:a8:cb:0d:6a:36:a3:
37:69:cf:71:38:95:52:4d:05:8c:41:17:14:3c:c4:c2:30:10:
b2:7a:31:5e:3b:90:f4:f5:92:ad:52:29:15:82:b0:4f:f5:fd:
79:53:13:b1:cc:5c:5d:32:dc:df:c4:ff:74:b1:a3:15:58:24:
e4:cb:db:1b:f2:4f:ee:bd:10:7a:1d:d5:89:b9:ae:3f:1d:5f:
8b:41:8f:51:61:91:35:77:1e:1d:3e:c0:53:f2:80:f0:3f:f3:
0c:f7:27:a7:61:39:68:60:59:02:a4:42:6e:89:1e:b9:52:14:
88:ba:68:aa:04:03:89:e6:67:27:68:40:b1:26:c6:d2:bc:4a:
66:70:2a:91:df:fd:f1:58:79:7e:12:ce:af:09:89:ee:d4:e1:
1b:6b:d8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:24 2025 by rpki-client