Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/0jRnP5pBOOyi-dVOHjH9xpgu4Qg.roa
File: 0jRnP5pBOOyi-dVOHjH9xpgu4Qg.roa (raw, json)
Hash identifier: 6JHcFA1NSv5K0i2QQHe2zw6puUmJnTgFXLaQWVLjUhg=
Subject key identifier: D2:34:67:3F:9A:41:38:EC:A2:F9:D5:4E:1E:31:FD:C6:98:2E:E1:08
Certificate issuer: /CN=91c2c2912e10581587052a5ca770910b26174f14
Certificate serial: 179E717E
Authority key identifier: 91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/0jRnP5pBOOyi-dVOHjH9xpgu4Qg.roa
Signing time: Sat 01 Jan 2022 15:07:32 +0000
ROA not before: Sat 01 Jan 2022 15:07:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56577
IP address blocks: 31.41.40.0/21 maxlen: 21
185.68.92.0/22 maxlen: 22
2a05:1700:2::/48 maxlen: 48
2a05:1700::/48 maxlen: 48
2a05:1700:3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 396259710 (0x179e717e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c2c2912e10581587052a5ca770910b26174f14
Validity
Not Before: Jan 1 15:07:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d234673f9a4138eca2f9d54e1e31fdc6982ee108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:5a:4c:01:d4:fd:8f:56:02:9c:7b:63:71:56:
06:61:95:fb:82:56:94:94:91:ca:45:3f:46:ab:ef:
c9:78:72:a6:0b:a0:33:c1:16:05:2c:b6:67:6c:ac:
00:ed:5a:d7:d0:3c:c5:c2:15:24:8d:54:0c:b1:11:
6e:57:60:87:00:4a:1a:bd:51:a4:0f:f4:22:4d:6f:
a2:5e:23:9e:da:7b:b7:a3:9c:f8:49:da:d9:e3:01:
2a:73:1c:e3:4f:1e:02:36:ee:cd:1c:7d:1e:23:04:
c8:fd:f6:69:32:01:73:62:01:bd:de:23:8c:ff:92:
6d:c3:6d:e0:f9:6f:89:9d:2b:1b:b1:f1:89:78:97:
4d:a0:59:ad:de:b3:ec:c1:b0:70:a5:24:e4:be:3d:
db:48:bc:9d:f9:66:3c:04:80:6b:bc:a9:15:21:fc:
c8:3f:ec:ca:3c:8c:f5:6d:bf:9a:fe:c5:60:bb:ae:
90:97:7e:0b:0f:3d:0b:3f:49:4e:40:4e:40:1a:3b:
58:69:40:e4:a9:56:38:e1:81:12:49:b7:4c:7f:2c:
77:36:41:ec:b1:e6:83:95:1e:ce:ee:62:3c:56:60:
d5:28:96:62:cb:94:8c:22:d9:ab:83:d9:c0:d9:45:
82:c8:19:c0:44:e3:bd:f2:b7:54:8a:0e:69:30:b1:
03:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:34:67:3F:9A:41:38:EC:A2:F9:D5:4E:1E:31:FD:C6:98:2E:E1:08
X509v3 Authority Key Identifier:
keyid:91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/0jRnP5pBOOyi-dVOHjH9xpgu4Qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.40.0/21
185.68.92.0/22
IPv6:
2a05:1700::/48
2a05:1700:2::/47
Signature Algorithm: sha256WithRSAEncryption
a4:7d:3f:60:7a:5c:17:bd:27:56:49:30:92:55:41:b9:cd:d3:
7b:25:ed:3a:54:ce:ff:a2:5c:da:09:65:0c:a5:7c:20:66:03:
2d:ca:be:b8:58:e9:e0:1d:3b:31:60:15:f7:95:ba:2d:1e:86:
