Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/Fc80ibBeUZYJjxf8Nd5s6Cb3KdY.roa
File: Fc80ibBeUZYJjxf8Nd5s6Cb3KdY.roa (raw, json)
Hash identifier: fZCwJ+Pgzf6gGe9wob/C/NG9wMr2D5RrUw0PbDYc1rk=
Subject key identifier: 15:CF:34:89:B0:5E:51:96:09:8F:17:FC:35:DE:6C:E8:26:F7:29:D6
Certificate issuer: /CN=32ee1bcd8ce393d98a7583ac13f1425d4faf27c9
Certificate serial: 05E20942
Authority key identifier: 32:EE:1B:CD:8C:E3:93:D9:8A:75:83:AC:13:F1:42:5D:4F:AF:27:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/Fc80ibBeUZYJjxf8Nd5s6Cb3KdY.roa
Signing time: Mon 10 Jan 2022 11:16:10 +0000
ROA not before: Mon 10 Jan 2022 11:16:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 31.171.212.0/24 maxlen: 24
31.171.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98699586 (0x5e20942)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ee1bcd8ce393d98a7583ac13f1425d4faf27c9
Validity
Not Before: Jan 10 11:16:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15cf3489b05e5196098f17fc35de6ce826f729d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:48:7d:a5:92:4b:22:1c:72:e1:5c:4b:e4:47:
83:f7:19:a6:94:f4:28:f9:01:f9:5f:5c:75:fe:ab:
76:5e:30:96:2b:47:20:6b:d8:3c:e0:dc:f6:98:16:
a0:32:02:80:d9:52:f6:81:00:8a:9f:a9:2b:47:12:
4f:71:8e:42:4d:4f:cc:cf:e6:c1:62:cd:e1:69:f5:
6e:7d:ea:af:fa:5a:9c:03:fa:91:21:d9:71:f0:54:
5e:ac:89:3b:a7:cc:d8:d7:03:4a:3d:d6:ae:4b:5a:
18:6c:d0:0c:b6:a4:56:cd:42:82:3a:77:c5:88:d4:
84:88:cb:c0:24:f4:64:37:b7:b1:68:5f:6e:02:8b:
19:6b:d0:35:5c:ba:79:bb:d3:ce:b7:7f:7f:e8:c5:
58:b5:79:d9:94:f0:eb:5b:ba:c4:b3:8b:03:f8:ce:
2b:07:0d:ba:4c:fa:77:ad:09:24:7e:a1:5d:65:06:
87:eb:30:b5:e9:d5:6c:9e:4d:be:e2:0c:e0:6c:a0:
2e:99:e9:11:ad:43:a3:60:70:ad:13:64:9f:21:a1:
fc:d8:38:2b:b4:09:2d:79:76:fd:6d:38:65:5d:1c:
d8:c2:04:65:7a:d9:bf:8f:69:db:f5:2a:98:aa:ac:
13:34:32:ee:c0:ff:4d:c7:61:3b:eb:7b:41:cd:ca:
56:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:CF:34:89:B0:5E:51:96:09:8F:17:FC:35:DE:6C:E8:26:F7:29:D6
X509v3 Authority Key Identifier:
keyid:32:EE:1B:CD:8C:E3:93:D9:8A:75:83:AC:13:F1:42:5D:4F:AF:27:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/Fc80ibBeUZYJjxf8Nd5s6Cb3KdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.211.0-31.171.212.255
Signature Algorithm: sha256WithRSAEncryption
a5:ac:db:fb:99:08:25:03:ef:a9:8a:e2:aa:ae:5d:92:a0:49:
aa:5d:ca:69:71:61:14:cc:3e:c2:ed:e1:d8:ec:bc:75:23:f4:
52:74:fc:ca:76:80:2b:96:8e:a3:b8:67:ad:01:50:07:56:2f:
