Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/y3IqOPdwjh_C8OWj2czdtUXOf-w.roa
File: y3IqOPdwjh_C8OWj2czdtUXOf-w.roa (raw, json)
Hash identifier: z81/s3rblI9srDbilpEO3Wn8GqwZHKx9T/wUO3DNsBk=
Subject key identifier: CB:72:2A:38:F7:70:8E:1F:C2:F0:E5:A3:D9:CC:DD:B5:45:CE:7F:EC
Certificate issuer: /CN=02930f8c688c04d17433a2b9c7249bc625bce316
Certificate serial: 44873756
Authority key identifier: 02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/y3IqOPdwjh_C8OWj2czdtUXOf-w.roa
Signing time: Sat 01 Jan 2022 02:50:51 +0000
ROA not before: Sat 01 Jan 2022 02:50:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57491
IP address blocks: 31.47.198.0/23 maxlen: 23
31.47.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1149712214 (0x44873756)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02930f8c688c04d17433a2b9c7249bc625bce316
Validity
Not Before: Jan 1 02:50:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb722a38f7708e1fc2f0e5a3d9ccddb545ce7fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cc:b2:bf:16:15:f8:e5:72:a2:59:07:09:81:
41:86:b9:2b:ca:ae:99:79:f5:4a:fe:3a:4a:69:75:
c4:f4:87:44:5c:39:3f:4a:26:83:59:bd:f3:dc:25:
34:40:72:5d:f7:cd:cf:68:df:cd:cb:c7:8f:78:ed:
f6:d3:87:aa:73:99:79:64:07:70:b3:21:84:3e:e1:
78:13:2c:0f:cc:4c:29:57:90:36:f8:6b:e5:24:81:
fb:4e:b1:9d:85:ea:e9:63:09:4f:ba:e3:8b:7e:b1:
70:e6:15:d1:58:71:9e:40:0f:f0:14:68:5c:89:75:
24:76:d4:b3:cd:24:89:60:08:15:bf:b3:13:13:e2:
a3:97:97:f7:bd:81:39:ed:7a:a7:6b:30:e3:73:b3:
9d:4e:77:fa:31:c2:f7:b3:4b:4d:10:f1:29:e3:43:
f5:63:c4:b9:44:db:67:15:6c:c3:df:f9:01:bb:3f:
63:dd:86:95:18:99:8f:c2:d8:41:89:16:04:e7:71:
a4:80:cb:ec:55:c4:de:c5:b0:0e:71:53:1c:5e:21:
33:d8:98:e7:ec:52:15:c9:5d:97:63:dc:d6:50:03:
ee:b4:27:7a:69:1c:a8:01:56:79:a9:13:31:ac:64:
67:99:63:8c:0b:39:c0:0a:88:01:1e:bc:fb:42:74:
d9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:72:2A:38:F7:70:8E:1F:C2:F0:E5:A3:D9:CC:DD:B5:45:CE:7F:EC
X509v3 Authority Key Identifier:
keyid:02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/y3IqOPdwjh_C8OWj2czdtUXOf-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.47.198.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:37:c4:4c:c4:4b:b0:4a:6a:65:37:ca:eb:53:c0:af:65:de:
b3:94:6e:b6:1a:23:89:b1:8e:bb:e7:63:fd:60:f7:f8:b1:9a:
c1:10:9d:92:cb:e8:9f:e2:cf:8e:e3:7c:a7:9b:1e:52:ba:34:
75:40:f6:7a:e9:ae:88:29:02:3e:ee:1c:97:b5:ef:6b:56:61:
5a:46:22:34:84:54:20:21:63:2d:f6:db:09:73:24:72:aa:c1:
ea:81:ff:5c:de:79:9a:4a:b4:b2:54:57:a1:9e:99:97:82:4f:
a7:0f:8d:5d:a4:cc:88:b2:2f:df:c7:ee:12:13:d4:9e:d0:2b:
5d:aa:0c:98:7d:31:60:42:5e:1b:be:d3:12:44:3a:38:97:e4:
45:57:d8:5d:25:93:c7:0e:51:f8:d8:5e:01:98:7a:81:bb:9c:
17:b6:12:27:bd:d3:38:da:e1:22:62:b5:87:ae:be:c5:69:3e:
38:13:03:85:3b:18:5a:28:15:27:d4:07:15:9a:38:9e:e7:1b:
a8:63:a1:b9:cd:9c:e9:f9:24:5b:53:1a:24:45:8e:e9:fb:87:
06:ea:36:3d:19:79:eb:3b:20:13:8f:d3:66:9a:d5:e3:4e:d6:
a6:d6:2a:13:ef:52:3c:7d:66:1a:8d:c2:ea:c7:67:5c:e3:9f:
f4:33:45:c1
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIERIc3VjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
MjkzMGY4YzY4OGMwNGQxNzQzM2EyYjljNzI0OWJjNjI1YmNlMzE2MB4XDTIyMDEw
MTAyNTA1MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2I3MjJhMzhmNzcw
OGUxZmMyZjBlNWEzZDljY2RkYjU0NWNlN2ZlYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALrMsr8WFfjlcqJZBwmBQYa5K8qumXn1Sv46Sml1xPSHRFw5
P0omg1m989wlNEByXffNz2jfzcvHj3jt9tOHqnOZeWQHcLMhhD7heBMsD8xMKVeQ
Nvhr5SSB+06xnYXq6WMJT7rji36xcOYV0VhxnkAP8BRoXIl1JHbUs80kiWAIFb+z
ExPio5eX972BOe16p2sw43OznU53+jHC97NLTRDxKeND9WPEuUTbZxVsw9/5Abs/
Y92GlRiZj8LYQYkWBOdxpIDL7FXE3sWwDnFTHF4hM9iY5+xSFcldl2Pc1lAD7rQn
emkcqAFWeakTMaxkZ5ljjAs5wAqIAR68+0J02XcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTLcio493COH8Lw5aPZzN21Rc5/7DAfBgNVHSMEGDAWgBQCkw+MaIwE0XQz
ornHJJvGJbzjFjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0FwTVBqR2lNQk5GME02SzV4eVNieGlXODR4WS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODEvYjIwNjRiLWJlMDktNDNkOS1iMDg3LWE0ZTk5MWIwZjE0NC8x
L3kzSXFPUGR3amhfQzhPV2oyY3pkdFVYT2Ytdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEv
YjIwNjRiLWJlMDktNDNkOS1iMDg3LWE0ZTk5MWIwZjE0NC8xL0FwTVBqR2lNQk5G
ME02SzV4eVNieGlXODR4WS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAR8vxjANBgkqhkiG9w0BAQsFAAOC
AQEAvTfETMRLsEpqZTfK61PAr2Xes5RuthojibGOu+dj/WD3+LGawRCdksvon+LP
juN8p5seUro0dUD2eumuiCkCPu4cl7Xva1ZhWkYiNIRUICFjLfbbCXMkcqrB6oH/
XN55mkq0slRXoZ6Zl4JPpw+NXaTMiLIv38fuEhPUntArXaoMmH0xYEJeG77TEkQ6
OJfkRVfYXSWTxw5R+NheAZh6gbucF7YSJ73TONrhImK1h66+xWk+OBMDhTsYWigV
J9QHFZo4nucbqGOhuc2c6fkkW1MaJEWO6fuHBuo2PRl56zsgE4/TZprV407WptYq
E+9SPH1mGo3C6sdnXOOf9DNFwQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:42 2023 by rpki-client on console-fra.rpki-client.org