Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/8N1B-94TSWepZwY8w9WWzs4Oaoc.roa
File: 8N1B-94TSWepZwY8w9WWzs4Oaoc.roa (raw, json)
Hash identifier: gkyzMDyottvixpIZ9aeZIKcvUBEXedy2OEiD0y+e/sw=
Subject key identifier: F0:DD:41:FB:DE:13:49:67:A9:67:06:3C:C3:D5:96:CE:CE:0E:6A:87
Certificate issuer: /CN=3556e7fb5772f979edd5e5c5aa63eb2b9c0ddc8e
Certificate serial: 1BE5028B
Authority key identifier: 35:56:E7:FB:57:72:F9:79:ED:D5:E5:C5:AA:63:EB:2B:9C:0D:DC:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/8N1B-94TSWepZwY8w9WWzs4Oaoc.roa
Signing time: Sat 07 May 2022 19:31:11 +0000
ROA not before: Sat 07 May 2022 19:31:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212219
IP address blocks: 46.31.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 467993227 (0x1be5028b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3556e7fb5772f979edd5e5c5aa63eb2b9c0ddc8e
Validity
Not Before: May 7 19:31:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0dd41fbde134967a967063cc3d596cece0e6a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1b:f6:2f:43:3a:b2:ce:bb:e1:91:7a:70:09:
a3:66:df:6c:43:2b:1f:24:5e:b6:b2:b4:2b:98:57:
84:a6:93:2f:55:67:51:72:c8:78:fe:74:a6:ad:17:
24:f6:ae:88:45:35:79:e0:1c:99:2f:9f:6b:73:b3:
53:9c:75:c9:26:68:df:71:58:66:9c:16:89:9f:5a:
37:c0:e7:e7:47:e7:50:a7:9f:13:8d:ad:92:c6:80:
71:16:ac:bc:aa:40:00:87:ec:36:ab:b4:a2:a2:e1:
e8:51:66:3d:4f:33:37:bb:0f:cb:b9:0a:e8:34:27:
75:6b:15:30:87:8e:56:72:56:b9:dc:4c:34:0f:cb:
32:c5:f1:18:cd:a0:cf:88:f0:33:33:a9:f9:94:ae:
61:3b:6e:87:5e:ae:36:4e:7b:f6:00:fe:fa:0d:b1:
a7:7f:e4:8f:fd:43:a7:92:60:c2:0b:44:53:c8:68:
03:59:b1:88:05:84:8c:61:69:ac:89:f1:86:8e:26:
6f:1c:7d:af:32:65:60:86:ea:81:91:dc:cb:5f:6d:
06:76:9d:ec:b0:b9:8c:15:d5:03:dc:68:c1:e3:48:
12:9f:8a:4e:88:d4:d6:af:a5:60:07:0a:51:ca:c3:
ea:55:0e:80:50:34:bd:a0:5c:39:d7:c7:bc:be:82:
43:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:DD:41:FB:DE:13:49:67:A9:67:06:3C:C3:D5:96:CE:CE:0E:6A:87
X509v3 Authority Key Identifier:
keyid:35:56:E7:FB:57:72:F9:79:ED:D5:E5:C5:AA:63:EB:2B:9C:0D:DC:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/8N1B-94TSWepZwY8w9WWzs4Oaoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.77.0/24
Signature Algorithm: sha256WithRSAEncryption
24:90:0d:72:de:0a:00:84:4b:f6:6e:6e:62:fd:9c:71:2a:00:
7e:d8:90:4d:19:d4:f5:2f:60:a6:b5:f3:c9:05:ac:2c:1f:c0:
f4:33:82:f0:e9:5a:1c:5f:a3:3b:55:a0:9b:20:59:28:68:44:
