Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/EYudwQKV0tU3mge0YlHui19uX1A.roa
File: EYudwQKV0tU3mge0YlHui19uX1A.roa (raw, json)
Hash identifier: fboCduQWIW3+EmKgo0UFeyaNsnkLEYtdVL7P+bxHteI=
Subject key identifier: 11:8B:9D:C1:02:95:D2:D5:37:9A:07:B4:62:51:EE:8B:5F:6E:5F:50
Certificate issuer: /CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7
Certificate serial: 0182595F22349C8C12255FF6B1CB990412F0
Authority key identifier: 85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/EYudwQKV0tU3mge0YlHui19uX1A.roa
Signing time: Mon 01 Aug 2022 12:26:23 +0000
ROA not before: Mon 01 Aug 2022 12:26:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41931
IP address blocks: 185.23.7.0/24 maxlen: 24
31.135.192.0/20 maxlen: 20
2a0e:64c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:59:5f:22:34:9c:8c:12:25:5f:f6:b1:cb:99:04:12:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7
Validity
Not Before: Aug 1 12:26:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=118b9dc10295d2d5379a07b46251ee8b5f6e5f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:16:22:ee:5e:4f:40:96:13:97:28:bc:2f:85:
d7:c1:7f:ae:5a:e1:24:58:b5:11:e7:a7:98:94:1e:
af:ce:32:68:7a:88:dc:ab:e3:17:db:fa:ce:f4:e1:
56:f9:3c:74:c8:e3:7c:ba:82:d2:97:59:46:36:c0:
44:69:22:cc:75:c3:e8:53:fa:c1:13:31:22:a7:91:
08:d8:b8:67:72:9d:3c:b9:3e:8a:71:64:25:54:21:
59:ed:08:0e:4f:35:ff:19:6a:25:02:af:99:73:0b:
e4:47:49:4a:ce:c3:82:70:d9:64:9b:e4:1f:47:47:
c7:c3:54:64:44:59:ad:80:ea:f6:d2:e7:92:d8:37:
a3:12:05:05:68:82:2c:b5:0d:d7:da:2b:83:5a:9d:
56:39:9d:bd:a5:d9:1b:24:1d:f9:7b:11:b2:64:45:
3b:b6:fd:e5:31:10:da:e7:f7:23:71:b6:9d:0e:8f:
8d:54:70:78:5b:0e:c2:a8:3f:72:7e:53:09:be:39:
06:85:8c:c5:23:74:0e:a0:4a:40:86:5d:2d:e6:04:
a1:e4:fa:f8:50:91:41:68:6b:de:dc:a7:d0:ec:82:
6b:00:7b:b5:d4:1d:0c:76:b2:6a:bd:5c:56:f6:bb:
68:e9:e0:cb:88:63:bd:e0:d0:b7:67:a6:79:17:c3:
7e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8B:9D:C1:02:95:D2:D5:37:9A:07:B4:62:51:EE:8B:5F:6E:5F:50
X509v3 Authority Key Identifier:
keyid:85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/EYudwQKV0tU3mge0YlHui19uX1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.135.192.0/20
185.23.7.0/24
IPv6:
2a0e:64c0::/29
Signature Algorithm: sha256WithRSAEncryption
6d:6e:0e:56:69:03:6d:58:db:f8:1b:67:d8:58:f2:de:14:fe:
e2:1f:cc:67:e5:7f:11:2c:d3:81:8e:b3:1f:08:a7:bc:89:de:
7c:36:51:ec:8f:d2:99:12:05:19:b8:1e:43:68:75:9c:d7:19:
