Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/ya0kWvxfRSGkUQzzDvwM-Ui-e74.roa
File: ya0kWvxfRSGkUQzzDvwM-Ui-e74.roa (raw, json)
Hash identifier: 4kLUPlDjomnYFAHLjOySTm27ZTzSH9hqZrZm0F1MRHc=
Subject key identifier: C9:AD:24:5A:FC:5F:45:21:A4:51:0C:F3:0E:FC:0C:F9:48:BE:7B:BE
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018514D04D81CCDC265E6AAD30B822B29DD8
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/ya0kWvxfRSGkUQzzDvwM-Ui-e74.roa
Signing time: Thu 15 Dec 2022 08:04:33 +0000
ROA not before: Thu 15 Dec 2022 08:04:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211936
IP address blocks: 31.186.176.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:14:d0:4d:81:cc:dc:26:5e:6a:ad:30:b8:22:b2:9d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Dec 15 08:04:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9ad245afc5f4521a4510cf30efc0cf948be7bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e9:33:bb:67:bd:fc:78:a4:0b:1f:3a:35:41:
b7:13:a2:88:56:3b:5c:3a:b7:23:8e:09:3e:58:5d:
21:6f:7a:75:4c:8d:08:14:6e:66:3c:a7:ec:aa:a9:
81:82:9e:5a:8f:6d:9f:9c:55:6b:1c:67:47:89:7a:
a8:37:49:56:43:a4:90:71:56:ef:bb:89:1b:6b:8d:
a7:33:50:fd:a7:d0:24:4b:b8:9d:26:02:03:7c:75:
0d:0c:61:45:45:ab:2e:83:be:8c:93:f7:69:53:23:
4a:bf:b9:0a:80:65:83:66:d4:a0:c3:82:d8:88:e8:
bd:f9:92:54:fe:7d:64:95:9a:f5:b0:46:c9:15:22:
36:d2:8b:b0:8e:be:ae:ae:78:86:00:4d:8b:06:e4:
04:dd:30:c1:0c:a0:55:1a:2e:a1:94:53:47:fd:c0:
21:3f:d0:9f:4d:e6:9c:29:65:bc:2e:86:9b:e9:ad:
52:85:26:80:eb:a7:0c:d4:9b:b8:2b:e9:a0:3e:9b:
13:89:07:6e:97:29:43:8e:a4:40:72:8b:8d:32:c5:
db:3f:4f:34:51:61:0d:dd:9b:bd:d9:4a:6a:7a:69:
e5:76:ee:ad:99:72:39:67:32:78:58:8e:5f:ba:79:
8b:36:01:9e:a5:d3:c5:d0:af:99:09:86:05:f1:41:
99:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AD:24:5A:FC:5F:45:21:A4:51:0C:F3:0E:FC:0C:F9:48:BE:7B:BE
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/ya0kWvxfRSGkUQzzDvwM-Ui-e74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.176.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:1d:3b:90:fc:4f:27:ab:86:91:b2:63:3c:dd:a0:3f:d9:69:
f5:70:23:49:4f:f1:b9:89:fa:99:e5:ed:97:12:94:d3:58:27:
92:ad:82:ec:a3:1e:41:60:67:9e:f1:04:9b:b0:73:05:c7:0d:
80:87:ce:63:38:c9:12:33:f3:42:a3:7b:f6:ec:bb:91:be:c1:
4c:2f:d4:03:99:9e:d1:99:2e:89:3c:ed:4b:f5:a4:be:a4:f2:
97:be:dc:e7:7a:af:7a:81:4f:5c:8c:ed:5d:d5:87:01:dd:c3:
68:47:8d:77:27:25:be:dc:5e:a1:e0:93:fc:32:d6:de:8d:03:
b4:28:82:97:e4:cf:06:bc:a0:f7:d0:70:72:35:77:90:87:61:
66:99:04:97:5e:76:bf:60:e6:51:52:29:b3:88:ed:29:a2:0c:
74:6a:e9:ab:90:e2:5d:96:4d:05:61:37:dc:75:3a:91:8d:d7:
74:19:6a:5a:da:ae:68:b2:b6:6e:94:9f:0a:1e:91:cb:f3:3e:
a3:36:63:d2:9c:8c:66:3c:82:3d:a3:32:e7:6c:43:11:20:50:
b5:1f:c0:74:ba:f6:fc:aa:a8:1c:68:52:07:ed:f4:ba:17:a7:
8f:49:6f:52:b6:ae:0e:ce:3a:60:86:b5:1e:b9:3b:79:2d:50:
b2:3b:bc:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYUU0E2BzNwmXmqtMLgisp3YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2
N2IxZTQwHhcNMjIxMjE1MDgwNDMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWFkMjQ1YWZjNWY0NTIxYTQ1MTBjZjMwZWZjMGNmOTQ4YmU3YmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOkzu2e9/HikCx86NUG3E6KIVjtc
Orcjjgk+WF0hb3p1TI0IFG5mPKfsqqmBgp5aj22fnFVrHGdHiXqoN0lWQ6SQcVbv
u4kba42nM1D9p9AkS7idJgIDfHUNDGFFRasug76Mk/dpUyNKv7kKgGWDZtSgw4LY
iOi9+ZJU/n1klZr1sEbJFSI20ouwjr6urniGAE2LBuQE3TDBDKBVGi6hlFNH/cAh
P9CfTeacKWW8Loab6a1ShSaA66cM1Ju4K+mgPpsTiQdulylDjqRAcouNMsXbP080
UWEN3Zu92Upqemnldu6tmXI5ZzJ4WI5funmLNgGepdPF0K+ZCYYF8UGZwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMmtJFr8X0UhpFEM8w78DPlIvnu+MB8GA1UdIwQY
MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut
ODk3MTRhN2U4ZDU4LzEveWEwa1d2eGZSU0drVVF6ekR2d00tVWktZTc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4
LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCH7qwMA0G
CSqGSIb3DQEBCwUAA4IBAQBKHTuQ/E8nq4aRsmM83aA/2Wn1cCNJT/G5ifqZ5e2X
EpTTWCeSrYLsox5BYGee8QSbsHMFxw2Ah85jOMkSM/NCo3v27LuRvsFML9QDmZ7R
mS6JPO1L9aS+pPKXvtzneq96gU9cjO1d1YcB3cNoR413JyW+3F6h4JP8MtbejQO0
KIKX5M8GvKD30HByNXeQh2FmmQSXXna/YOZRUimziO0pogx0aumrkOJdlk0FYTfc
dTqRjdd0GWpa2q5osrZulJ8KHpHL8z6jNmPSnIxmPII9ozLnbEMRIFC1H8B0uvb8
qqgcaFIH7fS6F6ePSW9Stq4OzjpghrUeuTt5LVCyO7zd
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:47 2024 by rpki-client on console-ams.rpki-client.org