Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/TMckqodH_2RGqRZElg-XkzmcjtI.roa
File: TMckqodH_2RGqRZElg-XkzmcjtI.roa (raw, json)
Hash identifier: 0WXqU5Lk7bADRgKCrIfK+9onzHfdeJOGEmHRQ9hlDZg=
Subject key identifier: 4C:C7:24:AA:87:47:FF:64:46:A9:16:44:96:0F:97:93:39:9C:8E:D2
Certificate issuer: /CN=5673fa6842973edf62d579b4efec2fa64fdbf8c8
Certificate serial: 07FC3EAA
Authority key identifier: 56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/TMckqodH_2RGqRZElg-XkzmcjtI.roa
Signing time: Sat 01 Jan 2022 10:56:16 +0000
ROA not before: Sat 01 Jan 2022 10:56:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48737
IP address blocks: 31.210.62.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133971626 (0x7fc3eaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5673fa6842973edf62d579b4efec2fa64fdbf8c8
Validity
Not Before: Jan 1 10:56:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4cc724aa8747ff6446a91644960f9793399c8ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:50:61:df:cf:b7:19:4d:50:88:db:e9:17:a9:
5c:62:a8:8e:fc:9e:6c:67:95:53:17:d3:1f:fc:e5:
48:dd:6c:45:e1:83:7b:f6:d7:c4:6a:d1:5b:11:10:
93:cf:19:f2:e5:c4:b9:8b:5f:cc:06:53:4c:62:51:
49:13:e4:60:e5:41:a3:84:aa:1f:99:b9:55:8d:ab:
38:16:e9:a8:bb:42:f4:00:b2:87:de:f6:03:19:b0:
2a:a4:90:91:a3:46:15:9e:24:fe:2a:11:ed:59:c8:
2a:bb:f9:10:53:a0:fb:66:93:b9:51:73:b2:74:3a:
c7:7c:05:1d:13:0f:ae:96:c5:32:da:13:da:04:56:
8a:36:bc:10:46:f2:53:33:9a:9e:7f:d3:44:b5:22:
70:8b:66:cb:09:25:cd:c1:a4:38:d0:14:c1:c7:b6:
05:4c:9e:62:32:13:7b:b5:7c:1e:3f:bd:b7:62:b6:
88:ca:c9:de:93:06:22:aa:20:75:ea:9a:ae:17:d1:
a2:e9:21:52:a1:1f:d5:3f:8b:bc:f3:7f:3c:f0:7e:
d7:fc:76:5b:78:ae:da:5f:49:5e:95:67:13:85:59:
ef:49:0b:64:9a:97:f9:7b:4d:03:f5:93:3f:d8:90:
ab:a5:e6:44:c6:64:8a:8d:ae:d4:fd:f3:4b:d9:21:
99:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C7:24:AA:87:47:FF:64:46:A9:16:44:96:0F:97:93:39:9C:8E:D2
X509v3 Authority Key Identifier:
keyid:56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/TMckqodH_2RGqRZElg-XkzmcjtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.62.0/23
Signature Algorithm: sha256WithRSAEncryption
40:de:7a:91:66:f2:bd:52:63:7a:66:28:2a:bb:41:89:7c:b6:
2d:6c:81:4a:5d:1f:26:20:d2:49:cd:1a:09:bb:12:5e:3a:2e:
8b:bc:5a:ec:46:8a:03:41:f3:18:0a:4e:19:f1:75:87:c6:2d:
41:3c:3c:2f:22:c9:15:56:9c:cd:5d:a4:df:22:1f:5d:c4:86:
33:61:5a:f7:d0:58:f7:3c:c2:13:1a:9a:81:94:ef:28:8c:34:
e1:8d:62:d9:9e:a8:dd:74:01:24:e1:49:26:1a:38:f1:aa:b2:
9b:20:6e:5b:83:8b:5b:74:56:c4:81:95:ca:68:1b:0b:5f:84:
c4:70:94:84:ac:88:78:ba:35:68:82:f0:59:4b:78:62:0f:81:
22:75:4b:7b:73:f2:56:62:64:28:c0:69:5f:6c:28:d8:2c:17:
e4:67:3b:eb:9a:57:c8:9f:20:47:2e:fd:50:54:7c:f0:ab:55:
7f:ac:d3:e4:39:7d:bf:d8:3d:67:c0:dd:2c:5b:94:00:a1:30:
88:e4:41:39:81:e3:c2:c9:91:99:67:3a:71:56:ca:5e:17:70:
8f:ac:d6:ff:eb:b6:61:73:af:bf:84:15:f5:1a:ef:d9:1c:04:
b5:a9:d2:8f:b8:24:e5:57:30:ff:2f:d5:bf:85:02:7c:17:0c:
30:c1:ae:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:05 2025 by rpki-client