Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/sTOFbM_OVKyG2bQeQu2hcWVehU0.roa
File: sTOFbM_OVKyG2bQeQu2hcWVehU0.roa (raw, json)
Hash identifier: zdEEx+0PbN//tQp9hXrVt7Ym+rUNrBoPr07BZzmQ9Ko=
Subject key identifier: B1:33:85:6C:CF:CE:54:AC:86:D9:B4:1E:42:ED:A1:71:65:5E:85:4D
Certificate issuer: /CN=34077b41e98873e7f06fb1df3f5d39c721b1343f
Certificate serial: 018335C5A9566907B27DC4E42D84E39DC5D9
Authority key identifier: 34:07:7B:41:E9:88:73:E7:F0:6F:B1:DF:3F:5D:39:C7:21:B1:34:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/sTOFbM_OVKyG2bQeQu2hcWVehU0.roa
Signing time: Tue 13 Sep 2022 07:34:49 +0000
ROA not before: Tue 13 Sep 2022 07:34:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42837
IP address blocks: 31.192.252.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:35:c5:a9:56:69:07:b2:7d:c4:e4:2d:84:e3:9d:c5:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34077b41e98873e7f06fb1df3f5d39c721b1343f
Validity
Not Before: Sep 13 07:34:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b133856ccfce54ac86d9b41e42eda171655e854d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4d:46:b1:e2:de:e7:dc:33:d2:55:0d:4c:2c:
bc:44:96:97:6e:bb:ba:fb:61:31:bb:52:bb:d6:b3:
b5:46:61:d5:7a:12:8b:c5:4c:66:9a:23:0c:9c:42:
de:7d:d9:45:f4:1e:d3:c7:1d:a0:70:6d:e4:c1:c5:
f9:9f:74:3a:37:ab:e7:44:b7:ba:39:f0:1e:6f:12:
f4:5c:2a:b9:7e:62:58:d6:d7:bc:5c:fd:f0:90:72:
44:8d:fb:00:a3:76:eb:91:f6:29:6d:09:ac:16:9a:
e8:85:9b:84:8d:18:15:53:64:b9:3f:1c:bf:97:e7:
6f:40:a2:13:dd:d2:36:6e:5c:15:fb:9f:6e:12:dc:
82:d5:f2:7c:32:a3:0a:51:16:8d:b2:17:de:8b:bf:
82:62:56:4c:db:b5:3e:24:33:f1:fc:43:c0:b7:f7:
db:57:06:8f:ee:82:1d:67:0f:e5:dc:d0:14:13:39:
33:a8:e9:93:52:f3:92:9e:8b:b6:e3:99:9a:1c:52:
f3:88:66:af:e4:56:66:6c:c8:6d:45:60:24:35:0a:
f2:72:dc:fe:8d:2c:d3:47:e6:1c:84:5d:b9:29:26:
94:09:b6:62:43:67:83:41:ed:d3:79:6a:6d:da:03:
45:48:23:5a:01:cf:20:7a:55:2b:8a:43:80:03:59:
81:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:33:85:6C:CF:CE:54:AC:86:D9:B4:1E:42:ED:A1:71:65:5E:85:4D
X509v3 Authority Key Identifier:
keyid:34:07:7B:41:E9:88:73:E7:F0:6F:B1:DF:3F:5D:39:C7:21:B1:34:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/sTOFbM_OVKyG2bQeQu2hcWVehU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.192.252.0/24
Signature Algorithm: sha256WithRSAEncryption
79:27:ca:b8:0e:e5:2d:2e:1f:af:af:12:08:7b:d0:62:d3:6e:
6e:a2:ec:04:39:52:43:32:9e:fa:9f:3c:bd:19:6d:75:09:16:
