Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/ByM3DJ1NDpXp3qyaARN2NO0CCcI.roa
File: ByM3DJ1NDpXp3qyaARN2NO0CCcI.roa (raw, json)
Hash identifier: 6hug4nsgUjSDsYVg4ehg+ZkGKEJ8yXgXSLGyvnfi6XM=
Subject key identifier: 07:23:37:0C:9D:4D:0E:95:E9:DE:AC:9A:01:13:76:34:ED:02:09:C2
Certificate issuer: /CN=1cae1a26967dfe287eb602749ec2c6f05afbb57c
Certificate serial: 0D67B235
Authority key identifier: 1C:AE:1A:26:96:7D:FE:28:7E:B6:02:74:9E:C2:C6:F0:5A:FB:B5:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/ByM3DJ1NDpXp3qyaARN2NO0CCcI.roa
Signing time: Tue 01 Mar 2022 13:46:24 +0000
ROA not before: Tue 01 Mar 2022 13:46:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56953
IP address blocks: 91.229.152.0/23 maxlen: 24
31.132.200.0/21 maxlen: 24
2001:67c:2340::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 224899637 (0xd67b235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cae1a26967dfe287eb602749ec2c6f05afbb57c
Validity
Not Before: Mar 1 13:46:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0723370c9d4d0e95e9deac9a01137634ed0209c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:eb:36:04:ee:c2:8f:d9:f8:b7:d2:6b:c9:fd:
e5:00:bc:79:e3:7b:eb:b9:9a:f0:19:ae:09:5d:bb:
fd:05:de:b1:91:59:1d:37:12:24:7c:88:fd:d0:fc:
21:de:42:f9:9e:ec:58:ae:61:36:58:a4:7b:ec:91:
49:93:7e:71:3e:51:48:63:4a:c7:85:67:af:13:97:
f8:69:42:00:b0:53:38:9d:76:1e:4a:50:b4:44:13:
2c:61:b8:28:c2:4c:66:cf:e7:10:6a:49:af:63:32:
4a:ae:20:77:39:cd:62:e7:38:d6:4d:92:1f:26:58:
c1:28:17:67:c1:f1:da:a2:e0:c4:a5:f7:fa:4e:41:
1e:63:72:f2:97:b9:61:66:99:1e:0a:57:da:11:4b:
d2:58:6b:e7:40:b9:40:94:89:cf:30:be:c9:10:0d:
8e:3e:13:5d:92:fc:f3:38:6b:2c:ff:81:ce:e0:18:
d2:4c:68:3f:53:54:f2:02:7e:04:f1:b3:b2:1a:bd:
56:f8:95:77:1a:f7:83:76:8c:31:d9:d7:f4:c7:16:
e8:d8:3b:10:d7:5c:d8:b7:d3:e6:2e:bf:3a:0f:26:
cf:23:63:41:14:1f:77:eb:c6:10:34:38:ed:79:c0:
03:c7:92:20:d4:bb:51:80:17:6a:c9:66:e3:f7:b5:
73:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:23:37:0C:9D:4D:0E:95:E9:DE:AC:9A:01:13:76:34:ED:02:09:C2
X509v3 Authority Key Identifier:
keyid:1C:AE:1A:26:96:7D:FE:28:7E:B6:02:74:9E:C2:C6:F0:5A:FB:B5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/ByM3DJ1NDpXp3qyaARN2NO0CCcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.132.200.0/21
91.229.152.0/23
IPv6:
2001:67c:2340::/48
Signature Algorithm: sha256WithRSAEncryption
a3:e2:b9:4c:88:c1:09:37:09:69:40:fe:3c:00:93:24:1d:84:
c6:f7:cf:d7:e7:57:1f:1c:a2:9d:48:30:f1:46:f8:dd:ba:43:
