Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/460vW3BK-gTPORhAsK3vKKdtR5E.roa
File: 460vW3BK-gTPORhAsK3vKKdtR5E.roa (raw, json)
Hash identifier: fsqx9RM37kt+3mJ8KlgLdr4TCARc82sYyY34+zNMRbI=
Subject key identifier: E3:AD:2F:5B:70:4A:FA:04:CF:39:18:40:B0:AD:EF:28:A7:6D:47:91
Certificate issuer: /CN=172537601a31697404922d957e74450f5a9cbe73
Certificate serial: 0289FFB8
Authority key identifier: 17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/460vW3BK-gTPORhAsK3vKKdtR5E.roa
Signing time: Wed 13 Apr 2022 09:08:36 +0000
ROA not before: Wed 13 Apr 2022 09:08:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63213
IP address blocks: 31.223.200.0/21 maxlen: 24
31.223.192.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42598328 (0x289ffb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=172537601a31697404922d957e74450f5a9cbe73
Validity
Not Before: Apr 13 09:08:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3ad2f5b704afa04cf391840b0adef28a76d4791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:40:0f:33:1d:b6:8d:f8:6e:13:ca:f2:8d:02:
31:07:98:44:87:b1:79:0d:71:90:b4:27:92:05:e5:
55:6c:38:d5:93:a1:d7:9a:af:09:b9:37:5a:cb:f4:
78:bc:c8:e2:53:fb:4d:46:f9:5f:5a:4e:fd:d3:45:
95:08:3c:42:49:91:6d:f0:f6:04:ad:c9:fb:20:e3:
52:17:bc:4c:36:17:30:16:9b:27:0a:bc:38:42:12:
a8:74:61:4b:a0:69:db:2a:27:06:4f:5b:fd:2f:53:
9b:bc:32:5e:c9:29:c2:fd:c4:87:39:6e:49:bc:b4:
c0:0d:24:2a:63:65:b3:f7:e8:29:f8:24:15:52:f2:
81:cb:7d:21:78:5b:4b:56:37:e2:50:4e:58:df:f9:
66:3c:5e:92:76:20:19:1e:48:3d:79:0e:87:ce:94:
da:fa:fe:89:79:69:c6:5e:db:42:eb:4c:55:6a:21:
99:ca:90:14:ed:2c:9c:11:38:ba:8b:27:7e:82:a1:
33:32:56:5f:31:31:74:56:14:bf:89:d5:b1:22:85:
da:4d:bd:19:b0:98:24:80:da:d3:d7:08:58:80:e7:
8e:21:56:e3:ab:35:d6:f8:e1:90:b4:6c:a7:8e:34:
95:33:43:4b:37:15:a6:af:e7:5b:83:82:03:87:95:
3e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AD:2F:5B:70:4A:FA:04:CF:39:18:40:B0:AD:EF:28:A7:6D:47:91
X509v3 Authority Key Identifier:
keyid:17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/460vW3BK-gTPORhAsK3vKKdtR5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.223.192.0/20
Signature Algorithm: sha256WithRSAEncryption
b0:f7:77:d3:df:69:c1:b2:71:08:6e:8b:b3:e7:1b:6d:cf:03:
40:61:58:4b:f2:46:e5:90:51:bb:e9:0e:cd:a5:16:75:91:98:
5e:7a:e6:13:98:71:9f:ae:42:e6:3d:57:59:6a:28:0b:36:d8:
25:b8:4d:dc:dd:82:51:b3:9f:85:4e:2e:7d:2f:2f:14:34:93:
a8:d4:1a:7a:9b:c3:65:23:c8:6a:42:16:ed:56:2a:90:59:2c:
c3:02:8a:9d:22:cb:d3:30:d3:59:b0:b9:90:9c:42:50:4a:2d:
58:b9:b5:fb:aa:53:0d:94:18:19:ef:a4:53:a3:58:15:c3:1c:
0e:f5:cd:77:0e:2a:fc:0f:06:17:74:c9:e3:c0:ab:e6:c6:59:
dd:94:95:e8:1e:0a:23:eb:d6:bb:14:78:51:fb:3d:c4:9c:32:
cd:3d:a2:48:8c:37:25:be:03:42:d5:a2:90:6c:d8:7d:fc:e9:
81:ce:df:3a:12:65:7b:54:02:78:03:1c:da:f3:9a:1f:5e:d6:
b2:16:cb:e5:31:42:64:70:94:5e:52:51:aa:24:fd:f2:70:fd:
93:ae:60:b5:4b:28:a5:dd:dd:bc:de:7e:45:b6:9c:22:07:45:
44:b8:b0:53:00:04:48:f2:5d:33:59:4e:5f:f2:a2:f3:15:b1:
f5:90:b5:78
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAon/uDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
NzI1Mzc2MDFhMzE2OTc0MDQ5MjJkOTU3ZTc0NDUwZjVhOWNiZTczMB4XDTIyMDQx
MzA5MDgzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTNhZDJmNWI3MDRh
ZmEwNGNmMzkxODQwYjBhZGVmMjhhNzZkNDc5MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALhADzMdto34bhPK8o0CMQeYRIexeQ1xkLQnkgXlVWw41ZOh
15qvCbk3Wsv0eLzI4lP7TUb5X1pO/dNFlQg8QkmRbfD2BK3J+yDjUhe8TDYXMBab
Jwq8OEISqHRhS6Bp2yonBk9b/S9Tm7wyXskpwv3EhzluSby0wA0kKmNls/foKfgk
FVLygct9IXhbS1Y34lBOWN/5ZjxeknYgGR5IPXkOh86U2vr+iXlpxl7bQutMVWoh
mcqQFO0snBE4uosnfoKhMzJWXzExdFYUv4nVsSKF2k29GbCYJIDa09cIWIDnjiFW
46s11vjhkLRsp440lTNDSzcVpq/nW4OCA4eVPocCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTjrS9bcEr6BM85GECwre8op21HkTAfBgNVHSMEGDAWgBQXJTdgGjFpdASS
LZV+dEUPWpy+czAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0Z5VTNZQm94YVhRRWtpMlZmblJGRDFxY3ZuTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzcvMjE5Y2FlLTI2NGQtNDZhNy05ZTY0LWU2MDRiNjFiZTBlYS8x
LzQ2MHZXM0JLLWdUUE9SaEFzSzN2S0tkdFI1RS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcv
MjE5Y2FlLTI2NGQtNDZhNy05ZTY0LWU2MDRiNjFiZTBlYS8xL0Z5VTNZQm94YVhR
RWtpMlZmblJGRDFxY3ZuTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBB/fwDANBgkqhkiG9w0BAQsFAAOC
AQEAsPd3099pwbJxCG6Ls+cbbc8DQGFYS/JG5ZBRu+kOzaUWdZGYXnrmE5hxn65C
5j1XWWooCzbYJbhN3N2CUbOfhU4ufS8vFDSTqNQaepvDZSPIakIW7VYqkFkswwKK
nSLL0zDTWbC5kJxCUEotWLm1+6pTDZQYGe+kU6NYFcMcDvXNdw4q/A8GF3TJ48Cr
5sZZ3ZSV6B4KI+vWuxR4Ufs9xJwyzT2iSIw3Jb4DQtWikGzYffzpgc7fOhJle1QC
eAMc2vOaH17WshbL5TFCZHCUXlJRqiT98nD9k65gtUsopd3dvN5+RbacIgdFRLiw
UwAESPJdM1lOX/Ki8xWx9ZC1eA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:25 2024 by rpki-client on console-fra.rpki-client.org