Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/sTPEbJCFEc9ffehBvneccM8qGTY.roa
File: sTPEbJCFEc9ffehBvneccM8qGTY.roa (raw, json)
Hash identifier: UlRXzChiW78rJnuxwfCb9HX0q3VyVD+TqnLxAar9TfE=
Subject key identifier: B1:33:C4:6C:90:85:11:CF:5F:7D:E8:41:BE:77:9C:70:CF:2A:19:36
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 0396F2D0
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/sTPEbJCFEc9ffehBvneccM8qGTY.roa
Signing time: Thu 26 May 2022 17:12:13 +0000
ROA not before: Thu 26 May 2022 17:12:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56887
IP address blocks: 31.131.44.0/23 maxlen: 24
194.40.205.0/24 maxlen: 24
194.40.204.0/24 maxlen: 24
194.40.206.0/24 maxlen: 24
194.40.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60224208 (0x396f2d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: May 26 17:12:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b133c46c908511cf5f7de841be779c70cf2a1936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:07:ca:8a:43:3f:85:24:54:03:2d:b8:f8:16:
56:44:e7:3b:57:21:e9:b9:c6:55:f3:bb:fc:1e:5b:
be:7a:09:89:6b:2f:e6:7d:ea:46:b9:ac:13:d6:d6:
85:ca:33:e5:fe:c1:b6:c9:6b:f6:a0:8f:a0:16:05:
bc:ce:0c:98:56:07:72:43:69:c4:1c:bd:e0:9f:74:
51:1c:bd:15:6c:4e:bb:f8:15:56:2e:77:f9:ca:77:
4b:c8:a8:de:db:0c:8f:91:d8:e4:c0:37:9d:e1:ed:
47:b4:88:d2:2f:d9:eb:d1:03:7c:2d:f5:ea:63:f5:
8b:ff:fa:de:db:cf:ad:a5:e3:54:d7:42:aa:0b:30:
40:e4:99:b7:7f:38:fe:1e:89:06:7a:b9:04:b5:ca:
dc:10:92:05:26:fc:8f:fc:db:4e:3f:96:ed:de:60:
40:b0:4e:9d:b8:c9:b8:0a:09:39:ad:b8:39:96:79:
10:ae:ae:72:f3:4f:43:99:f2:c0:bc:d6:cc:8e:94:
f5:90:91:5f:d8:d4:88:64:4a:53:73:e2:10:73:8f:
2d:11:b1:30:aa:6f:ad:f4:86:6a:8f:e8:86:94:57:
90:59:af:77:fe:2f:f1:0e:81:37:64:57:3f:4b:ce:
93:95:5f:37:1c:6a:8e:38:de:66:9f:c2:b3:bb:1a:
fa:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:33:C4:6C:90:85:11:CF:5F:7D:E8:41:BE:77:9C:70:CF:2A:19:36
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/sTPEbJCFEc9ffehBvneccM8qGTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.44.0/23
194.40.204.0/22
Signature Algorithm: sha256WithRSAEncryption
86:4f:26:77:4c:75:aa:b9:6d:c0:52:5b:57:bc:48:54:e4:ee:
be:21:f8:6e:94:34:6f:8c:a5:ff:29:3b:45:95:c7:5b:d0:63:
ea:5c:bc:0a:c5:43:a2:29:ea:a7:24:d2:f9:3e:55:9a:0a:fa:
b5:71:c3:0d:f2:b1:50:04:c7:76:ce:cc:bf:f8:ce:79:08:b7:
31:5a:95:34:fc:1d:a9:78:26:82:74:a5:c6:ad:9d:93:12:28:
3e:1d:7a:24:1e:2e:76:f3:99:2f:ca:90:5e:f9:73:f1:9b:6e:
fa:50:8f:2b:7e:49:30:88:69:a0:23:e4:5a:cc:7c:97:8a:9a:
ef:56:da:4c:64:68:ab:19:be:a2:79:bb:51:58:34:d9:b3:f7:
40:39:05:c8:44:f2:76:eb:a2:88:27:34:a7:c7:e8:d9:16:48:
34:9c:73:7b:61:f5:34:bb:2b:5d:39:ec:bc:68:22:a5:97:57:
61:85:70:41:ef:66:56:71:2c:87:9c:12:e5:23:e0:2f:e4:af:
dd:98:9d:44:3e:fb:f9:a0:af:e0:fb:81:d2:4f:bc:11:29:0e:
9d:bc:d9:22:88:8c:22:a6:a1:28:a5:b0:f4:2a:8b:de:d7:d1:
a1:e6:51:37:3b:1b:8a:cf:69:ba:7c:e5:48:1b:ec:0b:3f:8c:
6f:24:a2:a9
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEA5by0DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MmYyYzJlN2JjMWRhNTRkOTE5Y2E1YjU5NDFkMzc4ODkyYjJjY2IyMB4XDTIyMDUy
NjE3MTIxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjEzM2M0NmM5MDg1
MTFjZjVmN2RlODQxYmU3NzljNzBjZjJhMTkzNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJwHyopDP4UkVAMtuPgWVkTnO1ch6bnGVfO7/B5bvnoJiWsv
5n3qRrmsE9bWhcoz5f7Btslr9qCPoBYFvM4MmFYHckNpxBy94J90URy9FWxOu/gV
Vi53+cp3S8io3tsMj5HY5MA3neHtR7SI0i/Z69EDfC316mP1i//63tvPraXjVNdC
qgswQOSZt384/h6JBnq5BLXK3BCSBSb8j/zbTj+W7d5gQLBOnbjJuAoJOa24OZZ5
EK6ucvNPQ5nywLzWzI6U9ZCRX9jUiGRKU3PiEHOPLRGxMKpvrfSGao/ohpRXkFmv
d/4v8Q6BN2RXP0vOk5VfNxxqjjjeZp/Cs7sa+vECAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSxM8RskIURz1996EG+d5xwzyoZNjAfBgNVHSMEGDAWgBQi8sLnvB2lTZGc
pbWUHTeIkrLMsjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0l2TEM1N3dkcFUyUm5LVzFsQjAzaUpLeXpMSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2IvNjAyNTMwLTZkMjItNDZmMS04ZTA1LTAyZGVmNmU4NGM5MS8x
L3NUUEViSkNGRWM5ZmZlaEJ2bmVjY004cUdUWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Iv
NjAyNTMwLTZkMjItNDZmMS04ZTA1LTAyZGVmNmU4NGM5MS8xL0l2TEM1N3dkcFUy
Um5LVzFsQjAzaUpLeXpMSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAR+DLAMEAsIozDANBgkqhkiG9w0B
AQsFAAOCAQEAhk8md0x1qrltwFJbV7xIVOTuviH4bpQ0b4yl/yk7RZXHW9Bj6ly8
CsVDoinqpyTS+T5Vmgr6tXHDDfKxUATHds7Mv/jOeQi3MVqVNPwdqXgmgnSlxq2d
kxIoPh16JB4udvOZL8qQXvlz8Ztu+lCPK35JMIhpoCPkWsx8l4qa71baTGRoqxm+
onm7UVg02bP3QDkFyETyduuiiCc0p8fo2RZINJxze2H1NLsrXTnsvGgipZdXYYVw
Qe9mVnEsh5wS5SPgL+Sv3ZidRD77+aCv4PuB0k+8ESkOnbzZIoiMIqahKKWw9CqL
3tfRoeZRNzsbis9punzlSBvsCz+MbySiqQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:57 2023 by rpki-client on console-ams.rpki-client.org