Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/TURJeD0uu090JzO6ESClNLRjdE8.roa
File: TURJeD0uu090JzO6ESClNLRjdE8.roa (raw, json)
Hash identifier: Kyxgpsul/hLocLpv+brvue4I+Q9rvu1fupicIb/sVL4=
Subject key identifier: 4D:44:49:78:3D:2E:BB:4F:74:27:33:BA:11:20:A5:34:B4:63:74:4F
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 018801DD21EA9A40C2C8F1A7A926AA5BE4C1
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/TURJeD0uu090JzO6ESClNLRjdE8.roa
Signing time: Tue 09 May 2023 18:54:09 +0000
ROA not before: Tue 09 May 2023 18:54:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 31.43.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:01:dd:21:ea:9a:40:c2:c8:f1:a7:a9:26:aa:5b:e4:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: May 9 18:54:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d4449783d2ebb4f742733ba1120a534b463744f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c4:e9:4a:d1:5e:75:48:4c:cf:33:8a:84:bd:
89:f8:ef:d9:f7:53:5e:7a:b6:cf:ae:b2:cc:0f:bc:
14:cc:a7:44:a9:21:2d:f1:7a:b5:53:e3:66:89:ab:
60:66:90:da:97:7c:f8:ea:1f:53:81:2b:fc:b3:1b:
76:c6:2f:26:b6:67:09:c6:fc:43:e7:fd:7a:b8:26:
8b:de:a0:b1:4e:48:22:e6:b8:79:f6:62:26:76:06:
4a:c9:b8:9a:a8:f5:44:b4:2b:44:fd:d6:b4:5e:9a:
60:2f:26:11:ae:37:92:ad:aa:63:b7:41:33:34:e7:
89:14:7d:5e:e4:d3:4f:1b:4b:b1:35:30:75:9f:5e:
5c:92:f3:e5:e8:22:dd:e9:35:cd:ea:60:87:9b:f0:
d8:6d:44:58:80:9c:99:f0:5b:f2:62:2f:af:88:8b:
1b:bf:00:5e:01:58:71:d1:01:e8:e7:dc:05:aa:21:
fb:46:8a:93:31:3f:30:11:fa:ef:23:34:2c:9b:10:
1c:87:5c:b4:61:18:da:b1:3d:ba:72:33:7a:2c:93:
5d:50:53:35:8b:15:45:73:42:43:9d:c9:56:ab:8a:
59:79:16:25:02:af:15:c0:17:4f:d7:d9:1a:ab:d2:
f7:a2:9d:bf:fd:7a:18:b3:87:4a:4f:9b:cf:92:56:
22:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:44:49:78:3D:2E:BB:4F:74:27:33:BA:11:20:A5:34:B4:63:74:4F
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/TURJeD0uu090JzO6ESClNLRjdE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.164.0/24
Signature Algorithm: sha256WithRSAEncryption
44:ff:f6:ee:7c:7e:43:63:05:f6:92:18:f1:43:de:0c:20:17:
06:9a:9d:c0:f9:ca:24:5b:fb:6e:51:fb:a6:da:25:f5:51:03:
c0:77:3a:c6:74:46:c0:96:42:fa:45:77:cd:2d:d6:e1:a0:db:
a6:f7:01:11:26:f8:21:4f:ea:9a:84:2f:ef:0a:fc:4b:67:be:
67:2e:9f:d3:f4:d3:93:b0:96:be:1e:7b:b0:94:07:53:1b:3f:
ea:11:3e:4c:16:e0:43:9b:db:61:fd:b7:c0:a2:7e:a1:f9:c2:
50:4e:28:32:b8:d7:ea:d5:d1:b7:4e:60:89:e0:58:05:e6:51:
db:00:84:2b:79:36:8f:16:ff:30:f6:eb:a8:cd:f3:84:87:16:
4a:88:84:87:c4:ec:0d:f1:08:6c:ac:da:55:b7:07:46:bc:cd:
68:b4:ff:f8:fa:11:f5:3e:6d:4e:00:8a:77:15:b3:a1:85:bb:
88:24:ca:42:dd:77:fd:6a:4d:e4:56:59:92:04:fb:c4:50:93:
22:fc:23:94:8a:56:54:9f:0d:5d:1c:f7:5a:4e:65:c2:13:48:
a4:88:a8:27:51:a7:47:e9:ca:a6:72:70:68:6a:e5:ef:59:dc:
54:36:d1:ed:35:43:fa:09:b1:52:a6:c9:e3:02:16:4e:49:7d:
ec:34:8b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:05:53 2025 by rpki-client