Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/pOhd-g9Mb6_OFKKqUdXDUIhEv5Q.roa
File: pOhd-g9Mb6_OFKKqUdXDUIhEv5Q.roa (raw, json)
Hash identifier: IMGnGuDXOMvTMKqEaM10u9rzei0fexyXxiVAJqemRg0=
Subject key identifier: A4:E8:5D:FA:0F:4C:6F:AF:CE:14:A2:AA:51:D5:C3:50:88:44:BF:94
Certificate issuer: /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Certificate serial: 0183ECD4054E9557477E0442095460492E9F
Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/pOhd-g9Mb6_OFKKqUdXDUIhEv5Q.roa
Signing time: Tue 18 Oct 2022 20:41:01 +0000
ROA not before: Tue 18 Oct 2022 20:41:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207574
IP address blocks: 31.24.249.0/24 maxlen: 32
2a12:4946:3000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ec:d4:05:4e:95:57:47:7e:04:42:09:54:60:49:2e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Validity
Not Before: Oct 18 20:41:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4e85dfa0f4c6fafce14a2aa51d5c3508844bf94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:97:54:72:30:58:6a:eb:40:dd:70:5d:c1:34:
7f:55:94:35:ff:2b:85:6f:e0:ef:c2:0d:25:c1:b0:
b7:37:76:a4:fb:2c:39:04:ba:89:08:fe:4e:47:1e:
c6:fd:8b:78:e1:c6:d8:b9:c9:d6:04:07:39:fc:7f:
24:84:1b:da:81:9f:88:17:34:58:0c:03:bd:23:10:
5a:4e:fe:09:bc:68:68:a9:88:90:eb:63:e0:24:ce:
bf:6f:5f:1b:1e:32:3e:00:ec:62:4b:fe:59:9f:f1:
27:47:7b:01:83:99:86:18:5d:84:78:10:3b:76:21:
22:13:f6:13:cd:20:51:77:c5:6c:06:92:ad:4b:de:
6d:6f:11:6f:7a:8f:d5:02:4b:8e:8d:75:2c:6b:ce:
f6:44:40:b4:a9:12:7b:ee:f2:74:2e:94:5a:c5:de:
88:ce:e8:ca:b6:30:61:9b:25:63:bc:84:6b:d1:c8:
e2:6c:42:03:fe:e0:d7:e8:76:1d:7a:b8:da:ab:fc:
68:b5:f3:85:60:2f:08:bf:03:7b:f0:01:58:c5:f9:
c7:d7:5f:36:4d:dd:c0:ff:23:85:59:db:8a:20:2a:
27:82:bf:be:51:00:65:0d:f7:bc:a4:9a:8b:6a:57:
c3:03:a6:7b:76:e4:c4:7e:75:50:85:ea:a3:c4:b9:
c7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E8:5D:FA:0F:4C:6F:AF:CE:14:A2:AA:51:D5:C3:50:88:44:BF:94
X509v3 Authority Key Identifier:
keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/pOhd-g9Mb6_OFKKqUdXDUIhEv5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.249.0/24
IPv6:
2a12:4946:3000::/48
Signature Algorithm: sha256WithRSAEncryption
c6:23:9a:64:28:cd:3f:48:71:62:7a:e3:6c:10:f8:d4:0d:82:
2f:53:98:b8:21:c7:e7:a0:e8:ec:db:9a:c1:1e:dc:1d:25:6f:
c7:0e:32:2e:44:fa:89:16:68:45:0b:7f:b6:11:ff:79:01:cd:
d5:e1:c8:af:86:4d:6e:37:09:2d:0e:e5:e0:77:76:15:6a:62:
cf:8b:67:9d:b3:07:2c:c0:26:60:0f:2a:b8:b4:81:b2:5b:60:
ff:30:15:9b:af:37:5d:ec:93:56:62:3d:7b:92:aa:5f:ef:cb:
2d:b7:01:43:4b:ec:05:2f:72:8c:b1:f8:d8:2d:3b:d4:e4:88:
f2:b5:5e:21:6c:78:b0:91:7c:81:58:1c:ba:6d:d4:01:c0:9a:
df:4a:9e:2f:c1:19:79:99:90:c2:bd:61:e7:9c:22:48:a8:a4:
2c:bf:71:6e:2b:cd:9c:9b:d7:50:cd:60:d9:80:62:6e:3a:87:
ab:b8:43:17:a5:75:65:66:2c:ed:bd:20:48:d5:a7:72:d2:0c:
c7:2c:c9:12:6c:e3:35:a5:71:99:e9:6e:b5:e0:a7:0f:da:7f:
6e:aa:00:9b:04:57:2c:9f:08:85:a3:dd:d0:90:02:fc:00:3c:
4d:e6:84:3e:ec:87:53:96:1c:1e:bf:ee:02:8e:48:b1:58:57:
66:47:8e:4c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYPs1AVOlVdHfgRCCVRgSS6fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NjM5NWMxMjY3MmFkOTU4OTIxYjYyYjlkYzliMmJjZDhh
NjhhOWYwHhcNMjIxMDE4MjA0MTAxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNGU4NWRmYTBmNGM2ZmFmY2UxNGEyYWE1MWQ1YzM1MDg4NDRiZjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5dUcjBYautA3XBdwTR/VZQ1/yuF
b+Dvwg0lwbC3N3ak+yw5BLqJCP5ORx7G/Yt44cbYucnWBAc5/H8khBvagZ+IFzRY
DAO9IxBaTv4JvGhoqYiQ62PgJM6/b18bHjI+AOxiS/5Zn/EnR3sBg5mGGF2EeBA7
diEiE/YTzSBRd8VsBpKtS95tbxFveo/VAkuOjXUsa872REC0qRJ77vJ0LpRaxd6I
zujKtjBhmyVjvIRr0cjibEID/uDX6HYderjaq/xotfOFYC8IvwN78AFYxfnH1182
Td3A/yOFWduKICongr++UQBlDfe8pJqLalfDA6Z7duTEfnVQheqjxLnH7QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKToXfoPTG+vzhSiqlHVw1CIRL+UMB8GA1UdIwQY
MBaAFHRjlcEmcq2ViSG2K53JsrzYpoqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMt
ZmI3NzRhYmRmYWMyLzEvcE9oZC1nOU1iNl9PRktLcVVkWERVSWhFdjVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMtZmI3NzRhYmRmYWMy
LzEvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAHxj5MA8E
AgACMAkDBwAqEklGMAAwDQYJKoZIhvcNAQELBQADggEBAMYjmmQozT9IcWJ642wQ
+NQNgi9TmLghx+eg6OzbmsEe3B0lb8cOMi5E+okWaEULf7YR/3kBzdXhyK+GTW43
CS0O5eB3dhVqYs+LZ52zByzAJmAPKri0gbJbYP8wFZuvN13sk1ZiPXuSql/vyy23
AUNL7AUvcoyx+NgtO9TkiPK1XiFseLCRfIFYHLpt1AHAmt9Kni/BGXmZkMK9Yeec
IkiopCy/cW4rzZyb11DNYNmAYm46h6u4QxeldWVmLO29IEjVp3LSDMcsyRJs4zWl
cZnpbrXgpw/af26qAJsEVyyfCIWj3dCQAvwAPE3mhD7sh1OWHB6/7gKOSLFYV2ZH
jkw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:34 2024 by rpki-client on console-fra.rpki-client.org