Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EYbNGiNS7mE3zrE38ThcmWYDBFc.roa
File: EYbNGiNS7mE3zrE38ThcmWYDBFc.roa (raw, json)
Hash identifier: yaGfYDQgfzFDHr49JS7Ju2mIiAqKB2mZ7xCfhmzgtRw=
Subject key identifier: 11:86:CD:1A:23:52:EE:61:37:CE:B1:37:F1:38:5C:99:66:03:04:57
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1C902E23
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EYbNGiNS7mE3zrE38ThcmWYDBFc.roa
Signing time: Sat 01 Jan 2022 01:02:54 +0000
ROA not before: Sat 01 Jan 2022 01:02:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210211
IP address blocks: 87.121.41.0/24 maxlen: 24
87.121.40.0/24 maxlen: 24
31.13.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 479211043 (0x1c902e23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 01:02:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1186cd1a2352ee6137ceb137f1385c9966030457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bc:f5:0f:44:79:71:2c:fc:fb:9f:4b:4b:43:
ad:c4:d0:30:ca:ea:34:8d:4a:5e:13:a1:a1:a9:96:
06:37:19:c2:31:11:c6:d2:d8:f6:fa:15:a4:39:bc:
71:f8:f9:21:45:a5:e9:d8:f7:14:3d:e5:50:ea:03:
38:22:01:11:4e:64:be:7a:85:7f:46:c7:bb:1f:9a:
ec:e8:87:fd:78:9d:c5:4e:b4:d0:ef:a8:56:37:3f:
d8:ac:83:63:b5:ee:4a:0c:ba:54:a5:c7:96:6b:06:
19:77:03:3d:a3:ea:f5:55:ec:d5:46:ec:6a:89:a8:
0d:8f:dc:41:fd:1c:bf:87:ce:53:1d:0c:64:f9:4c:
1a:06:c7:7d:77:b4:34:31:a5:69:5e:1f:65:9e:6e:
46:50:dd:3c:b5:b1:51:81:05:e0:4f:1a:f1:7f:3d:
9c:f3:e8:64:56:c7:87:90:4b:3c:02:02:2f:69:57:
66:58:f0:c4:8a:1b:44:06:83:e4:49:d7:9d:5a:83:
63:c6:ed:17:24:de:1a:8e:59:46:01:22:cd:43:5d:
76:f3:c7:78:5c:5a:35:8c:27:62:a2:e9:de:5d:b5:
45:80:e1:8e:d7:e6:ca:e0:ba:e7:ea:88:f2:e2:d4:
c3:cc:be:0f:ad:9c:8d:3d:45:76:d6:25:3a:79:88:
bd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:86:CD:1A:23:52:EE:61:37:CE:B1:37:F1:38:5C:99:66:03:04:57
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EYbNGiNS7mE3zrE38ThcmWYDBFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.226.0/24
87.121.40.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:b9:37:5b:08:28:09:5b:e5:4f:e1:4e:a2:99:5d:3a:45:ec:
cd:e2:50:8b:44:d6:6f:e1:23:c5:c7:62:2e:7b:09:2a:f4:74:
8e:6f:0f:1d:10:e6:61:1a:c9:d2:0e:4d:2c:54:16:32:4e:4a:
65:13:89:26:29:84:11:65:33:73:80:92:89:1b:7b:08:7b:96:
4b:85:30:d4:f6:4e:5b:4a:f4:0d:15:6b:f2:63:c6:4e:7d:f1:
99:f8:f1:c0:b6:4c:61:46:9c:de:06:5b:62:18:97:6c:3f:b6:
43:01:b5:16:bf:87:71:25:25:fb:d7:2c:37:f7:f5:1d:d6:44:
62:9e:6f:2d:aa:58:a8:f9:c3:b7:03:2d:f8:72:8d:08:c2:86:
fb:ce:06:a5:2f:09:86:cc:d4:ab:14:32:f7:3d:5a:4f:34:f0:
bf:fd:08:fb:f6:d9:bc:88:6a:0b:c4:7c:f8:35:a3:dc:10:31:
2d:26:69:56:2c:dc:07:82:a7:56:24:f0:dd:34:87:75:6a:7b:
8b:9e:69:42:78:0a:b8:8e:22:36:b3:9c:9b:a5:c7:40:df:cd:
5d:8b:b2:bf:bf:6d:27:f8:b2:03:f8:4b:20:76:12:b9:ae:2a:
5c:a1:45:17:82:da:54:6e:67:d1:f1:25:44:90:05:17:95:6d:
4e:94:fa:c3
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEHJAuIzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MmM0YWMzZTNjNDNkNzBkMDUzNDljODE1YmFhZGQzOGFkNzc1ZTlkMB4XDTIyMDEw
MTAxMDI1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTE4NmNkMWEyMzUy
ZWU2MTM3Y2ViMTM3ZjEzODVjOTk2NjAzMDQ1NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALW89Q9EeXEs/PufS0tDrcTQMMrqNI1KXhOhoamWBjcZwjER
xtLY9voVpDm8cfj5IUWl6dj3FD3lUOoDOCIBEU5kvnqFf0bHux+a7OiH/XidxU60
0O+oVjc/2KyDY7XuSgy6VKXHlmsGGXcDPaPq9VXs1UbsaomoDY/cQf0cv4fOUx0M
ZPlMGgbHfXe0NDGlaV4fZZ5uRlDdPLWxUYEF4E8a8X89nPPoZFbHh5BLPAICL2lX
ZljwxIobRAaD5EnXnVqDY8btFyTeGo5ZRgEizUNddvPHeFxaNYwnYqLp3l21RYDh
jtfmyuC65+qI8uLUw8y+D62cjT1FdtYlOnmIvRECAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQRhs0aI1LuYTfOsTfxOFyZZgMEVzAfBgNVHSMEGDAWgBQixKw+PEPXDQU0
nIFbqt04rXdenTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lzU3NQanhEMXcwRk5KeUJXNnJkT0sxM1hwMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDMvOTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcxMi8x
L0VZYk5HaU5TN21FM3pyRTM4VGhjbVdZREJGYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMv
OTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcxMi8xL0lzU3NQanhEMXcw
Rk5KeUJXNnJkT0sxM1hwMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAB8N4gMEAVd5KDANBgkqhkiG9w0B
AQsFAAOCAQEAn7k3WwgoCVvlT+FOopldOkXszeJQi0TWb+EjxcdiLnsJKvR0jm8P
HRDmYRrJ0g5NLFQWMk5KZROJJimEEWUzc4CSiRt7CHuWS4Uw1PZOW0r0DRVr8mPG
Tn3xmfjxwLZMYUac3gZbYhiXbD+2QwG1Fr+HcSUl+9csN/f1HdZEYp5vLapYqPnD
twMt+HKNCMKG+84GpS8JhszUqxQy9z1aTzTwv/0I+/bZvIhqC8R8+DWj3BAxLSZp
VizcB4KnViTw3TSHdWp7i55pQngKuI4iNrOcm6XHQN/NXYuyv79tJ/iyA/hLIHYS
ua4qXKFFF4LaVG5n0fElRJAFF5VtTpT6ww==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:34 2023 by rpki-client on console-ams.rpki-client.org