Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/gFVytVDkBEKQgGTzoiSoij0wn38.roa
File: gFVytVDkBEKQgGTzoiSoij0wn38.roa (raw, json)
Hash identifier: l4aMWkP2Bmmgoy8WMXEbNcNX5O6gBqcqDTyqQCTbSUg=
Subject key identifier: 80:55:72:B5:50:E4:04:42:90:80:64:F3:A2:24:A8:8A:3D:30:9F:7F
Certificate issuer: /CN=55d06afd26d25223427a7a0d5f9e3159063fbca3
Certificate serial: 01856E81EEE77E5527373579423F8FD05511
Authority key identifier: 55:D0:6A:FD:26:D2:52:23:42:7A:7A:0D:5F:9E:31:59:06:3F:BC:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VdBq_SbSUiNCenoNX54xWQY_vKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/gFVytVDkBEKQgGTzoiSoij0wn38.roa
Signing time: Sun 01 Jan 2023 18:04:47 +0000
ROA not before: Sun 01 Jan 2023 18:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204311
IP address blocks: 31.217.255.0/24 maxlen: 24
92.255.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:81:ee:e7:7e:55:27:37:35:79:42:3f:8f:d0:55:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55d06afd26d25223427a7a0d5f9e3159063fbca3
Validity
Not Before: Jan 1 18:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=805572b550e40442908064f3a224a88a3d309f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3f:40:97:0c:a4:60:6c:dc:30:96:6e:dc:a3:
3c:ad:90:c7:59:31:2e:ff:31:d3:d3:df:c2:50:23:
1a:d7:f0:e9:1b:75:0a:63:77:bd:16:7e:e6:2d:eb:
72:03:8d:03:34:60:1c:aa:85:89:71:e5:aa:35:3f:
8b:5a:dd:73:6c:c5:d1:2b:5e:37:c1:20:18:f4:9c:
ec:73:7c:56:f4:72:15:47:5f:96:c3:46:90:31:94:
ba:a1:3a:44:2a:e5:35:76:f5:9a:98:57:f1:26:05:
c7:fb:8d:21:94:64:29:0c:e5:13:90:9b:29:d2:fa:
d8:4b:8b:93:53:a7:94:9d:85:bb:98:40:9f:8a:f7:
fd:af:4c:ed:66:66:54:ba:8c:80:01:f9:5b:a0:e2:
4e:12:07:04:31:7c:3a:09:f6:88:9f:61:02:83:79:
51:c9:c1:32:80:32:af:10:50:5e:46:58:99:1e:45:
00:99:4f:d8:e3:e1:84:b7:de:14:f1:cc:fd:07:72:
9a:f1:78:a7:b6:dd:61:b2:55:7e:6f:07:21:58:8e:
d8:d0:34:6a:46:e5:e3:20:ec:38:b4:f5:0e:40:15:
6c:a6:68:8f:01:b0:92:c1:1d:4d:41:e2:f2:68:8d:
f4:e7:74:ef:47:1f:9b:16:ad:95:1f:67:3c:8e:e6:
b9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:55:72:B5:50:E4:04:42:90:80:64:F3:A2:24:A8:8A:3D:30:9F:7F
X509v3 Authority Key Identifier:
keyid:55:D0:6A:FD:26:D2:52:23:42:7A:7A:0D:5F:9E:31:59:06:3F:BC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdBq_SbSUiNCenoNX54xWQY_vKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/gFVytVDkBEKQgGTzoiSoij0wn38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.217.255.0/24
92.255.48.0/24
Signature Algorithm: sha256WithRSAEncryption
30:f6:32:e8:b3:3a:f3:74:93:f6:e5:cb:a2:3c:04:9d:7c:e7:
83:53:1a:48:77:01:e5:e8:3a:2f:0f:78:c4:6f:73:08:97:b6:
d8:4b:05:a4:ba:25:b5:f0:93:00:b5:4a:9c:0d:a6:a1:04:36:
52:c9:87:55:17:5e:3b:86:84:e4:58:2e:0e:8b:08:ac:be:e0:
6a:b8:7c:08:6d:3b:3f:d8:0d:71:3a:d3:e8:5a:b6:db:13:48:
7c:22:ad:49:8a:65:6f:70:ba:7f:f2:b1:16:b3:ea:98:96:33:
26:08:1e:b3:28:8b:11:75:eb:16:63:96:53:76:2e:45:8d:7c:
b8:6e:28:d4:39:16:51:80:0d:53:f7:52:0a:84:69:1e:8d:e2:
8e:fa:fc:8f:4b:2e:a7:88:50:f2:30:2b:40:f3:6e:fb:eb:97:
cc:46:d9:d7:9f:3d:e1:ab:21:5f:17:85:1d:a3:19:20:47:fe:
1f:ac:70:62:c9:b1:88:4c:4d:51:b6:da:b9:60:6b:8d:c5:8f:
93:a7:50:8a:72:0c:83:0c:3b:40:ed:b7:8b:2c:3d:de:56:10:
84:fb:ac:48:e2:0b:97:c0:b9:2b:0e:d2:cd:a3:31:31:0e:a6:
a5:15:38:cd:af:84:39:0b:7f:83:ee:32:da:0b:95:f8:1b:ce:
4d:7e:cf:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:58:03 2025 by rpki-client