Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/dRWQtf6hLL7d2RHTkUMe-mwqzEo.roa
File: dRWQtf6hLL7d2RHTkUMe-mwqzEo.roa (raw, json)
Hash identifier: 5eS5wWkIyBaJ3MlD+aslfz1oCrQlAxTv8lB4M3ipOcc=
Subject key identifier: 75:15:90:B5:FE:A1:2C:BE:DD:D9:11:D3:91:43:1E:FA:6C:2A:CC:4A
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 01856B5E043FFB7B12D41F719E7797D26B5E
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/dRWQtf6hLL7d2RHTkUMe-mwqzEo.roa
Signing time: Sun 01 Jan 2023 03:26:41 +0000
ROA not before: Sun 01 Jan 2023 03:26:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 81.31.244.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:5e:04:3f:fb:7b:12:d4:1f:71:9e:77:97:d2:6b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Jan 1 03:26:41 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=751590b5fea12cbeddd911d391431efa6c2acc4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:54:7c:2a:dc:e1:55:17:71:ed:08:0d:54:a7:
1f:3d:aa:5e:b7:01:e6:f8:af:9f:3e:af:c9:ec:83:
52:a8:49:5a:db:03:46:f2:40:5d:21:91:47:e7:8a:
76:26:14:4c:b2:1a:96:05:0e:28:51:b1:6d:40:5f:
e0:3b:11:03:ef:7c:11:7d:a8:56:f6:a0:02:c1:72:
e8:93:ad:97:ca:bb:a9:ce:f5:e3:2f:d4:23:98:d8:
3d:84:3c:75:34:a4:00:88:1a:f8:de:54:42:9d:0e:
52:9f:5f:44:51:79:0d:27:a1:66:99:33:fa:0d:5b:
4f:9f:65:0c:0b:c2:ca:ca:fe:9b:e5:34:b1:58:8b:
25:e8:d4:e1:64:21:94:3f:6e:e1:62:4e:b6:f5:53:
0f:f3:b6:76:29:31:e1:0a:3f:3b:9d:f7:ee:47:fd:
6d:16:10:8f:fa:d0:3c:1c:53:47:df:f2:98:c4:39:
4d:59:6a:13:c8:78:55:5d:34:72:f7:48:21:18:dc:
5b:e0:56:71:af:93:46:e8:b1:66:f3:f6:b4:14:10:
27:6a:76:38:40:d8:e9:47:b6:cc:aa:35:4b:81:e3:
fd:e6:73:c6:f9:02:e3:b3:f2:e7:66:5e:34:32:be:
77:a3:9b:87:ba:30:66:07:ea:5e:d1:b9:85:6c:b5:
1e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:15:90:B5:FE:A1:2C:BE:DD:D9:11:D3:91:43:1E:FA:6C:2A:CC:4A
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/dRWQtf6hLL7d2RHTkUMe-mwqzEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.244.0/22
Signature Algorithm: sha256WithRSAEncryption
ec:3c:b8:7c:6a:3f:53:3a:4d:0b:30:c2:16:1b:ed:e3:eb:a2:
ed:46:53:f1:f0:29:24:65:72:26:72:f1:f1:9f:39:97:c8:13:
dc:cc:e3:50:9b:3f:67:26:9d:2d:ea:8c:b2:46:c6:c9:48:0c:
90:3c:a1:23:98:a8:24:67:15:12:67:5b:cb:d9:4f:30:0a:7d:
07:13:18:42:e2:f9:ac:49:b8:e6:9f:e2:3f:fb:a7:2c:f1:8d:
42:cf:5b:01:01:6e:0c:a4:97:86:9e:bd:a3:e5:32:97:77:d7:
15:30:49:af:22:08:7d:1b:0c:ee:d0:75:be:40:5c:3c:7a:cf:
70:98:ab:cd:73:2f:d1:e8:83:30:0a:82:53:1f:8a:c7:d6:12:
35:e8:a4:d7:a5:2c:c0:ec:a7:15:24:ad:e7:a7:df:32:1c:5c:
ec:9d:8b:82:c2:ef:bf:de:d6:05:1e:ff:f6:2a:cc:c9:14:6d:
63:59:de:f7:05:ad:8b:e9:e9:43:44:2b:29:b8:d3:a9:d3:a7:
0f:c3:6e:aa:f5:a2:b1:dc:b3:45:0f:12:f8:10:58:b4:77:f5:
38:97:91:41:62:24:53:75:93:f3:df:2a:42:b3:7a:5e:56:de:
d4:24:48:e3:0d:48:f7:14:cc:ea:74:e2:d4:23:17:a4:02:c0:
61:3b:0b:71
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVrXgQ/+3sS1B9xnneX0mteMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNTZiY2Q0MjZmZDg3Y2Q2ZjQxNDdlMTMzMjE2ZDAzMTEy
YjE4MWIwHhcNMjMwMTAxMDMyNjQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTE1OTBiNWZlYTEyY2JlZGRkOTExZDM5MTQzMWVmYTZjMmFjYzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FR8KtzhVRdx7QgNVKcfPapetwHm
+K+fPq/J7INSqEla2wNG8kBdIZFH54p2JhRMshqWBQ4oUbFtQF/gOxED73wRfahW
9qACwXLok62XyrupzvXjL9QjmNg9hDx1NKQAiBr43lRCnQ5Sn19EUXkNJ6FmmTP6
DVtPn2UMC8LKyv6b5TSxWIsl6NThZCGUP27hYk629VMP87Z2KTHhCj87nffuR/1t
FhCP+tA8HFNH3/KYxDlNWWoTyHhVXTRy90ghGNxb4FZxr5NG6LFm8/a0FBAnanY4
QNjpR7bMqjVLgeP95nPG+QLjs/LnZl40Mr53o5uHujBmB+pe0bmFbLUeRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHUVkLX+oSy+3dkR05FDHvpsKsxKMB8GA1UdIwQY
MBaAFBBWvNQm/YfNb0FH4TMhbQMRKxgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzct
YWE4NTllMTkyYjE2LzEvZFJXUXRmNmhMTDdkMlJIVGtVTWUtbXdxekVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzctYWE4NTllMTkyYjE2
LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUR/0MA0G
CSqGSIb3DQEBCwUAA4IBAQDsPLh8aj9TOk0LMMIWG+3j66LtRlPx8CkkZXImcvHx
nzmXyBPczONQmz9nJp0t6oyyRsbJSAyQPKEjmKgkZxUSZ1vL2U8wCn0HExhC4vms
Sbjmn+I/+6cs8Y1Cz1sBAW4MpJeGnr2j5TKXd9cVMEmvIgh9Gwzu0HW+QFw8es9w
mKvNcy/R6IMwCoJTH4rH1hI16KTXpSzA7KcVJK3np98yHFzsnYuCwu+/3tYFHv/2
KszJFG1jWd73Ba2L6elDRCspuNOp06cPw26q9aKx3LNFDxL4EFi0d/U4l5FBYiRT
dZPz3ypCs3peVt7UJEjjDUj3FMzqdOLUIxekAsBhOwtx
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:09 2023 by rpki-client on console-fra.rpki-client.org