Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/2SAoJUg6pASKR_MedeCynNhQHSE.roa
File: 2SAoJUg6pASKR_MedeCynNhQHSE.roa (raw, json)
Hash identifier: qYx5uo9I685/UGDM+SC3q9fEJKNmBBUm26PJwAk18HQ=
Subject key identifier: D9:20:28:25:48:3A:A4:04:8A:47:F3:1E:75:E0:B2:9C:D8:50:1D:21
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 4191397B
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/2SAoJUg6pASKR_MedeCynNhQHSE.roa
Signing time: Sat 01 Jan 2022 10:06:02 +0000
ROA not before: Sat 01 Jan 2022 10:06:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204156
IP address blocks: 31.14.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1100036475 (0x4191397b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 10:06:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9202825483aa4048a47f31e75e0b29cd8501d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d7:25:b6:ed:59:06:30:09:dd:83:99:b3:55:
a8:7b:40:df:67:ec:e9:8e:ac:08:ec:90:23:a3:d6:
2c:04:57:8e:16:5e:4b:e8:a8:b6:6d:5e:e1:de:96:
13:90:59:08:bb:fa:b6:fe:e2:85:33:65:83:43:78:
ac:e9:88:86:58:aa:3f:15:81:1e:4a:81:59:35:48:
e0:49:5a:e9:90:05:be:75:9c:28:f1:f3:61:d9:e2:
99:39:bc:ce:fd:43:e4:50:9e:78:fa:6c:5d:aa:e0:
49:d9:8f:cc:6d:6d:d7:98:14:dc:02:92:b0:da:7e:
fe:70:7c:37:5a:f5:01:44:6c:c3:69:49:fc:6b:ea:
b8:e2:aa:87:57:60:c6:f2:c3:5d:a5:cc:ad:e9:ab:
99:74:52:a3:60:07:f5:34:64:59:8f:99:50:d4:5c:
2f:ef:6f:cf:7a:c8:c8:9d:3f:89:fc:94:40:ff:06:
88:f7:d3:2f:c1:d2:3b:de:cd:0b:9f:03:31:d8:d0:
73:54:f7:3c:35:42:ec:2d:00:e8:e7:a1:2a:6b:76:
57:e6:a8:a6:e3:3a:aa:71:5e:a2:02:ba:a2:0a:d0:
12:f2:6f:3e:83:b7:94:f2:7d:38:de:f1:2c:85:f9:
56:09:25:76:68:a5:82:b2:e7:f1:25:d7:64:07:78:
8a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:20:28:25:48:3A:A4:04:8A:47:F3:1E:75:E0:B2:9C:D8:50:1D:21
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/2SAoJUg6pASKR_MedeCynNhQHSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.34.0/24
Signature Algorithm: sha256WithRSAEncryption
64:38:43:44:73:4a:e6:c9:16:0d:33:6b:52:f3:38:0d:26:56:
57:3f:28:54:e4:5b:bb:61:50:a0:1b:b7:a9:56:f3:42:ed:f8:
17:4b:2d:bf:f3:fa:ec:cc:e2:f5:68:c6:91:a7:57:6d:d7:c1:
c1:16:f4:5c:4d:db:12:29:1d:e8:cb:66:79:39:3c:23:34:1f:
ca:3b:b2:c6:8d:70:64:61:bb:87:bb:de:5d:cc:dc:4d:97:88:
02:9a:93:28:ce:37:21:75:43:65:d8:a6:f7:58:a1:20:4d:e2:
e4:b4:87:44:da:a8:7a:ec:73:8b:b7:14:45:07:52:ad:09:f9:
6c:18:f8:6d:84:15:11:d9:73:cb:2b:aa:00:67:dd:7e:11:09:
de:5c:5a:8c:de:dd:90:44:1c:19:85:2f:25:87:4b:07:61:73:
2d:8d:6d:e8:5f:0e:0c:5d:4c:38:5e:3d:54:33:2e:83:cf:e2:
a5:84:a3:e3:ca:7a:00:e2:db:79:5d:8b:eb:3e:da:6e:2f:57:
88:5a:dd:b9:30:43:8b:75:4f:64:b4:81:9b:fd:3a:c4:4c:0f:
3d:3d:d0:7b:8c:e2:aa:08:ee:8f:50:7d:40:34:5e:27:21:a8:
c0:69:3e:0d:07:d3:01:e3:7b:26:c8:89:35:09:79:6a:16:b6:
51:7e:b4:64
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIEQZE5ezANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
OGU2MjYzNGUxYmQ1MTMzYTlkZTQ1MTJhZTk4Y2FkMWIyMjE5YjU5MB4XDTIyMDEw
MTEwMDYwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDkyMDI4MjU0ODNh
YTQwNDhhNDdmMzFlNzVlMGIyOWNkODUwMWQyMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMDXJbbtWQYwCd2DmbNVqHtA32fs6Y6sCOyQI6PWLARXjhZe
S+iotm1e4d6WE5BZCLv6tv7ihTNlg0N4rOmIhliqPxWBHkqBWTVI4Ela6ZAFvnWc
KPHzYdnimTm8zv1D5FCeePpsXargSdmPzG1t15gU3AKSsNp+/nB8N1r1AURsw2lJ
/GvquOKqh1dgxvLDXaXMremrmXRSo2AH9TRkWY+ZUNRcL+9vz3rIyJ0/ifyUQP8G
iPfTL8HSO97NC58DMdjQc1T3PDVC7C0A6OehKmt2V+aopuM6qnFeogK6ogrQEvJv
PoO3lPJ9ON7xLIX5VgkldmilgrLn8SXXZAd4ig0CAwEAAaOCAgswggIHMB0GA1Ud
DgQWBBTZICglSDqkBIpH8x514LKc2FAdITAfBgNVHSMEGDAWgBT45iY04b1RM6ne
RRKumMrRsiGbWTAOBgNVHQ8BAf8EBAMCB4AwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzc4L2RhMzM5OC02Njk4LTQ1ZjItYmFhZS05MmUyNWZlMTYzMzEv
MS8yU0FvSlVnNnBBU0tSX01lZGVDeW5OaFFIU0Uucm9hMIGCBgNVHR8EezB5MHeg
daBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc4
L2RhMzM5OC02Njk4LTQ1ZjItYmFhZS05MmUyNWZlMTYzMzEvMS8xLU9ZbU5PRzlV
VE9wM2tVU3JwakswYklobTFrLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHw4iMA0GCSqGSIb3DQEBCwUA
A4IBAQBkOENEc0rmyRYNM2tS8zgNJlZXPyhU5Fu7YVCgG7epVvNC7fgXSy2/8/rs
zOL1aMaRp1dt18HBFvRcTdsSKR3oy2Z5OTwjNB/KO7LGjXBkYbuHu95dzNxNl4gC
mpMozjchdUNl2Kb3WKEgTeLktIdE2qh67HOLtxRFB1KtCflsGPhthBUR2XPLK6oA
Z91+EQneXFqM3t2QRBwZhS8lh0sHYXMtjW3oXw4MXUw4Xj1UMy6Dz+KlhKPjynoA
4tt5XYvrPtpuL1eIWt25MEOLdU9ktIGb/TrETA89PdB7jOKqCO6PUH1ANF4nIajA
aT4NB9MB43smyIk1CXlqFrZRfrRk
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:52 2024 by rpki-client on console-ams.rpki-client.org