Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/z3d4Gw_WHCAgyGp4JwmFBWDmbYQ.roa
File: z3d4Gw_WHCAgyGp4JwmFBWDmbYQ.roa (raw, json)
Hash identifier: shVjqIqQIPhAFb1kZeYwteT69445L4JCsQLSsmyLK0M=
Subject key identifier: CF:77:78:1B:0F:D6:1C:20:20:C8:6A:78:27:09:85:05:60:E6:6D:84
Certificate issuer: /CN=a88ad546f1a0ef8cf75c92a748bd5c86362e209b
Certificate serial: 018557E8A1C36FA359E110E06574F8E1CDCA
Authority key identifier: A8:8A:D5:46:F1:A0:EF:8C:F7:5C:92:A7:48:BD:5C:86:36:2E:20:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/z3d4Gw_WHCAgyGp4JwmFBWDmbYQ.roa
Signing time: Wed 28 Dec 2022 08:45:41 +0000
ROA not before: Wed 28 Dec 2022 08:45:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 193.31.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:57:e8:a1:c3:6f:a3:59:e1:10:e0:65:74:f8:e1:cd:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a88ad546f1a0ef8cf75c92a748bd5c86362e209b
Validity
Not Before: Dec 28 08:45:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf77781b0fd61c2020c86a782709850560e66d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:52:fe:cc:a0:0a:0d:33:32:7c:43:dc:1b:ff:
de:f8:a1:d0:07:fe:bd:09:77:be:df:6d:cc:be:bd:
3e:f6:53:a7:28:41:62:81:e9:00:e2:15:ff:9f:03:
2e:1b:b6:95:90:e5:8c:51:c8:13:b4:fd:07:4f:9e:
d0:73:bd:96:b3:9d:97:05:59:98:40:2c:26:ef:ba:
f8:7f:0c:6b:74:36:cd:ca:a3:c8:1e:8a:fe:18:85:
ea:c1:5b:b3:10:e9:79:17:75:1f:8d:cf:88:5f:e0:
6a:98:59:61:ce:85:47:29:72:f4:5a:97:bc:dd:7a:
11:24:8b:3c:b4:52:ad:25:11:13:5e:6f:3d:9b:93:
9f:50:bb:13:29:1b:41:9d:ea:b2:f1:c1:3e:a8:d9:
34:aa:bd:19:90:36:0d:c7:c3:0b:40:96:2c:31:9d:
31:16:c5:39:73:09:e4:f8:40:09:2d:42:1b:f8:b8:
ea:25:76:1c:5c:79:22:ad:d1:38:12:5c:6d:d2:de:
15:0f:67:8b:25:41:0a:86:14:5c:00:0d:e2:8d:db:
db:61:5d:db:62:64:16:07:06:4b:b4:ca:37:95:42:
d8:c7:c3:76:fe:cb:d1:e1:f7:26:03:73:53:80:3a:
b9:6f:6b:c6:da:ea:30:ce:57:40:30:ee:84:fa:4f:
dd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:77:78:1B:0F:D6:1C:20:20:C8:6A:78:27:09:85:05:60:E6:6D:84
X509v3 Authority Key Identifier:
keyid:A8:8A:D5:46:F1:A0:EF:8C:F7:5C:92:A7:48:BD:5C:86:36:2E:20:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/z3d4Gw_WHCAgyGp4JwmFBWDmbYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.111.0/24
Signature Algorithm: sha256WithRSAEncryption
43:7d:85:b7:5b:46:68:e4:97:cc:5f:24:37:c4:46:dd:61:06:
a9:ba:a0:bb:42:f0:57:5c:b2:b7:a2:a8:ab:a5:56:15:6f:10:
