Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/8Ty0tcMY5cPBsKTSkGwhKQeEQQQ.roa
File: 8Ty0tcMY5cPBsKTSkGwhKQeEQQQ.roa (raw, json)
Hash identifier: CxQAzSpSJxBSwqKagXTCJs31blaEngCzBt2n5bambzk=
Subject key identifier: F1:3C:B4:B5:C3:18:E5:C3:C1:B0:A4:D2:90:6C:21:29:07:84:41:04
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 2B11BE18
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/8Ty0tcMY5cPBsKTSkGwhKQeEQQQ.roa
Signing time: Sat 01 Jan 2022 13:58:08 +0000
ROA not before: Sat 01 Jan 2022 13:58:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203828
IP address blocks: 85.31.248.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 722583064 (0x2b11be18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 13:58:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f13cb4b5c318e5c3c1b0a4d2906c212907844104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:06:e0:54:b9:86:30:f4:55:da:a1:43:aa:ab:
51:f0:f9:57:ef:da:61:98:3d:eb:be:af:75:1f:44:
c8:9b:fa:0f:fe:6b:af:90:56:e4:97:2a:7a:c7:07:
2e:12:11:4c:12:93:29:01:a9:ae:58:b6:ec:25:0f:
f9:84:27:39:e9:93:d6:f6:3d:ed:d1:63:f8:ea:84:
a9:ca:5e:33:6a:38:51:ea:2e:7b:f3:89:f9:9a:d4:
f8:86:7f:4b:e9:eb:e2:77:29:99:ac:bf:0c:38:3b:
4b:ae:23:6c:0d:7c:3d:31:0e:24:de:f3:2f:d2:fa:
47:4e:06:1f:ef:c6:c8:31:69:a1:49:d1:bf:63:0b:
a4:66:09:95:2e:c2:cc:97:26:b9:91:5d:57:99:65:
e3:c0:63:f4:ca:f5:9b:2b:e5:b6:98:d7:74:ea:68:
5f:70:43:97:ab:ac:a4:78:6b:91:ee:5c:5b:f5:9f:
1f:bd:18:1d:89:a9:15:91:91:cd:91:53:75:4a:e1:
f8:c2:34:86:43:3f:67:ba:20:d6:34:56:69:4d:be:
42:c8:33:8b:f8:41:ee:fb:38:c6:5a:cf:67:85:b9:
46:d6:22:9a:6f:3b:20:57:2e:07:f0:53:92:78:22:
48:db:23:45:86:38:e3:50:56:9f:41:8e:20:7d:e6:
3c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:3C:B4:B5:C3:18:E5:C3:C1:B0:A4:D2:90:6C:21:29:07:84:41:04
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/8Ty0tcMY5cPBsKTSkGwhKQeEQQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.248.0/23
Signature Algorithm: sha256WithRSAEncryption
90:52:5f:c5:a1:68:7e:e8:42:aa:5a:8b:88:42:8f:3f:30:c3:
13:8c:db:ab:b7:02:64:a8:65:b5:a5:67:a4:e1:a3:5a:f7:f1:
ed:e4:99:fb:e4:ae:33:a5:d5:84:95:3f:54:76:72:74:75:b2:
09:e5:0b:27:11:2f:a2:e2:d1:f9:47:da:0d:57:d9:e5:b5:4f:
35:11:1f:3c:8e:a2:0f:0e:4a:07:40:08:b3:ba:da:3f:89:70:
fb:0f:94:1f:9c:cc:7b:3c:77:72:2b:c8:3a:2b:3c:1c:4f:21:
79:19:8a:b6:1c:6c:73:af:1d:34:6e:32:b9:f5:73:71:8a:07:
c8:2a:9e:d9:cd:a4:94:b8:22:be:48:c5:96:2f:01:3a:45:17:
05:99:bb:01:52:4f:07:91:73:fe:0c:cf:06:a0:7f:4b:96:66:
0e:33:a0:1b:93:d2:86:07:6b:c5:0e:3e:b5:8d:3f:65:98:a8:
c9:5f:4f:1c:c8:f4:35:e6:b1:d0:4e:88:ac:8e:7a:7d:14:21:
fe:c6:ee:2c:57:9b:43:bb:4d:12:2b:ac:7b:06:f5:f3:22:d3:
d7:9e:ef:97:f6:be:17:9f:70:e5:33:9e:b7:9d:58:a6:ce:6c:
23:8f:e3:f5:84:99:b7:24:25:d4:67:3a:55:54:e2:a5:b4:6f:
1f:d7:38:3a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEKxG+GDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
OTk1NDQ5OTk3NzI3OGE3NTU3MGIzNDAzZjRkM2FhMDBiMWIzNmU4MB4XDTIyMDEw
MTEzNTgwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjEzY2I0YjVjMzE4
ZTVjM2MxYjBhNGQyOTA2YzIxMjkwNzg0NDEwNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALsG4FS5hjD0VdqhQ6qrUfD5V+/aYZg9676vdR9EyJv6D/5r
r5BW5JcqescHLhIRTBKTKQGprli27CUP+YQnOemT1vY97dFj+OqEqcpeM2o4Ueou
e/OJ+ZrU+IZ/S+nr4ncpmay/DDg7S64jbA18PTEOJN7zL9L6R04GH+/GyDFpoUnR
v2MLpGYJlS7CzJcmuZFdV5ll48Bj9Mr1myvltpjXdOpoX3BDl6uspHhrke5cW/Wf
H70YHYmpFZGRzZFTdUrh+MI0hkM/Z7og1jRWaU2+Qsgzi/hB7vs4xlrPZ4W5RtYi
mm87IFcuB/BTkngiSNsjRYY441BWn0GOIH3mPMECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTxPLS1wxjlw8GwpNKQbCEpB4RBBDAfBgNVHSMEGDAWgBS5lUSZl3J4p1Vw
s0A/TTqgCxs26DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3VaVkVtWmR5ZUtkVmNMTkFQMDA2b0FzYk51Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDcvNzg4ODAzLWJlMTItNDMzZi1hOGQwLTAyNGIxNjU1YzI0Ny8x
LzhUeTB0Y01ZNWNQQnNLVFNrR3doS1FlRVFRUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcv
Nzg4ODAzLWJlMTItNDMzZi1hOGQwLTAyNGIxNjU1YzI0Ny8xL3VaVkVtWmR5ZUtk
VmNMTkFQMDA2b0FzYk51Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAVUf+DANBgkqhkiG9w0BAQsFAAOC
AQEAkFJfxaFofuhCqlqLiEKPPzDDE4zbq7cCZKhltaVnpOGjWvfx7eSZ++SuM6XV
hJU/VHZydHWyCeULJxEvouLR+UfaDVfZ5bVPNREfPI6iDw5KB0AIs7raP4lw+w+U
H5zMezx3civIOis8HE8heRmKthxsc68dNG4yufVzcYoHyCqe2c2klLgivkjFli8B
OkUXBZm7AVJPB5Fz/gzPBqB/S5ZmDjOgG5PShgdrxQ4+tY0/ZZioyV9PHMj0Neax
0E6IrI56fRQh/sbuLFebQ7tNEiusewb18yLT157vl/a+F59w5TOet51Yps5sI4/j
9YSZtyQl1Gc6VVTipbRvH9c4Og==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org