Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/XALH6ay7u5UTOOTkjd5xn0VsvXU.roa
File: XALH6ay7u5UTOOTkjd5xn0VsvXU.roa (raw, json)
Hash identifier: cswaISYiMxmjpcoLWKScxrrJjcWKavDFTifYYgmJDio=
Subject key identifier: 5C:02:C7:E9:AC:BB:BB:95:13:38:E4:E4:8D:DE:71:9F:45:6C:BD:75
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 0181D37AD109E7B43E378D9C42AFC1EB12B5
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/XALH6ay7u5UTOOTkjd5xn0VsvXU.roa
Signing time: Wed 06 Jul 2022 12:27:30 +0000
ROA not before: Wed 06 Jul 2022 12:27:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62206
IP address blocks: 31.133.80.0/22 maxlen: 22
176.103.224.0/22 maxlen: 22
31.133.88.0/22 maxlen: 22
176.103.232.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d3:7a:d1:09:e7:b4:3e:37:8d:9c:42:af:c1:eb:12:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: Jul 6 12:27:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c02c7e9acbbbb951338e4e48dde719f456cbd75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a5:18:2e:f3:c1:0c:44:49:f5:76:10:f3:e8:
24:a8:a3:ac:10:86:78:5c:aa:43:94:76:cd:e1:17:
5c:4b:15:1c:f8:27:a6:d5:50:43:4a:c8:ba:ea:4c:
5f:c9:45:34:50:01:92:65:ac:7e:7c:a2:5d:e7:7c:
77:d4:b8:ea:07:ad:c8:26:d2:3e:29:3e:88:c3:79:
7c:75:18:3c:d5:da:e4:c9:49:8d:fe:da:d8:37:df:
e9:c7:33:ff:32:28:21:6a:2b:cb:a8:eb:67:7e:6a:
d2:d6:85:11:07:bf:b2:4f:70:c8:7a:09:db:e9:e3:
62:2e:a6:48:5f:32:7b:62:0c:0a:a0:fa:5d:a4:63:
2e:8c:ba:1b:72:6f:89:e8:17:fc:39:00:5d:8b:32:
61:92:0c:d8:61:5c:3f:6d:c3:10:0f:12:ad:f0:72:
24:18:ce:37:22:73:6c:48:49:51:58:f5:24:6d:08:
16:b3:68:86:b8:4f:13:46:3b:2a:eb:a8:a1:94:b0:
a2:a8:0a:bb:80:1b:f0:67:11:7c:a0:3a:16:ab:27:
51:7d:d1:ab:ec:d7:95:64:8f:25:4c:27:cd:be:8d:
a3:e0:90:ae:e3:21:28:c4:63:0b:a3:be:a7:1e:3f:
fb:f1:65:46:c2:46:70:81:5b:32:cd:1a:a6:9a:76:
d2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:02:C7:E9:AC:BB:BB:95:13:38:E4:E4:8D:DE:71:9F:45:6C:BD:75
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/XALH6ay7u5UTOOTkjd5xn0VsvXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.80.0/22
31.133.88.0/22
176.103.224.0/22
176.103.232.0/22
Signature Algorithm: sha256WithRSAEncryption
04:b6:09:da:5f:be:67:60:b5:90:d2:4c:5e:56:cd:b4:73:56:
65:52:8d:5a:aa:a0:2f:df:37:3a:0d:b8:9a:29:80:69:44:94:
10:f5:6f:96:bc:92:bb:ec:73:ce:86:4a:bd:83:5c:8c:fa:0f:
ac:c1:f2:7b:5b:a3:8a:88:a9:eb:f7:f7:b6:9f:45:3c:db:2e:
6c:2b:97:fc:6b:ae:3f:b9:de:69:f6:cd:c3:c8:6f:82:10:6b:
9d:22:2c:cc:b1:b5:3b:0d:1e:f4:5a:15:7f:f5:b7:3a:8e:58:
d6:d6:2d:7f:42:b0:e6:e4:3f:ad:17:f5:3f:43:3b:54:07:24:
59:1e:ff:82:60:f9:b0:41:15:24:3f:e5:07:2d:11:21:d8:f3:
31:84:96:c5:86:2e:71:fe:c7:76:a8:a0:d8:1b:9f:98:9a:45:
89:c0:12:52:a7:ec:d1:5c:b9:3a:71:8d:81:54:b8:6a:10:61:
30:8a:c8:a1:0c:68:32:94:1d:40:79:c9:ed:73:59:74:df:43:
8d:8a:f6:41:cd:4a:88:3d:76:41:cc:22:4b:c5:e6:00:9d:fc:
fc:a4:e0:4b:4c:13:58:63:ab:c5:20:7e:6b:90:b0:81:aa:fb:
3d:f5:77:f4:5f:13:b5:92:26:a8:30:b8:2b:b0:58:3c:9a:1c:
09:34:0d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:03 2023 by rpki-client on console-fra.rpki-client.org