45:5f:12:17:2d:bb:6e:69:7c:11:3d:12:b7:98:7b:77:8a:f3:
12:44:3f:85:b6:4b:d9:58:bc:73:a2:b0:fa:8a:8b:4a:b4:67:
e8:7c:ec:a4:a0:c0:fa:0f:5c:e8:01:e5:0d:d5:60:96:6e:00:
74:7b:da:e5:19:ba:f7:59:4a:a0:68:43:08:34:e0:0a:85:83:
b7:be:e0:fa:06:c3:fa:67:57:9c:88:f9:59:84:80:8b:a9:65:
35:dc:94:27:46:93:52:a1:88:b1:d6:1f:76:f9:8b:64:14:3e:
a2:38:8b:ae:a8:cf:be:e7:29:36:a7:52:99:82:ba:58:4e:58:
ff:7a:95:37:db:37:fc:4f:5d:d8:a4:fd:90:40:43:fa:42:83:
a2:88:23:c1:15:39:e1:07:75:e6:7e:02:01:79:7b:be:b6:a5:
e3:12:f2:f2:2c:ee:af:1b:c1:5b:91:c0:4a:fe:18:09:cc:ec:
1f:da:43:3b:1a:f6:c0:c5:70:13:45:8e:ac:2d:24:95:89:cc:
83:89:1a:4a:31:d1:27:5f:69:0e:4e:7e:f0:da:ff:89:d8:05:
55:f0:a8:60
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYM1xalWaQeyfcTkLYTjncXZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MDc3YjQxZTk4ODczZTdmMDZmYjFkZjNmNWQzOWM3MjFi
MTM0M2YwHhcNMjIwOTEzMDczNDQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTMzODU2Y2NmY2U1NGFjODZkOWI0MWU0MmVkYTE3MTY1NWU4NTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm01GseLe59wz0lUNTCy8RJaXbru6
+2Exu1K71rO1RmHVehKLxUxmmiMMnELefdlF9B7Txx2gcG3kwcX5n3Q6N6vnRLe6
OfAebxL0XCq5fmJY1te8XP3wkHJEjfsAo3brkfYpbQmsFprohZuEjRgVU2S5Pxy/
l+dvQKIT3dI2blwV+59uEtyC1fJ8MqMKURaNshfei7+CYlZM27U+JDPx/EPAt/fb
VwaP7oIdZw/l3NAUEzkzqOmTUvOSnou245maHFLziGav5FZmbMhtRWAkNQryctz+
jSzTR+YchF25KSaUCbZiQ2eDQe3TeWpt2gNFSCNaAc8gelUrikOAA1mBnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLEzhWzPzlSshtm0HkLtoXFlXoVNMB8GA1UdIwQY
MBaAFDQHe0HpiHPn8G+x3z9dOcchsTQ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkFkN1FlbUljLWZ3YjdIZlAxMDV4eUd4TkQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC80NDg4MDAtODI5ZS00YjdhLTkyYzQt
Y2I3Y2JjYTdjMWUwLzEvc1RPRmJNX09WS3lHMmJRZVF1MmhjV1ZlaFUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC80NDg4MDAtODI5ZS00YjdhLTkyYzQtY2I3Y2JjYTdjMWUw
LzEvTkFkN1FlbUljLWZ3YjdIZlAxMDV4eUd4TkQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH8D8MA0G
CSqGSIb3DQEBCwUAA4IBAQB5J8q4DuUtLh+vrxIIe9Bi025uouwEOVJDMp76nzy9
GW11CRZFXxIXLbtuaXwRPRK3mHt3ivMSRD+FtkvZWLxzorD6iotKtGfofOykoMD6
D1zoAeUN1WCWbgB0e9rlGbr3WUqgaEMINOAKhYO3vuD6BsP6Z1eciPlZhICLqWU1
3JQnRpNSoYix1h92+YtkFD6iOIuuqM++5yk2p1KZgrpYTlj/epU32zf8T13YpP2Q
QEP6QoOiiCPBFTnhB3XmfgIBeXu+tqXjEvLyLO6vG8FbkcBK/hgJzOwf2kM7GvbA
xXATRY6sLSSVicyDiRpKMdEnX2kOTn7w2v+J2AVV8Khg
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:24 2024 by rpki-client on console-fra.rpki-client.org