b8:09:b6:9b:cc:d5:41:50:fa:b6:9c:70:d5:5f:ff:32:78:18:
9b:a9:83:b1:7a:3f:4d:bb:10:f6:6a:5d:ff:c9:80:56:10:c6:
16:74:17:98:d4:54:12:71:0a:6d:11:6b:82:52:84:74:62:8b:
bc:e6:5b:e3:56:4a:8d:a8:ca:28:14:d6:96:85:ba:84:fc:ba:
5e:cb:a8:ff:f1:7b:da:20:7d:73:51:ff:35:0f:b9:a0:ab:d1:
f5:d1:7b:29:46:bf:25:db:70:75:84:01:cd:6c:34:5e:e4:89:
a1:ff:46:ca:dd:5b:48:d3:a5:b5:9c:90:89:0a:30:4c:f5:0d:
46:ac:d9:72:19:13:cd:29:ef:8a:ce:7f:ab:1f:ba:66:30:03:
64:b4:4d:4f:f6:75:b9:05:59:6c:4b:cf:2f:c1:35:fa:17:fd:
ab:79:0f:be:5e:d1:ae:d2:a4:75:51:b9:b8:58:81:32:c7:85:
eb:cd:3b:bc:06:ef:38:2b:e4:fa:9c:0e:43:93:e3:bf:e7:d2:
18:2e:2d:43
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEG+UCizANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NTU2ZTdmYjU3NzJmOTc5ZWRkNWU1YzVhYTYzZWIyYjljMGRkYzhlMB4XDTIyMDUw
NzE5MzExMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjBkZDQxZmJkZTEz
NDk2N2E5NjcwNjNjYzNkNTk2Y2VjZTBlNmE4NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM8b9i9DOrLOu+GRenAJo2bfbEMrHyRetrK0K5hXhKaTL1Vn
UXLIeP50pq0XJPauiEU1eeAcmS+fa3OzU5x1ySZo33FYZpwWiZ9aN8Dn50fnUKef
E42tksaAcRasvKpAAIfsNqu0oqLh6FFmPU8zN7sPy7kK6DQndWsVMIeOVnJWudxM
NA/LMsXxGM2gz4jwMzOp+ZSuYTtuh16uNk579gD++g2xp3/kj/1Dp5JgwgtEU8ho
A1mxiAWEjGFprInxho4mbxx9rzJlYIbqgZHcy19tBnad7LC5jBXVA9xoweNIEp+K
TojU1q+lYAcKUcrD6lUOgFA0vaBcOdfHvL6CQ2MCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTw3UH73hNJZ6lnBjzD1ZbOzg5qhzAfBgNVHSMEGDAWgBQ1Vuf7V3L5ee3V
5cWqY+srnA3cjjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05WYm4tMWR5LVhudDFlWEZxbVBySzV3TjNJNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODEvZGNmYTJhLTc2ZjctNDQ0My1hNDk1LTZiYjMwYTg3MzBlZC8x
LzhOMUItOTRUU1dlcFp3WTh3OVdXenM0T2FvYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEv
ZGNmYTJhLTc2ZjctNDQ0My1hNDk1LTZiYjMwYTg3MzBlZC8xL05WYm4tMWR5LVhu
dDFlWEZxbVBySzV3TjNJNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC4fTTANBgkqhkiG9w0BAQsFAAOC
AQEAJJANct4KAIRL9m5uYv2ccSoAftiQTRnU9S9gprXzyQWsLB/A9DOC8OlaHF+j
O1WgmyBZKGhEuAm2m8zVQVD6tpxw1V//MngYm6mDsXo/TbsQ9mpd/8mAVhDGFnQX
mNRUEnEKbRFrglKEdGKLvOZb41ZKjajKKBTWloW6hPy6Xsuo//F72iB9c1H/NQ+5
oKvR9dF7KUa/JdtwdYQBzWw0XuSJof9Gyt1bSNOltZyQiQowTPUNRqzZchkTzSnv
is5/qx+6ZjADZLRNT/Z1uQVZbEvPL8E1+hf9q3kPvl7RrtKkdVG5uFiBMseF6807
vAbvOCvk+pwOQ5Pjv+fSGC4tQw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:05 2024 by rpki-client on console-fra.rpki-client.org