Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/LPBKiOyAVUbwjZcil7wB_1Vxy-o.roa
File: LPBKiOyAVUbwjZcil7wB_1Vxy-o.roa (raw, json)
Hash identifier: Tj5FRmJxAV/IDhJjli6AeHYehYY/IXqIARwPDZmdLEY=
Subject key identifier: 2C:F0:4A:88:EC:80:55:46:F0:8D:97:22:97:BC:01:FF:55:71:CB:EA
Certificate issuer: /CN=4081f85602b1168925d83eb3ca61609f357956a6
Certificate serial: D4D8AA
Authority key identifier: 40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/LPBKiOyAVUbwjZcil7wB_1Vxy-o.roa
Signing time: Wed 23 Feb 2022 14:33:48 +0000
ROA not before: Wed 23 Feb 2022 14:33:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56749
IP address blocks: 31.130.187.0/24 maxlen: 24
31.130.191.0/24 maxlen: 24
31.130.190.0/24 maxlen: 24
31.130.189.0/24 maxlen: 24
31.130.188.0/22 maxlen: 22
31.130.188.0/24 maxlen: 24
31.130.179.0/24 maxlen: 24
31.130.178.0/24 maxlen: 24
31.130.177.0/24 maxlen: 24
31.130.180.0/24 maxlen: 24
31.130.186.0/24 maxlen: 24
31.130.185.0/24 maxlen: 24
31.130.184.0/24 maxlen: 24
31.130.183.0/24 maxlen: 24
31.130.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13949098 (0xd4d8aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4081f85602b1168925d83eb3ca61609f357956a6
Validity
Not Before: Feb 23 14:33:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2cf04a88ec805546f08d972297bc01ff5571cbea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:49:a0:fd:97:73:3e:71:51:f1:53:96:be:00:
ac:63:71:42:35:2c:28:d9:0d:30:2c:da:9c:6d:56:
e5:d3:e3:1d:b4:2c:ca:9e:fc:5f:9c:4a:2e:2d:21:
3f:99:66:e9:d9:3a:dc:5c:53:84:c6:2a:e7:00:f7:
d2:9b:70:67:e8:7d:ca:91:d9:0b:d8:59:a0:ce:33:
b6:44:a2:82:be:69:be:59:05:1c:57:5b:17:73:9f:
e0:74:b9:4f:a4:3e:75:76:8c:4d:31:ae:ec:69:af:
f9:96:60:0e:f7:12:b8:34:62:4a:40:32:a3:69:ec:
9d:15:11:3e:e7:63:02:36:4b:f7:4a:9f:14:22:be:
eb:3f:47:f8:63:d2:56:d9:b4:87:91:b4:73:97:26:
9b:8b:80:05:ba:94:a0:2b:35:be:5d:75:53:f1:80:
14:e2:a3:aa:0e:b7:e6:88:75:91:d3:84:5a:a6:60:
53:ee:3c:07:78:f4:61:ac:07:c9:cc:38:7e:3e:e7:
a6:f2:1e:1f:68:77:14:ac:68:85:0b:ab:b3:fe:6b:
f1:b1:52:ad:be:8c:dd:5f:c1:66:49:7d:3b:31:19:
85:ca:ab:d1:79:51:55:1d:34:4d:9b:65:70:03:cd:
53:9a:ca:69:fb:f2:d3:5e:68:88:b6:3c:15:66:c9:
e8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F0:4A:88:EC:80:55:46:F0:8D:97:22:97:BC:01:FF:55:71:CB:EA
X509v3 Authority Key Identifier:
keyid:40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/LPBKiOyAVUbwjZcil7wB_1Vxy-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.177.0-31.130.180.255
31.130.182.0-31.130.191.255
Signature Algorithm: sha256WithRSAEncryption
23:ed:8b:4e:90:ac:9f:84:a7:87:71:78:eb:d9:c9:0a:74:f0:
bd:8e:aa:52:38:68:22:77:7e:05:0d:ee:0e:6c:ca:a2:ca:0d:
d0:3f:4b:21:88:8b:f7:a4:80:c4:d4:0a:16:1c:70:e1:b8:09:
ce:f1:df:c3:d3:cb:cf:05:f3:fa:24:43:11:d4:94:80:d4:f1:
c4:b8:a0:15:76:ab:d9:20:e1:fa:ee:f8:fb:07:89:69:88:17:
43:6a:14:05:9f:b5:47:d7:e4:e2:b0:90:ca:bd:5b:d4:12:cb:
ff:2a:48:c5:6e:4a:f5:b0:ac:5d:8f:65:ab:f4:7e:ec:27:53:
64:42:0a:1e:2f:a2:3a:a5:e4:55:76:33:de:8c:f2:88:53:99:
f7:77:92:8d:03:18:c1:de:2f:fa:58:96:68:20:2b:51:07:6c:
71:1e:10:ce:44:d2:c4:5f:f9:bb:8c:7f:0e:16:a3:41:03:51:
de:22:fe:ed:fb:a0:c5:75:89:37:b7:55:c8:9b:f6:73:a6:e3:
67:eb:03:94:f8:f6:fb:c5:7c:c2:a5:4a:c7:13:9e:aa:33:d9:
9e:63:10:1e:38:12:42:7f:47:92:85:dc:9a:1a:06:03:ca:3c:
d5:2f:ba:f3:68:4a:f6:f0:8a:44:4c:6f:0c:a8:23:70:7b:c5:
79:11:c2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:25 2024 by rpki-client on console-fra.rpki-client.org