3a:31:68:89:4e:7f:5d:2b:bc:99:a9:a8:79:e3:45:17:23:99:
e4:e0:e5:7d:bc:e5:90:05:23:3c:2a:4e:a9:06:7c:13:3c:7f:
9a:44:93:8b:68:ad:b5:e5:57:a9:c8:69:5c:53:72:d0:52:99:
63:30:ca:c8:13:58:87:4a:62:0c:70:aa:d5:69:98:59:7d:de:
c9:90:55:a6:e8:78:d4:fa:37:4c:a0:61:61:87:c7:75:80:b5:
fc:0b:4e:58:c3:6a:3a:8f:ac:d3:f3:8e:44:ed:e8:4d:e0:fc:
9a:de:73:c3:63:20:5f:b6:d5:d1:e3:aa:ae:77:d5:8d:12:04:
95:4b:c4:50:6a:a4:f7:6d:79:bf:49:9b:72:a3:b1:a0:a9:51:
5e:02:e2:45:f2:4e:83:fb:ae:b5:86:66:63:e8:e6:04:65:47:
6a:68:d9:b4:74:51:34:39:53:f0:47:b1:af:94:07:1b:31:94:
d1:27:cf:45:a7:5f:b9:9b:86:bc:4f:81:5f:36:ac:c7:be:0e:
22:fa:61:d2:25:87:36:f1:48:15:f4:62:72:58:d0:e7:25:e8:
78:92:1e:75
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIEDWeyNTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
Y2FlMWEyNjk2N2RmZTI4N2ViNjAyNzQ5ZWMyYzZmMDVhZmJiNTdjMB4XDTIyMDMw
MTEzNDYyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDcyMzM3MGM5ZDRk
MGU5NWU5ZGVhYzlhMDExMzc2MzRlZDAyMDljMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMjrNgTuwo/Z+LfSa8n95QC8eeN767ma8BmuCV27/QXesZFZ
HTcSJHyI/dD8Id5C+Z7sWK5hNlike+yRSZN+cT5RSGNKx4VnrxOX+GlCALBTOJ12
HkpQtEQTLGG4KMJMZs/nEGpJr2MySq4gdznNYuc41k2SHyZYwSgXZ8Hx2qLgxKX3
+k5BHmNy8pe5YWaZHgpX2hFL0lhr50C5QJSJzzC+yRANjj4TXZL88zhrLP+BzuAY
0kxoP1NU8gJ+BPGzshq9VviVdxr3g3aMMdnX9McW6Ng7ENdc2LfT5i6/Og8mzyNj
QRQfd+vGEDQ47XnAA8eSINS7UYAXaslm4/e1cw0CAwEAAaOCAiAwggIcMB0GA1Ud
DgQWBBQHIzcMnU0OlenerJoBE3Y07QIJwjAfBgNVHSMEGDAWgBQcrhomln3+KH62
AnSewsbwWvu1fDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0hLNGFKcFo5X2loLXRnSjBuc0xHOEZyN3RYdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzgvMjFiNTAwLTM0YTYtNDIwYS1hYTQ0LTc0OTkwNWMzMjdiMS8x
L0J5TTNESjFORHBYcDNxeWFBUk4yTk8wQ0NjSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgv
MjFiNTAwLTM0YTYtNDIwYS1hYTQ0LTc0OTkwNWMzMjdiMS8xL0hLNGFKcFo5X2lo
LXRnSjBuc0xHOEZyN3RYdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2
BggrBgEFBQcBBwEB/wQnMCUwEgQCAAEwDAMEAx+EyAMEAVvlmDAPBAIAAjAJAwcA
IAEGfCNAMA0GCSqGSIb3DQEBCwUAA4IBAQCj4rlMiMEJNwlpQP48AJMkHYTG98/X
51cfHKKdSDDxRvjdukM6MWiJTn9dK7yZqah540UXI5nk4OV9vOWQBSM8Kk6pBnwT
PH+aRJOLaK215VepyGlcU3LQUpljMMrIE1iHSmIMcKrVaZhZfd7JkFWm6HjU+jdM
oGFhh8d1gLX8C05Yw2o6j6zT845E7ehN4Pya3nPDYyBfttXR46qud9WNEgSVS8RQ
aqT3bXm/SZtyo7GgqVFeAuJF8k6D+661hmZj6OYEZUdqaNm0dFE0OVPwR7GvlAcb
MZTRJ89Fp1+5m4a8T4FfNqzHvg4i+mHSJYc28UgV9GJyWNDnJeh4kh51
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:33 2024 by rpki-client on console-fra.rpki-client.org