3d:48:91:2f:73:38:7d:fa:eb:7a:f2:73:64:33:e3:e7:04:f7:
fd:59:ee:5d:25:3f:65:86:87:b1:ea:e6:e1:ed:d9:e9:dd:56:
7a:e1:b3:0d:d5:e7:48:94:5c:ba:1d:54:c1:37:aa:a2:ce:09:
6e:a0:af:75:d6:6d:22:b0:20:12:63:4c:6b:bc:5c:5e:4d:fc:
90:4a:71:5d:96:45:53:45:03:e9:68:61:34:d5:0f:35:09:ed:
87:e1:99:61:86:40:0b:4c:5d:5d:8c:88:15:77:3a:65:5a:c3:
68:3e:b2:48:f2:d7:96:2f:87:3f:36:a1:49:74:61:ff:99:12:
21:e0:f0:e0:4a:12:54:99:7e:e7:e9:37:6d:28:42:0b:c1:c2:
2d:d2:2d:65:e1:a4:4a:93:2f:9e:a2:e2:11:6d:ef:79:1f:1d:
88:19:ee:cd:4b:00:d2:20:58:0c:38:e7:ee:3f:14:77:c2:48:
91:dd:6e:5c:df:c5:c0:9e:06:e5:fa:fc:c0:a2:8c:a4:3f:e1:
f6:9d:af:58
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgIEF55xfjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
MWMyYzI5MTJlMTA1ODE1ODcwNTJhNWNhNzcwOTEwYjI2MTc0ZjE0MB4XDTIyMDEw
MTE1MDczMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDIzNDY3M2Y5YTQx
MzhlY2EyZjlkNTRlMWUzMWZkYzY5ODJlZTEwODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPJaTAHU/Y9WApx7Y3FWBmGV+4JWlJSRykU/RqvvyXhypgug
M8EWBSy2Z2ysAO1a19A8xcIVJI1UDLERbldghwBKGr1RpA/0Ik1vol4jntp7t6Oc
+Ena2eMBKnMc408eAjbuzRx9HiMEyP32aTIBc2IBvd4jjP+SbcNt4PlviZ0rG7Hx
iXiXTaBZrd6z7MGwcKUk5L4920i8nflmPASAa7ypFSH8yD/syjyM9W2/mv7FYLuu
kJd+Cw89Cz9JTkBOQBo7WGlA5KlWOOGBEkm3TH8sdzZB7LHmg5Uezu5iPFZg1SiW
YsuUjCLZq4PZwNlFgsgZwETjvfK3VIoOaTCxA90CAwEAAaOCAikwggIlMB0GA1Ud
DgQWBBTSNGc/mkE47KL51U4eMf3GmC7hCDAfBgNVHSMEGDAWgBSRwsKRLhBYFYcF
KlyncJELJhdPFDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2tjTENrUzRRV0JXSEJTcGNwM0NSQ3lZWFR4US5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWIvYjMwYjU3LWU3ZTktNGIyZi05OWI2LTkwZjk3Zjc0NjY3Ni8x
LzBqUm5QNXBCT095aS1kVk9Iakg5eHBndTRRZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWIv
YjMwYjU3LWU3ZTktNGIyZi05OWI2LTkwZjk3Zjc0NjY3Ni8xL2tjTENrUzRRV0JX
SEJTcGNwM0NSQ3lZWFR4US5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA/
BggrBgEFBQcBBwEB/wQwMC4wEgQCAAEwDAMEAx8pKAMEArlEXDAYBAIAAjASAwcA
KgUXAAAAAwcBKgUXAAACMA0GCSqGSIb3DQEBCwUAA4IBAQCkfT9gelwXvSdWSTCS
VUG5zdN7Je06VM7/olzaCWUMpXwgZgMtyr64WOngHTsxYBX3lbotHoY9SJEvczh9
+ut68nNkM+PnBPf9We5dJT9lhoex6ubh7dnp3VZ64bMN1edIlFy6HVTBN6qizglu
oK911m0isCASY0xrvFxeTfyQSnFdlkVTRQPpaGE01Q81Ce2H4ZlhhkALTF1djIgV
dzplWsNoPrJI8teWL4c/NqFJdGH/mRIh4PDgShJUmX7n6TdtKEILwcIt0i1l4aRK
ky+eouIRbe95Hx2IGe7NSwDSIFgMOOfuPxR3wkiR3W5c38XAngbl+vzAooykP+H2
na9Y
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:51 2024 by rpki-client on console-ams.rpki-client.org