Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/sLVw2O1M3TNVaa_E6VAQvkMep90.roa
File: sLVw2O1M3TNVaa_E6VAQvkMep90.roa (raw, json)
Hash identifier: O8GE9C02oWEwoOAWYQ+Ugj64/47LlVss9ZnOOIf7ST4=
Subject key identifier: B0:B5:70:D8:ED:4C:DD:33:55:69:AF:C4:E9:50:10:BE:43:1E:A7:DD
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 34225598
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/sLVw2O1M3TNVaa_E6VAQvkMep90.roa
Signing time: Sat 01 Jan 2022 09:02:49 +0000
ROA not before: Sat 01 Jan 2022 09:02:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44090
IP address blocks: 81.31.242.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 874665368 (0x34225598)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Jan 1 09:02:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b0b570d8ed4cdd335569afc4e95010be431ea7dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4a:48:af:dd:86:c9:76:86:72:4c:b6:b7:f9:
5f:8a:bb:dc:14:b7:54:a3:65:c7:bf:b0:4f:b9:aa:
56:0c:1d:c3:be:17:58:43:38:e3:f5:d6:21:18:b9:
46:72:f7:3f:5b:00:29:db:a3:df:83:41:35:ee:95:
ca:8a:96:10:00:6b:8d:72:af:79:cb:5f:a4:35:6b:
6f:23:eb:f6:ff:25:72:d6:6e:06:09:8f:8d:88:7c:
d0:b5:75:30:90:53:dc:1b:3e:15:1f:a5:99:fc:5e:
5d:3b:69:79:09:49:18:8b:07:59:68:85:1c:f4:aa:
47:5d:68:b1:7b:fa:6e:ec:ba:c7:94:93:0b:45:5a:
71:41:e6:69:15:56:a4:64:c7:0e:6d:dc:d7:37:f8:
15:23:d4:f0:b0:2d:34:3c:70:ff:ca:5e:9e:30:ec:
98:7f:ff:ec:69:25:0e:68:f7:13:a9:19:f8:45:24:
39:e8:aa:a1:21:f0:8b:34:20:b8:5c:4f:73:12:89:
7f:dd:f9:e0:67:a9:8a:17:f6:7c:66:ed:97:be:6c:
e6:1a:f1:2a:6a:04:da:f4:ca:22:01:01:3d:c1:0a:
23:39:29:1d:1a:8f:a8:8f:c7:ee:ba:f4:ce:94:b8:
0f:d7:5e:c4:21:1f:04:cf:04:f5:a6:25:8e:00:7d:
77:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B5:70:D8:ED:4C:DD:33:55:69:AF:C4:E9:50:10:BE:43:1E:A7:DD
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/sLVw2O1M3TNVaa_E6VAQvkMep90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.242.0/24
Signature Algorithm: sha256WithRSAEncryption
46:ac:da:8f:24:89:db:f5:7e:ee:ae:20:7f:0e:27:4a:f8:e0:
58:51:74:32:98:9c:71:8a:86:64:7b:db:09:c1:7e:0d:89:c8:
2b:6d:41:c8:f3:28:26:20:e7:9b:27:d7:c2:af:56:4f:1d:f9:
60:29:13:a3:3b:ce:30:d4:3f:af:dc:6d:cb:56:b8:b1:fb:c3:
7e:03:d3:e0:9e:8f:b7:05:79:b6:bd:ad:5b:d7:1e:05:2c:4e:
ea:92:4b:ba:ce:78:ef:41:bc:00:31:48:a1:c0:dc:7a:af:6d:
34:01:f6:ef:57:08:d2:a8:31:9f:a6:b3:4c:d6:ff:75:90:cf:
bf:70:3b:e6:53:71:82:f0:c6:50:b3:c9:97:8b:4e:46:f8:23:
29:8d:ac:1f:b9:ae:92:07:f1:ac:52:13:50:50:e9:f8:89:e3:
d1:96:0a:90:0d:f1:44:82:34:ab:bb:fb:2c:7c:4b:a3:1d:d4:
84:d6:80:e9:bb:1d:cd:a8:59:3f:81:7d:00:fe:3d:33:d5:3e:
40:26:7b:06:aa:aa:49:45:ad:24:a3:5c:d4:ed:9a:a8:15:ef:
bc:9b:fb:9a:3c:18:20:09:43:fd:30:cf:b4:35:45:d6:6d:3a:
d8:07:07:dc:60:5d:53:6d:57:17:ad:62:17:7a:c7:1b:e9:04:
71:61:a9:9d
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIENCJVmDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MDU2YmNkNDI2ZmQ4N2NkNmY0MTQ3ZTEzMzIxNmQwMzExMmIxODFiMB4XDTIyMDEw
MTA5MDI0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjBiNTcwZDhlZDRj
ZGQzMzU1NjlhZmM0ZTk1MDEwYmU0MzFlYTdkZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANJKSK/dhsl2hnJMtrf5X4q73BS3VKNlx7+wT7mqVgwdw74X
WEM44/XWIRi5RnL3P1sAKduj34NBNe6VyoqWEABrjXKvectfpDVrbyPr9v8lctZu
BgmPjYh80LV1MJBT3Bs+FR+lmfxeXTtpeQlJGIsHWWiFHPSqR11osXv6buy6x5ST
C0VacUHmaRVWpGTHDm3c1zf4FSPU8LAtNDxw/8penjDsmH//7GklDmj3E6kZ+EUk
OeiqoSHwizQguFxPcxKJf9354Gepihf2fGbtl75s5hrxKmoE2vTKIgEBPcEKIzkp
HRqPqI/H7rr0zpS4D9dexCEfBM8E9aYljgB9dyMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSwtXDY7UzdM1Vpr8TpUBC+Qx6n3TAfBgNVHSMEGDAWgBQQVrzUJv2HzW9B
R+EzIW0DESsYGzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0VGYTgxQ2I5aDgxdlFVZmhNeUZ0QXhFckdCcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDcvZTZmNGU0LTY4YmItNDQ5Ni05MGM3LWFhODU5ZTE5MmIxNi8x
L3NMVncyTzFNM1ROVmFhX0U2VkFRdmtNZXA5MC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcv
ZTZmNGU0LTY4YmItNDQ5Ni05MGM3LWFhODU5ZTE5MmIxNi8xL0VGYTgxQ2I5aDgx
dlFVZmhNeUZ0QXhFckdCcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFEf8jANBgkqhkiG9w0BAQsFAAOC
AQEARqzajySJ2/V+7q4gfw4nSvjgWFF0MpiccYqGZHvbCcF+DYnIK21ByPMoJiDn
myfXwq9WTx35YCkTozvOMNQ/r9xty1a4sfvDfgPT4J6PtwV5tr2tW9ceBSxO6pJL
us5470G8ADFIocDceq9tNAH271cI0qgxn6azTNb/dZDPv3A75lNxgvDGULPJl4tO
RvgjKY2sH7mukgfxrFITUFDp+Inj0ZYKkA3xRII0q7v7LHxLox3UhNaA6bsdzahZ
P4F9AP49M9U+QCZ7BqqqSUWtJKNc1O2aqBXvvJv7mjwYIAlD/TDPtDVF1m062AcH
3GBdU21XF61iF3rHG+kEcWGpnQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:09 2023 by rpki-client on console-fra.rpki-client.org