Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/mOdu9RYd6jTJ7C1wBOyXa7rpH6M.roa
File: mOdu9RYd6jTJ7C1wBOyXa7rpH6M.roa (raw, json)
Hash identifier: 6RFdTP0BlGSaRhFqF2VdmEHo+4eH+62yAljv5v0j23E=
Subject key identifier: 98:E7:6E:F5:16:1D:EA:34:C9:EC:2D:70:04:EC:97:6B:BA:E9:1F:A3
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 01841522FFA1B69667D817EAE51228BED5DC
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/mOdu9RYd6jTJ7C1wBOyXa7rpH6M.roa
Signing time: Wed 26 Oct 2022 16:32:05 +0000
ROA not before: Wed 26 Oct 2022 16:32:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 81.31.231.0/24 maxlen: 24
81.31.242.0/23 maxlen: 24
81.31.252.0/22 maxlen: 24
185.84.162.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:15:22:ff:a1:b6:96:67:d8:17:ea:e5:12:28:be:d5:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Oct 26 16:32:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98e76ef5161dea34c9ec2d7004ec976bbae91fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1c:78:05:a2:1e:d2:17:6f:15:af:46:e6:77:
65:3c:c4:86:66:31:0e:d0:39:11:05:5a:99:a2:c0:
fd:d7:72:a6:b9:8b:3d:bc:1f:0b:7b:9a:71:57:d7:
3d:b4:e8:11:0e:99:18:00:cc:31:d2:6a:fb:74:bd:
85:e2:cd:d7:88:28:56:db:5f:87:24:b8:dc:29:d4:
a8:15:92:fe:4f:e8:cd:9b:6f:26:2c:d8:bb:3b:11:
f5:5a:e9:ae:2b:85:23:9c:cd:64:0a:87:f6:5c:d1:
78:20:9c:f9:60:a9:54:cb:90:a8:6b:7d:f2:61:43:
7b:5b:76:2c:fc:3c:81:af:b8:26:2e:cb:f7:5f:c8:
6e:e4:ec:0d:dd:d2:f0:ed:af:f4:35:01:d8:bf:40:
6f:e3:f9:76:a2:ae:52:bb:10:95:3b:45:17:c1:0e:
e1:19:c8:35:7d:c2:eb:a6:aa:e3:c8:8d:86:7b:0a:
89:7b:b5:45:07:1e:88:ce:b3:78:72:57:48:7c:eb:
a9:96:f4:de:27:dc:b5:a0:d9:02:17:9f:6c:50:55:
fa:36:bf:db:b7:ce:34:8f:77:a5:e3:5e:af:80:97:
b0:31:2e:81:9b:19:ec:26:19:2a:8e:a8:36:d7:28:
e2:1c:ad:af:6e:93:2f:3d:a0:fc:7c:ba:48:30:d9:
b7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E7:6E:F5:16:1D:EA:34:C9:EC:2D:70:04:EC:97:6B:BA:E9:1F:A3
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/mOdu9RYd6jTJ7C1wBOyXa7rpH6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.231.0/24
81.31.242.0/23
81.31.252.0/22
185.84.162.0/23
Signature Algorithm: sha256WithRSAEncryption
74:1c:d8:7c:de:96:fa:94:89:06:19:0b:10:f3:4f:a4:77:a3:
56:35:93:79:62:6d:92:13:a7:64:02:44:09:c4:59:5a:03:03:
66:5f:33:ba:71:49:b3:44:b9:da:79:c1:c6:85:9d:17:c2:89:
8b:00:eb:60:d2:83:59:b8:73:a7:9c:5a:d7:3f:c4:b0:74:cf:
fd:c4:d9:2d:49:05:db:04:57:f3:69:7c:d3:18:94:6c:3a:e7:
89:d1:14:28:07:ff:34:3e:e2:ba:e7:1c:0d:bf:65:42:5a:e6:
3d:fe:d3:e6:09:73:46:2d:1d:29:e5:fe:b9:ff:26:0d:be:43:
74:fa:b4:c2:38:90:e4:14:97:01:27:d1:49:37:90:20:69:0d:
23:49:a9:ec:fb:3b:36:6f:24:cb:d7:3e:39:81:fa:f7:a3:9e:
77:df:11:76:eb:33:b2:8a:d6:3a:20:76:2d:10:c7:a0:69:57:
54:95:de:e3:f1:08:0b:f9:d7:b3:3e:87:ac:14:80:45:f3:f5:
fd:b0:85:3c:c6:65:ff:08:a1:24:a7:59:ff:5e:b1:cc:fa:83:
51:6b:55:82:f4:7d:42:cf:f0:8f:b9:21:b6:ee:7a:25:13:f2:
59:56:af:25:c8:20:49:00:fe:42:25:5b:c7:19:4e:0c:f6:fb:
18:3d:12:6d
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYQVIv+htpZn2Bfq5RIovtXcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNTZiY2Q0MjZmZDg3Y2Q2ZjQxNDdlMTMzMjE2ZDAzMTEy
YjE4MWIwHhcNMjIxMDI2MTYzMjA1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGU3NmVmNTE2MWRlYTM0YzllYzJkNzAwNGVjOTc2YmJhZTkxZmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBx4BaIe0hdvFa9G5ndlPMSGZjEO
0DkRBVqZosD913KmuYs9vB8Le5pxV9c9tOgRDpkYAMwx0mr7dL2F4s3XiChW21+H
JLjcKdSoFZL+T+jNm28mLNi7OxH1WumuK4UjnM1kCof2XNF4IJz5YKlUy5Coa33y
YUN7W3Ys/DyBr7gmLsv3X8hu5OwN3dLw7a/0NQHYv0Bv4/l2oq5SuxCVO0UXwQ7h
Gcg1fcLrpqrjyI2GewqJe7VFBx6IzrN4cldIfOuplvTeJ9y1oNkCF59sUFX6Nr/b
t840j3el416vgJewMS6BmxnsJhkqjqg21yjiHK2vbpMvPaD8fLpIMNm36QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFJjnbvUWHeo0yewtcATsl2u66R+jMB8GA1UdIwQY
MBaAFBBWvNQm/YfNb0FH4TMhbQMRKxgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzct
YWE4NTllMTkyYjE2LzEvbU9kdTlSWWQ2alRKN0Mxd0JPeVhhN3JwSDZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzctYWE4NTllMTkyYjE2
LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUR/nAwQB
UR/yAwQCUR/8AwQBuVSiMA0GCSqGSIb3DQEBCwUAA4IBAQB0HNh83pb6lIkGGQsQ
80+kd6NWNZN5Ym2SE6dkAkQJxFlaAwNmXzO6cUmzRLnaecHGhZ0XwomLAOtg0oNZ
uHOnnFrXP8SwdM/9xNktSQXbBFfzaXzTGJRsOueJ0RQoB/80PuK65xwNv2VCWuY9
/tPmCXNGLR0p5f65/yYNvkN0+rTCOJDkFJcBJ9FJN5AgaQ0jSans+zs2byTL1z45
gfr3o5533xF26zOyitY6IHYtEMegaVdUld7j8QgL+dezPoesFIBF8/X9sIU8xmX/
CKEkp1n/XrHM+oNRa1WC9H1Cz/CPuSG27nolE/JZVq8lyCBJAP5CJVvHGU4M9vsY
PRJt
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:01 2023 by rpki-client on console-ams.rpki-client.org