76:d4:51:de:89:3a:7b:db:f3:65:6e:ea:a9:97:c7:85:52:f8:
09:2d:79:61:95:09:57:65:f8:c9:dc:32:d9:21:8c:b4:fc:8f:
45:2b:b7:49:4d:d2:f0:4f:69:d4:dc:42:f0:e0:d9:b0:ba:94:
9c:dd:27:0d:18:1a:ae:e2:e1:ab:32:2d:eb:e8:c7:6d:f5:d5:
77:ce:7f:71:52:26:59:c7:58:b7:6d:6e:c0:b8:51:ae:18:5b:
93:90:78:30:42:65:d4:bf:61:96:45:af:ad:c9:08:5b:d5:16:
54:24:5f:65:a0:80:14:b0:bb:a1:7e:bf:de:2b:ea:17:42:e8:
cb:72:e5:75:14:88:93:64:d4:e9:dd:b5:73:39:9f:2d:fc:5f:
9a:3e:31:f3:51:a0:9c:0a:2d:82:fc:cc:f3:d0:f6:f8:fb:c2:
30:19:df:47:00:75:4f:65:b8:53:67:64:c4:9c:9b:af:94:99:
79:8a:bc:53:83:5f:8d:c0:95:0c:fd:b2:5d:d6:25:0f:d3:d7:
01:be:fe:8a:3f:c1:0f:b8:d5:2a:19:96:50:aa:06:b3:9b:c6:
df:a5:2d:45
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVX6KHDb6NZ4RDgZXT44c3KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4OGFkNTQ2ZjFhMGVmOGNmNzVjOTJhNzQ4YmQ1Yzg2MzYy
ZTIwOWIwHhcNMjIxMjI4MDg0NTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjc3NzgxYjBmZDYxYzIwMjBjODZhNzgyNzA5ODUwNTYwZTY2ZDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1L+zKAKDTMyfEPcG//e+KHQB/69
CXe+323Mvr0+9lOnKEFigekA4hX/nwMuG7aVkOWMUcgTtP0HT57Qc72Ws52XBVmY
QCwm77r4fwxrdDbNyqPIHor+GIXqwVuzEOl5F3Ufjc+IX+BqmFlhzoVHKXL0Wpe8
3XoRJIs8tFKtJRETXm89m5OfULsTKRtBneqy8cE+qNk0qr0ZkDYNx8MLQJYsMZ0x
FsU5cwnk+EAJLUIb+LjqJXYcXHkirdE4Elxt0t4VD2eLJUEKhhRcAA3ijdvbYV3b
YmQWBwZLtMo3lULYx8N2/svR4fcmA3NTgDq5b2vG2uowzldAMO6E+k/dHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM93eBsP1hwgIMhqeCcJhQVg5m2EMB8GA1UdIwQY
MBaAFKiK1UbxoO+M91ySp0i9XIY2LiCbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUlyVlJ2R2c3NHozWEpLblNMMWNoall1SUpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81MDBhOGMtNmEyZC00MzRiLTk2ZjEt
MThlYjc3OWE2NDk3LzEvejNkNEd3X1dIQ0FneUdwNEp3bUZCV0RtYllRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS81MDBhOGMtNmEyZC00MzRiLTk2ZjEtMThlYjc3OWE2NDk3
LzEvcUlyVlJ2R2c3NHozWEpLblNMMWNoall1SUpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwR9vMA0G
CSqGSIb3DQEBCwUAA4IBAQBDfYW3W0Zo5JfMXyQ3xEbdYQapuqC7QvBXXLK3oqir
pVYVbxB21FHeiTp72/Nlbuqpl8eFUvgJLXlhlQlXZfjJ3DLZIYy0/I9FK7dJTdLw
T2nU3ELw4NmwupSc3ScNGBqu4uGrMi3r6Mdt9dV3zn9xUiZZx1i3bW7AuFGuGFuT
kHgwQmXUv2GWRa+tyQhb1RZUJF9loIAUsLuhfr/eK+oXQujLcuV1FIiTZNTp3bVz
OZ8t/F+aPjHzUaCcCi2C/Mzz0Pb4+8IwGd9HAHVPZbhTZ2TEnJuvlJl5irxTg1+N
wJUM/bJd1iUP09cBvv6KP8EPuNUqGZZQqgazm8bfpS1F
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:21 2024 by rpki-client on console-ams.rpki-client.org