Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/JL1Um_U4Js11kq-f4I-X3SEizbc.roa
File: JL1Um_U4Js11kq-f4I-X3SEizbc.roa (raw, json)
Hash identifier: zH+DVyERw0GUzt9Zr14nf9xICU1bjGTD5Rc95i6RbEA=
Subject key identifier: 24:BD:54:9B:F5:38:26:CD:75:92:AF:9F:E0:8F:97:DD:21:22:CD:B7
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 088A9B30
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/JL1Um_U4Js11kq-f4I-X3SEizbc.roa
Signing time: Sat 01 Jan 2022 15:00:03 +0000
ROA not before: Sat 01 Jan 2022 15:00:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211867
IP address blocks: 31.40.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143301424 (0x88a9b30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Jan 1 15:00:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24bd549bf53826cd7592af9fe08f97dd2122cdb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a5:63:9a:1c:5d:dc:4e:e8:62:a8:70:4f:7c:
bb:83:62:72:ce:2b:d3:e6:b8:fa:21:ed:30:7d:b3:
d6:e0:f3:93:9a:c7:97:21:0f:ee:6b:7a:af:52:59:
14:b2:1a:d9:81:a3:bd:69:74:e5:07:e7:c5:f8:eb:
33:8b:b9:f1:5e:b6:8d:7a:67:ab:cd:b5:1b:6e:3a:
d0:c2:b7:ff:b5:34:a7:5d:d4:76:3b:b6:ab:15:4e:
dd:c1:4c:6f:f7:8e:a1:bc:76:f7:fa:ae:d8:8e:a8:
3c:93:e1:42:19:54:a8:94:7d:5a:88:00:48:c0:ea:
7c:16:a9:12:92:8f:e1:c9:6f:39:1f:2d:ed:ae:0a:
57:da:64:97:12:ef:1a:24:41:49:ce:dc:f8:12:a2:
31:20:66:c4:96:80:80:90:57:2f:57:ac:8e:47:e7:
66:37:ba:45:7d:f4:f0:fe:94:79:47:4b:aa:03:37:
11:df:3e:29:71:cb:53:d7:d8:69:e1:de:8a:65:aa:
de:15:48:af:cb:fb:7c:5c:0e:e1:ab:aa:34:a8:e1:
b0:1b:86:4c:e2:17:2f:99:d7:ee:54:87:d4:df:8e:
b3:6f:27:2f:c1:cb:7e:35:2e:4f:8b:0e:59:81:2b:
c5:84:a6:9e:29:57:36:43:26:a2:f2:30:fa:63:79:
86:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BD:54:9B:F5:38:26:CD:75:92:AF:9F:E0:8F:97:DD:21:22:CD:B7
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/JL1Um_U4Js11kq-f4I-X3SEizbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.142.0/24
Signature Algorithm: sha256WithRSAEncryption
93:5b:c8:34:b2:95:43:eb:78:11:9a:19:bf:6e:31:f1:e7:c4:
00:23:2c:6c:90:bb:4e:71:ca:25:d1:4b:90:c9:32:74:03:d4:
1d:bb:01:fd:60:d4:8c:3c:b8:57:99:1d:16:3a:8f:4a:c7:3b:
6e:59:ef:8b:8d:82:6c:9d:eb:87:ab:c6:44:a8:04:af:78:94:
5b:43:94:a5:a6:c7:10:2c:c1:f0:97:fd:31:44:c1:96:4b:cf:
4e:7a:7f:2a:bc:64:68:67:23:0a:4d:82:91:8e:76:c5:fe:95:
7a:ec:4e:77:d1:a8:2e:e1:ab:d4:66:8e:e8:e6:29:63:84:6e:
7c:16:8b:2c:be:86:f6:1e:6b:3a:5b:82:a5:b5:ca:23:00:5e:
cf:80:8b:7f:ec:0f:4e:91:ac:d3:36:fa:20:f1:59:52:46:ea:
2c:c6:e4:65:10:6a:a4:31:2b:73:f0:90:77:39:c4:f4:a9:67:
0e:9f:e6:c4:b2:8d:bd:f0:96:63:82:aa:99:eb:f2:da:cd:78:
4d:40:57:d6:81:98:ed:bf:aa:aa:6c:8a:d5:48:c6:ba:f4:2e:
d8:19:b2:a2:41:93:2b:f0:cd:75:99:f5:60:f0:61:08:e7:04:
c5:2b:25:84:1c:1f:4d:b2:69:81:4f:6a:1e:af:60:bd:d9:44:
8f:40:de:87
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECIqbMDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
ZWFmNWMyZTVlZGMxOTc4MzRkMDdmMzQ1OTYyYjA3NDViZWU2NmQ3MB4XDTIyMDEw
MTE1MDAwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjRiZDU0OWJmNTM4
MjZjZDc1OTJhZjlmZTA4Zjk3ZGQyMTIyY2RiNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK2lY5ocXdxO6GKocE98u4Nics4r0+a4+iHtMH2z1uDzk5rH
lyEP7mt6r1JZFLIa2YGjvWl05QfnxfjrM4u58V62jXpnq821G2460MK3/7U0p13U
dju2qxVO3cFMb/eOobx29/qu2I6oPJPhQhlUqJR9WogASMDqfBapEpKP4clvOR8t
7a4KV9pklxLvGiRBSc7c+BKiMSBmxJaAgJBXL1esjkfnZje6RX308P6UeUdLqgM3
Ed8+KXHLU9fYaeHeimWq3hVIr8v7fFwO4auqNKjhsBuGTOIXL5nX7lSH1N+Os28n
L8HLfjUuT4sOWYErxYSmnilXNkMmovIw+mN5hkMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQkvVSb9TgmzXWSr5/gj5fdISLNtzAfBgNVHSMEGDAWgBQer1wuXtwZeDTQ
fzRZYrB0W+5m1zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0hxOWNMbDdjR1hnMDBIODBXV0t3ZEZ2dVp0Yy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzYvMWNmYjkyLTljMzEtNDY0Zi05MzgyLTRhMzRjMWJiYWIyYi8x
L0pMMVVtX1U0SnMxMWtxLWY0SS1YM1NFaXpiYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYv
MWNmYjkyLTljMzEtNDY0Zi05MzgyLTRhMzRjMWJiYWIyYi8xL0hxOWNMbDdjR1hn
MDBIODBXV0t3ZEZ2dVp0Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAB8ojjANBgkqhkiG9w0BAQsFAAOC
AQEAk1vINLKVQ+t4EZoZv24x8efEACMsbJC7TnHKJdFLkMkydAPUHbsB/WDUjDy4
V5kdFjqPSsc7blnvi42CbJ3rh6vGRKgEr3iUW0OUpabHECzB8Jf9MUTBlkvPTnp/
KrxkaGcjCk2CkY52xf6VeuxOd9GoLuGr1GaO6OYpY4RufBaLLL6G9h5rOluCpbXK
IwBez4CLf+wPTpGs0zb6IPFZUkbqLMbkZRBqpDErc/CQdznE9KlnDp/mxLKNvfCW
Y4Kqmevy2s14TUBX1oGY7b+qqmyK1UjGuvQu2BmyokGTK/DNdZn1YPBhCOcExSsl
hBwfTbJpgU9qHq9gvdlEj0Dehw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:04 2023 by rpki-client on console-fra.rpki-client.org