Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/t0I-USjDi-IHLowztEbgIczFmXo.roa
File: t0I-USjDi-IHLowztEbgIczFmXo.roa (raw, json)
Hash identifier: vJoVS/NCEr7J9KHFTwdeUEccAq5gld/lACskEBOdhhg=
Subject key identifier: B7:42:3E:51:28:C3:8B:E2:07:2E:8C:33:B4:46:E0:21:CC:C5:99:7A
Certificate issuer: /CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Certificate serial: 07E24523
Authority key identifier: 21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/t0I-USjDi-IHLowztEbgIczFmXo.roa
Signing time: Sat 01 Jan 2022 04:53:22 +0000
ROA not before: Sat 01 Jan 2022 04:53:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35314
IP address blocks: 85.31.160.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132269347 (0x7e24523)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Validity
Not Before: Jan 1 04:53:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b7423e5128c38be2072e8c33b446e021ccc5997a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:00:ea:98:e8:7b:f8:57:cb:5e:4f:94:f6:f3:
d4:39:71:1b:90:7b:4b:79:2a:79:af:26:30:ec:9c:
1c:95:44:13:68:15:8a:f9:8b:31:05:c0:c1:8b:41:
74:9c:b2:8c:55:44:31:e4:99:35:7c:88:ac:03:9e:
2a:19:4b:d5:84:af:6a:64:87:b5:dd:b8:44:01:b7:
e5:03:85:ef:56:52:9c:b0:d2:21:18:50:50:66:c5:
5c:d5:38:52:79:e5:98:14:02:25:ea:2c:88:50:79:
3e:00:ab:e5:ec:44:b2:ea:ad:fe:20:84:1d:75:2f:
b7:f2:33:30:bb:35:a6:6a:c6:37:2a:9d:57:7e:35:
9f:6d:87:fc:aa:89:a3:8a:6d:9c:f2:f6:57:e6:9c:
60:b3:ae:4f:85:74:f7:0f:da:aa:c1:ec:7a:0d:af:
40:19:21:90:4d:71:f0:de:1a:39:6e:14:55:69:0b:
66:64:dd:c3:22:9b:05:6e:19:4d:6c:71:0a:53:87:
a6:33:df:85:03:93:fc:79:2a:6a:9b:97:94:dd:ee:
69:ec:22:94:56:78:99:8a:ba:69:c9:31:b8:b1:67:
88:d8:ae:4b:9b:c3:1f:ad:ed:f8:7b:29:51:ae:ee:
2b:4b:8b:73:4b:ce:af:19:15:21:f9:df:b5:a2:86:
cd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:42:3E:51:28:C3:8B:E2:07:2E:8C:33:B4:46:E0:21:CC:C5:99:7A
X509v3 Authority Key Identifier:
keyid:21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/t0I-USjDi-IHLowztEbgIczFmXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.160.0/21
Signature Algorithm: sha256WithRSAEncryption
76:b7:fa:d9:d2:f3:97:45:b8:b6:89:35:11:65:80:dd:28:bb:
f1:aa:59:0a:4a:2d:91:ef:76:a2:49:e4:80:77:70:5c:d8:e4:
3f:93:e7:c9:84:98:fd:aa:e6:c4:71:f1:9b:22:ed:4b:92:35:
fd:53:96:d0:f0:9b:9a:09:8f:db:64:84:9e:93:35:e4:e9:be:
cc:33:c6:92:79:b5:14:81:1f:cc:78:fe:b4:6c:58:30:fe:8a:
7b:42:d3:89:76:d4:13:26:b6:4c:06:90:bb:95:6c:3d:14:6a:
0a:ec:46:f2:39:2f:0a:10:26:12:21:e4:35:74:63:12:01:d0:
7e:6a:b1:4c:ab:57:2a:7a:08:64:83:5d:81:c9:59:8f:57:26:
43:08:f6:71:4a:37:44:74:eb:cf:79:7c:c8:0e:45:fb:ef:36:
80:49:25:c3:6a:d9:94:a8:7c:1a:7f:55:2b:22:6c:8e:c5:9e:
33:f5:14:b6:2c:65:87:61:f7:bd:eb:d1:e1:32:01:2d:02:59:
33:9e:3d:13:c8:57:b3:92:6c:29:6f:75:b5:0f:03:c7:d0:71:
0c:37:3c:1e:49:32:89:77:ad:37:96:a7:0d:cb:95:87:bc:97:
28:1a:3d:b1:fa:6a:6f:e1:17:aa:f9:37:b4:30:fb:48:08:55:
54:73:3a:d9
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB+JFIzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MWMzOTRjOWIzYTM2YjY5ZjllZTVmODkzNmEyZjUxYjk1ZWFjZWI0MB4XDTIyMDEw
MTA0NTMyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjc0MjNlNTEyOGMz
OGJlMjA3MmU4YzMzYjQ0NmUwMjFjY2M1OTk3YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALkA6pjoe/hXy15PlPbz1DlxG5B7S3kqea8mMOycHJVEE2gV
ivmLMQXAwYtBdJyyjFVEMeSZNXyIrAOeKhlL1YSvamSHtd24RAG35QOF71ZSnLDS
IRhQUGbFXNU4UnnlmBQCJeosiFB5PgCr5exEsuqt/iCEHXUvt/IzMLs1pmrGNyqd
V341n22H/KqJo4ptnPL2V+acYLOuT4V09w/aqsHseg2vQBkhkE1x8N4aOW4UVWkL
ZmTdwyKbBW4ZTWxxClOHpjPfhQOT/HkqapuXlN3uaewilFZ4mYq6ackxuLFniNiu
S5vDH63t+HspUa7uK0uLc0vOrxkVIfnftaKGzU0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS3Qj5RKMOL4gcujDO0RuAhzMWZejAfBgNVHSMEGDAWgBQhw5TJs6Nrafnu
X4k2ovUblerOtDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0ljT1V5Yk9qYTJuNTdsLUpOcUwxRzVYcXpyUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTAvNjFmYWNjLTY2OWYtNDQ1Ni05NjNmLTFlNDM2ZGNiODVjNS8x
L3QwSS1VU2pEaS1JSExvd3p0RWJnSWN6Rm1Yby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTAv
NjFmYWNjLTY2OWYtNDQ1Ni05NjNmLTFlNDM2ZGNiODVjNS8xL0ljT1V5Yk9qYTJu
NTdsLUpOcUwxRzVYcXpyUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA1UfoDANBgkqhkiG9w0BAQsFAAOC
AQEAdrf62dLzl0W4tok1EWWA3Si78apZCkotke92oknkgHdwXNjkP5PnyYSY/arm
xHHxmyLtS5I1/VOW0PCbmgmP22SEnpM15Om+zDPGknm1FIEfzHj+tGxYMP6Ke0LT
iXbUEya2TAaQu5VsPRRqCuxG8jkvChAmEiHkNXRjEgHQfmqxTKtXKnoIZINdgclZ
j1cmQwj2cUo3RHTrz3l8yA5F++82gEklw2rZlKh8Gn9VKyJsjsWeM/UUtixlh2H3
vevR4TIBLQJZM549E8hXs5JsKW91tQ8Dx9BxDDc8HkkyiXetN5anDcuVh7yXKBo9
sfpqb+EXqvk3tDD7SAhVVHM62Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:29 2024 by rpki-client on console-fra.rpki-client.org