62:5b:7d:ef:81:49:d5:b8:93:b8:08:d8:a9:ca:00:3a:17:97:
cc:12:89:2c:12:de:28:b7:ac:52:a4:cf:9a:59:21:4e:84:be:
e7:3e:4e:3f:56:ea:ac:a1:7b:fd:3e:24:80:cb:e0:2a:c7:c8:
3a:d4:7d:16:1e:21:14:1f:46:5c:75:3d:76:0d:9e:b7:0e:bc:
66:2b:2a:c7:5a:b6:31:2a:04:6c:0d:46:63:08:77:32:1e:2f:
28:44:d3:b7:8d:1c:59:4d:30:0e:44:d2:5b:c3:a8:3e:d9:90:
65:72:f3:9d:fd:a3:30:17:de:17:10:74:31:75:c8:e9:aa:fe:
a3:eb:23:c6:93:fa:39:77:69:b0:d0:83:26:f0:e2:e8:57:6a:
c5:60:37:7a:09:a6:9c:43:53:62:c2:4c:6a:8f:9f:19:69:0b:
76:ab:b1:68:54:6c:18:96:26:03:73:ed:72:44:91:20:95:92:
b3:8c:39:32:e5:8a:14:e5:47:b5:69:cf:33:76:13:35:c7:bc:
1e:9b:19:6b
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYJZXyI0nIwSJV/2scuZBBLwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ODAyZmMxZDBmM2UzYTQ0NjI1NjJkMmYwNmYyYjNkZWZm
OGY0ZTcwHhcNMjIwODAxMTIyNjIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMThiOWRjMTAyOTVkMmQ1Mzc5YTA3YjQ2MjUxZWU4YjVmNmU1ZjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRYi7l5PQJYTlyi8L4XXwX+uWuEk
WLUR56eYlB6vzjJoeojcq+MX2/rO9OFW+Tx0yON8uoLSl1lGNsBEaSLMdcPoU/rB
EzEip5EI2Lhncp08uT6KcWQlVCFZ7QgOTzX/GWolAq+ZcwvkR0lKzsOCcNlkm+Qf
R0fHw1RkRFmtgOr20ueS2DejEgUFaIIstQ3X2iuDWp1WOZ29pdkbJB35exGyZEU7
tv3lMRDa5/cjcbadDo+NVHB4Ww7CqD9yflMJvjkGhYzFI3QOoEpAhl0t5gSh5Pr4
UJFBaGve3KfQ7IJrAHu11B0MdrJqvVxW9rto6eDLiGO94NC3Z6Z5F8N+uwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFBGLncECldLVN5oHtGJR7otfbl9QMB8GA1UdIwQY
MBaAFIWAL8HQ8+OkRiVi0vBvKz3v+PTnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFlBdndkRHo0NlJHSldMUzhHOHJQZV80OU9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9hZjhiMjktYjFhZi00Y2Y2LWJmMTYt
YjA1ODMyYmM2OTYyLzEvRVl1ZHdRS1YwdFUzbWdlMFlsSHVpMTl1WDFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9hZjhiMjktYjFhZi00Y2Y2LWJmMTYtYjA1ODMyYmM2OTYy
LzEvaFlBdndkRHo0NlJHSldMUzhHOHJQZV80OU9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEH4fAAwQA
uRcHMA0EAgACMAcDBQMqDmTAMA0GCSqGSIb3DQEBCwUAA4IBAQBtbg5WaQNtWNv4
G2fYWPLeFP7iH8xn5X8RLNOBjrMfCKe8id58NlHsj9KZEgUZuB5DaHWc1xliW33v
gUnVuJO4CNipygA6F5fMEoksEt4ot6xSpM+aWSFOhL7nPk4/VuqsoXv9PiSAy+Aq
x8g61H0WHiEUH0ZcdT12DZ63DrxmKyrHWrYxKgRsDUZjCHcyHi8oRNO3jRxZTTAO
RNJbw6g+2ZBlcvOd/aMwF94XEHQxdcjpqv6j6yPGk/o5d2mw0IMm8OLoV2rFYDd6
CaacQ1Niwkxqj58ZaQt2q7FoVGwYliYDc+1yRJEglZKzjDky5YoU5Ue1ac8zdhM1
x7wemxlr
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:10 2024 by rpki-client on console-fra.rpki-client.org