14:2d:22:27:6f:36:57:e4:8e:c0:51:fe:06:6f:7e:16:89:aa:
ea:43:d5:dc:75:ee:ad:0d:ea:cf:c7:75:19:e1:a4:08:70:b5:
42:72:ae:dc:5b:4f:03:e2:df:d0:20:67:24:d8:53:07:54:fd:
f7:68:a5:f0:3a:53:d8:23:bf:d0:bd:59:fa:0b:0f:a8:08:0a:
87:db:e6:96:76:f6:69:1a:87:52:15:48:5b:24:11:96:c6:ad:
df:ed:38:86:d0:7f:b9:4a:12:4f:3d:a0:94:18:6c:2a:11:bf:
3a:95:5d:16:d7:11:fb:7b:ad:51:b2:95:58:0a:47:16:e0:2e:
2d:39:03:1b:62:b3:6d:a1:9b:3a:9b:69:50:2d:03:3e:c7:40:
71:b6:b7:96:6b:b2:c7:cf:fc:3a:43:48:73:c1:a5:76:dd:e4:
23:d2:a3:b7:bd:99:40:24:d4:3a:92:d6:61:c8:48:a5:0b:85:
06:07:53:aa:dc:a0:4b:d4:a8:4e:2d:bc:48:e2:52:26:ab:ea:
8c:0e:c4:eb
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIEBeIJQjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MmVlMWJjZDhjZTM5M2Q5OGE3NTgzYWMxM2YxNDI1ZDRmYWYyN2M5MB4XDTIyMDEx
MDExMTYxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTVjZjM0ODliMDVl
NTE5NjA5OGYxN2ZjMzVkZTZjZTgyNmY3MjlkNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMFIfaWSSyIccuFcS+RHg/cZppT0KPkB+V9cdf6rdl4wlitH
IGvYPODc9pgWoDICgNlS9oEAip+pK0cST3GOQk1PzM/mwWLN4Wn1bn3qr/panAP6
kSHZcfBUXqyJO6fM2NcDSj3WrktaGGzQDLakVs1Cgjp3xYjUhIjLwCT0ZDe3sWhf
bgKLGWvQNVy6ebvTzrd/f+jFWLV52ZTw61u6xLOLA/jOKwcNukz6d60JJH6hXWUG
h+swtenVbJ5NvuIM4GygLpnpEa1Do2BwrRNknyGh/Ng4K7QJLXl2/W04ZV0c2MIE
ZXrZv49p2/UqmKqsEzQy7sD/TcdhO+t7Qc3KVlUCAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBQVzzSJsF5RlgmPF/w13mzoJvcp1jAfBgNVHSMEGDAWgBQy7hvNjOOT2Yp1
g6wT8UJdT68nyTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L011NGJ6WXpqazltS2RZT3NFX0ZDWFUtdko4ay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTEvZTRlODlmLTBhYWQtNDcwNy04NjVhLTQwMDEyYzgyOTc5Yi8x
L0ZjODBpYkJlVVpZSmp4ZjhOZDVzNkNiM0tkWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEv
ZTRlODlmLTBhYWQtNDcwNy04NjVhLTQwMDEyYzgyOTc5Yi8xL011NGJ6WXpqazlt
S2RZT3NFX0ZDWFUtdko4ay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQAH6vTAwQAH6vUMA0GCSqGSIb3
DQEBCwUAA4IBAQClrNv7mQglA++piuKqrl2SoEmqXcppcWEUzD7C7eHY7Lx1I/RS
dPzKdoArlo6juGetAVAHVi8ULSInbzZX5I7AUf4Gb34WiarqQ9Xcde6tDerPx3UZ
4aQIcLVCcq7cW08D4t/QIGck2FMHVP33aKXwOlPYI7/QvVn6Cw+oCAqH2+aWdvZp
GodSFUhbJBGWxq3f7TiG0H+5ShJPPaCUGGwqEb86lV0W1xH7e61RspVYCkcW4C4t
OQMbYrNtoZs6m2lQLQM+x0BxtreWa7LHz/w6Q0hzwaV23eQj0qO3vZlAJNQ6ktZh
yEilC4UGB1Oq3KBL1KhOLbxI4lImq+qMDsTr
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:06 2023 by rpki-client on console-ams.rpki-client.org