Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/PHxaVIJxcTZZKwILaS2g3b2DpjU.roa
File: PHxaVIJxcTZZKwILaS2g3b2DpjU.roa (raw, json)
Hash identifier: tSfDcfrHgWWJF9XEoK3MgkAinZri7nP3cdVMTEOPjoc=
Subject key identifier: 3C:7C:5A:54:82:71:71:36:59:2B:02:0B:69:2D:A0:DD:BD:83:A6:35
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 0BD987D0
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/PHxaVIJxcTZZKwILaS2g3b2DpjU.roa
Signing time: Sat 01 Jan 2022 10:53:52 +0000
ROA not before: Sat 01 Jan 2022 10:53:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208167
IP address blocks: 31.133.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198805456 (0xbd987d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: Jan 1 10:53:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c7c5a5482717136592b020b692da0ddbd83a635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:66:63:b7:a9:15:1e:28:47:b4:f1:68:d2:b1:
9e:3f:d8:ee:d3:c3:39:bd:1b:6b:95:43:95:93:7c:
80:4f:d7:be:7e:c0:2a:0c:d6:1d:07:a8:49:27:19:
35:2b:1e:15:fc:0c:40:bb:5d:28:7f:fd:02:96:a5:
4f:43:e1:40:e7:28:58:97:64:90:56:70:fb:97:74:
82:3b:e8:13:53:70:a3:26:02:f7:cd:0a:20:8e:e5:
16:d3:49:9c:7a:f5:30:a6:4f:2e:8f:01:29:ea:3e:
e7:90:a4:c0:1f:85:50:57:e3:6f:65:a4:b8:fd:5b:
c0:43:ee:bb:46:bc:0c:a4:e5:d8:84:22:98:e2:2c:
4e:89:5b:47:10:07:31:d7:ff:cb:f3:74:80:46:e7:
a7:d2:71:00:7d:ae:f9:55:bd:3a:17:16:ee:a4:70:
47:59:01:a1:d9:5b:56:8c:8a:dc:c6:00:eb:89:9b:
94:c5:1e:a5:40:8a:9f:95:31:6e:4c:ad:2f:42:8c:
0b:9f:e8:97:5a:70:90:d3:f9:c3:b5:b4:b1:c9:f0:
5e:40:8e:1f:e7:03:6a:bb:86:ad:6b:71:bd:47:2f:
2f:6f:37:13:31:54:5a:f4:82:0a:5b:2a:e6:f0:b4:
18:fb:bd:32:8e:f1:72:22:82:f9:f2:45:57:2f:6d:
98:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7C:5A:54:82:71:71:36:59:2B:02:0B:69:2D:A0:DD:BD:83:A6:35
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/PHxaVIJxcTZZKwILaS2g3b2DpjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.46.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:f4:09:93:12:8b:74:42:30:f5:34:dc:35:06:cb:64:35:c1:
4d:48:6e:8a:8e:de:10:e5:f2:94:a3:b4:23:a1:01:de:c6:f8:
45:5a:47:24:c5:41:da:7a:9d:db:07:0a:b5:50:fe:dd:b4:5b:
25:97:62:f1:1d:5b:eb:bd:be:d6:b6:68:79:9c:22:e6:60:99:
11:fd:24:ff:ee:29:cd:2f:be:18:39:b3:ad:9e:3d:b8:76:07:
f2:04:e0:ac:8d:e5:19:68:c8:49:da:f1:1f:0c:11:24:48:fe:
38:88:e2:3d:6a:ea:e7:22:b2:d7:1e:89:3a:2b:23:58:a9:d4:
4a:e7:c8:43:85:9f:2e:e8:93:df:7c:bf:aa:cf:d6:eb:ff:21:
31:27:f4:3c:45:1e:f9:19:ab:a0:c7:19:7c:2f:42:3c:77:f8:
8a:78:be:e3:2a:c7:e0:7f:b0:58:84:f4:f3:1e:41:09:29:78:
d3:e6:c0:59:0c:d6:1c:5d:d5:09:c1:12:4c:d4:b1:7a:9d:4c:
70:c9:a5:67:90:ea:ba:5e:58:fe:41:53:a7:23:3c:bc:e9:ce:
83:ab:a8:1b:54:bc:b0:87:66:fd:a5:d1:90:c3:f7:bf:8e:7d:
83:0e:57:c2:e8:45:76:d5:1d:03:38:01:72:b4:ff:4a:b3:1f:
3f:31:ab:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:51 2025 by rpki-client