Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/EPwQGzvkUiS5znvvaGH_YSIYoSs.roa
File: EPwQGzvkUiS5znvvaGH_YSIYoSs.roa (raw, json)
Hash identifier: qnW1vpMakEGDUhYys2wgfHYNiHIdNm0RSo7xGwPVlxQ=
Subject key identifier: 10:FC:10:1B:3B:E4:52:24:B9:CE:7B:EF:68:61:FF:61:22:18:A1:2B
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 0B7060E7
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/EPwQGzvkUiS5znvvaGH_YSIYoSs.roa
Signing time: Sat 01 Jan 2022 08:58:48 +0000
ROA not before: Sat 01 Jan 2022 08:58:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209154
IP address blocks: 31.145.11.0/24 maxlen: 24
31.145.9.0/24 maxlen: 24
31.145.8.0/22 maxlen: 22
31.145.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191914215 (0xb7060e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 08:58:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10fc101b3be45224b9ce7bef6861ff612218a12b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ee:6b:f2:c2:50:06:2a:37:9c:dc:38:c6:88:
40:40:0e:64:9b:c8:c2:a0:a5:97:3a:22:2e:53:52:
da:91:98:b6:f0:f0:ad:8f:87:e0:6c:3c:20:16:6f:
ea:6a:9e:bb:e5:ef:81:5d:8c:43:46:86:aa:59:70:
04:12:70:ed:52:57:0f:39:ac:d2:0e:71:4c:8c:41:
63:91:11:51:01:78:ba:ee:9f:a0:6b:66:a0:c2:ee:
bd:72:d4:f9:6a:32:d5:af:00:77:df:71:ad:0b:a2:
08:92:28:e5:71:72:c7:b9:29:a4:68:c8:0f:62:06:
a5:08:2c:0f:94:74:4b:e9:76:c7:95:02:00:35:e2:
6f:2a:85:bf:74:de:9a:c3:ad:8c:af:98:6b:a2:32:
21:4d:8e:5a:c1:41:85:94:15:f5:7a:ea:5d:bd:5b:
df:8f:68:c2:b0:d6:17:84:c1:37:7d:03:cd:cc:ed:
8c:62:7f:e3:50:1a:88:6f:aa:0f:9b:38:a7:73:ec:
88:5e:5f:45:74:10:18:ab:60:05:a3:87:08:3b:31:
82:ca:bd:f4:90:58:e7:20:1e:4c:2c:80:76:5d:e7:
fd:f1:6c:31:f1:3f:9a:62:db:05:41:25:6f:e7:7c:
95:27:c7:31:3a:c7:27:82:54:67:07:dc:ca:26:e4:
41:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:FC:10:1B:3B:E4:52:24:B9:CE:7B:EF:68:61:FF:61:22:18:A1:2B
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/EPwQGzvkUiS5znvvaGH_YSIYoSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.145.8.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:3b:47:16:a5:94:31:21:d8:fa:55:d9:2a:ff:ec:35:55:e0:
90:50:69:e7:1b:0c:9a:9d:15:bb:6d:e1:02:2e:64:f3:e4:fd:
8e:23:0f:68:44:1e:50:1c:64:c4:82:f9:2e:f9:1d:c2:10:0b:
78:09:54:30:d4:d8:b2:10:40:54:9b:83:a2:2a:b2:45:90:04:
63:3d:41:aa:7e:e8:5f:0e:14:27:e1:91:1d:a1:a7:7c:df:0c:
e6:06:d4:79:a8:29:82:55:11:9b:a2:11:4d:69:38:09:ec:34:
9b:eb:82:93:98:85:4e:2c:90:d9:93:bb:a3:e7:da:09:8c:de:
34:8d:93:06:6d:0f:b5:eb:3e:af:dd:b9:c5:53:ab:4f:ca:d7:
66:67:03:48:69:9e:ce:b6:4d:90:29:f6:dc:69:95:43:8c:44:
92:59:c4:94:43:e9:23:8e:23:5f:30:d3:0e:1e:23:98:0c:37:
be:07:85:dd:f1:8f:75:8b:ed:9f:2d:2f:c3:61:93:cb:25:d7:
98:c0:73:30:a8:a7:02:61:9a:eb:ff:ca:5e:36:eb:59:3f:ba:
c4:1d:83:86:b6:85:1c:11:1e:d0:56:4a:07:ab:29:5c:24:20:
35:6e:49:c3:ca:7e:6d:f2:5c:14:f8:48:26:44:c9:8b:8a:76:
c0:14:c8:f9
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEC3Bg5zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NjhmZTM1Y2M5NjI2MzNhMjc1N2FmMTBhMGU2ZThhYjZkMDFmNGM5MB4XDTIyMDEw
MTA4NTg0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTBmYzEwMWIzYmU0
NTIyNGI5Y2U3YmVmNjg2MWZmNjEyMjE4YTEyYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN3ua/LCUAYqN5zcOMaIQEAOZJvIwqCllzoiLlNS2pGYtvDw
rY+H4Gw8IBZv6mqeu+XvgV2MQ0aGqllwBBJw7VJXDzms0g5xTIxBY5ERUQF4uu6f
oGtmoMLuvXLU+Woy1a8Ad99xrQuiCJIo5XFyx7kppGjID2IGpQgsD5R0S+l2x5UC
ADXibyqFv3TemsOtjK+Ya6IyIU2OWsFBhZQV9XrqXb1b349owrDWF4TBN30Dzczt
jGJ/41AaiG+qD5s4p3PsiF5fRXQQGKtgBaOHCDsxgsq99JBY5yAeTCyAdl3n/fFs
MfE/mmLbBUElb+d8lSfHMTrHJ4JUZwfcyibkQZsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQQ/BAbO+RSJLnOe+9oYf9hIhihKzAfBgNVHSMEGDAWgBRWj+NcyWJjOidX
rxCg5uirbQH0yTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZvX2pYTWxpWXpvblY2OFFvT2JvcTIwQjlNay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDgvMzdlYmU2LThiZmUtNGMxZi1hMTgzLTgzZDY0OGY3OTc0Ni8x
L0VQd1FHenZrVWlTNXpudnZhR0hfWVNJWW9Tcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgv
MzdlYmU2LThiZmUtNGMxZi1hMTgzLTgzZDY0OGY3OTc0Ni8xL1ZvX2pYTWxpWXpv
blY2OFFvT2JvcTIwQjlNay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAh+RCDANBgkqhkiG9w0BAQsFAAOC
AQEAiztHFqWUMSHY+lXZKv/sNVXgkFBp5xsMmp0Vu23hAi5k8+T9jiMPaEQeUBxk
xIL5LvkdwhALeAlUMNTYshBAVJuDoiqyRZAEYz1Bqn7oXw4UJ+GRHaGnfN8M5gbU
eagpglURm6IRTWk4Cew0m+uCk5iFTiyQ2ZO7o+faCYzeNI2TBm0Ptes+r925xVOr
T8rXZmcDSGmezrZNkCn23GmVQ4xEklnElEPpI44jXzDTDh4jmAw3vgeF3fGPdYvt
ny0vw2GTyyXXmMBzMKinAmGa6//KXjbrWT+6xB2DhraFHBEe0FZKB6spXCQgNW5J
w8p+bfJcFPhIJkTJi4p2wBTI+Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:56 2024 by rpki-client on console-fra.rpki-client.org