Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/nUmzSlMowpa0EvWfZDT8lwVlBvQ.roa
File: nUmzSlMowpa0EvWfZDT8lwVlBvQ.roa (raw, json)
Hash identifier: RduW88T9UWTJj8f3FX4bA4kmldxjXfkNL+TzGiN6PtM=
Subject key identifier: 9D:49:B3:4A:53:28:C2:96:B4:12:F5:9F:64:34:FC:97:05:65:06:F4
Certificate issuer: /CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Certificate serial: 39207784
Authority key identifier: 99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/nUmzSlMowpa0EvWfZDT8lwVlBvQ.roa
Signing time: Tue 17 May 2022 15:36:29 +0000
ROA not before: Tue 17 May 2022 15:36:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21413
IP address blocks: 31.42.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 958429060 (0x39207784)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Validity
Not Before: May 17 15:36:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d49b34a5328c296b412f59f6434fc97056506f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d8:54:52:5d:2e:ff:a7:9d:b8:c8:b0:df:c5:
57:55:45:ec:4d:ba:56:26:60:e3:c8:2f:c0:73:37:
98:2b:c9:1e:0d:2a:50:92:fc:b9:59:97:3a:31:0d:
ac:4e:49:43:83:e7:13:0e:f2:92:53:f8:66:4b:78:
df:5d:7b:2b:5d:50:99:59:7b:8a:6c:ef:90:7f:e0:
68:50:95:93:d6:b3:88:02:c9:f3:80:13:1b:32:3e:
f3:ea:ba:eb:04:86:4a:0d:b5:10:a0:76:89:d4:28:
d4:9f:31:be:cf:a9:79:69:46:10:49:de:9c:20:11:
c2:39:cb:1f:f7:54:d9:50:c9:38:34:63:02:c6:1d:
ca:88:97:01:31:9d:f1:58:f1:ee:df:52:e3:90:6a:
59:95:5f:4e:5e:0f:54:0c:69:1d:e2:98:57:84:08:
04:90:13:0a:34:35:3a:90:2c:a1:39:f9:8b:06:a4:
64:53:9f:52:1d:1e:4d:dd:19:ae:95:19:b1:04:e6:
32:bd:fb:47:07:ae:b9:dd:d2:4c:85:68:bf:bc:76:
d5:12:91:40:3c:dd:08:9d:ad:7f:2d:ab:a5:fe:d9:
ba:03:b4:eb:63:df:39:2a:b1:5a:14:b7:60:90:16:
9c:85:ef:64:87:f9:24:80:fc:51:47:68:73:8f:74:
fc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:49:B3:4A:53:28:C2:96:B4:12:F5:9F:64:34:FC:97:05:65:06:F4
X509v3 Authority Key Identifier:
keyid:99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/nUmzSlMowpa0EvWfZDT8lwVlBvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.180.0/24
Signature Algorithm: sha256WithRSAEncryption
37:8f:07:e8:04:b5:ac:9b:0c:f9:14:e3:ba:70:8d:97:f7:cb:
82:24:81:08:86:4f:6e:7c:3e:5c:43:21:58:46:0b:4a:c7:cc:
a1:e6:84:4a:3d:a9:65:17:06:5b:8a:f8:6d:93:7d:34:38:57:
07:db:8f:8f:4a:fb:a9:bb:b2:b9:53:9b:4d:af:33:f7:9d:0c:
77:69:55:df:ea:01:a6:19:1b:d4:1a:b9:b3:10:8b:8e:d2:e8:
31:7e:4a:6c:da:73:2b:d7:01:00:fe:83:31:c8:4c:74:f1:34:
d3:a4:c7:0a:02:e6:28:d7:7f:4b:8e:b1:d4:69:9b:d7:80:f7:
a2:02:93:0f:83:d7:54:6b:5a:38:cf:e1:63:5f:b4:5e:3c:4a:
8f:3b:25:9f:f8:ac:05:10:43:37:75:57:75:93:03:8e:9f:d0:
b9:52:6e:20:c0:cd:e9:f9:8e:87:eb:c5:29:39:5b:58:cb:59:
2e:ce:dc:6b:74:ad:c1:20:5b:bb:71:71:4e:d7:f7:84:6c:e7:
50:b7:4e:5b:72:f0:95:54:5c:98:ec:46:1a:32:ae:2b:3b:7c:
27:e9:aa:e1:7c:93:a0:30:5d:01:3e:84:ba:76:62:9c:bc:33:
10:d6:a1:c3:10:e0:fa:46:2c:ea:08:53:4d:2f:5f:01:8c:30:
b7:1f:7d:27
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEOSB3hDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
OTg0YjllYjEyMjIzNzExMWMxZjhjYTU3NzA3ZWM3MzA3MjkxZWU4MB4XDTIyMDUx
NzE1MzYyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWQ0OWIzNGE1MzI4
YzI5NmI0MTJmNTlmNjQzNGZjOTcwNTY1MDZmNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALrYVFJdLv+nnbjIsN/FV1VF7E26ViZg48gvwHM3mCvJHg0q
UJL8uVmXOjENrE5JQ4PnEw7yklP4Zkt43117K11QmVl7imzvkH/gaFCVk9aziALJ
84ATGzI+8+q66wSGSg21EKB2idQo1J8xvs+peWlGEEnenCARwjnLH/dU2VDJODRj
AsYdyoiXATGd8Vjx7t9S45BqWZVfTl4PVAxpHeKYV4QIBJATCjQ1OpAsoTn5iwak
ZFOfUh0eTd0ZrpUZsQTmMr37Rweuud3STIVov7x21RKRQDzdCJ2tfy2rpf7ZugO0
62PfOSqxWhS3YJAWnIXvZIf5JID8UUdoc490/A8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSdSbNKUyjClrQS9Z9kNPyXBWUG9DAfBgNVHSMEGDAWgBSZhLnrEiI3ERwf
jKV3B+xzByke6DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L21ZUzU2eElpTnhFY0g0eWxkd2ZzY3djcEh1Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWQvYjljMWQ3LTJhZWQtNDY5Ni04MGE3LWQ1YWJmNTAzMWQyMS8x
L25VbXpTbE1vd3BhMEV2V2ZaRFQ4bHdWbEJ2US5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQv
YjljMWQ3LTJhZWQtNDY5Ni04MGE3LWQ1YWJmNTAzMWQyMS8xL21ZUzU2eElpTnhF
Y0g0eWxkd2ZzY3djcEh1Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAB8qtDANBgkqhkiG9w0BAQsFAAOC
AQEAN48H6AS1rJsM+RTjunCNl/fLgiSBCIZPbnw+XEMhWEYLSsfMoeaESj2pZRcG
W4r4bZN9NDhXB9uPj0r7qbuyuVObTa8z950Md2lV3+oBphkb1Bq5sxCLjtLoMX5K
bNpzK9cBAP6DMchMdPE006THCgLmKNd/S46x1Gmb14D3ogKTD4PXVGtaOM/hY1+0
XjxKjzsln/isBRBDN3VXdZMDjp/QuVJuIMDN6fmOh+vFKTlbWMtZLs7ca3StwSBb
u3FxTtf3hGznULdOW3LwlVRcmOxGGjKuKzt8J+mq4XyToDBdAT6EunZinLwzENah
wxDg+kYs6ghTTS9fAYwwtx99Jw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:47 2023 by rpki-client on console-ams.rpki-client.org