Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/1vCNUjtddcV_BispIQNYHNQyh3w.roa
File: 1vCNUjtddcV_BispIQNYHNQyh3w.roa (raw, json)
Hash identifier: vRsR1PQUsHsQJgFA14OIjOZUQhkGhawQnvVbgHj6O68=
Subject key identifier: D6:F0:8D:52:3B:5D:75:C5:7F:06:2B:29:21:03:58:1C:D4:32:87:7C
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 018252C605D8106D6E3FDA72701A4ECF869E
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/1vCNUjtddcV_BispIQNYHNQyh3w.roa
Signing time: Sun 31 Jul 2022 05:41:25 +0000
ROA not before: Sun 31 Jul 2022 05:41:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.155.54.0/24 maxlen: 24
31.14.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:52:c6:05:d8:10:6d:6e:3f:da:72:70:1a:4e:cf:86:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Jul 31 05:41:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6f08d523b5d75c57f062b292103581cd432877c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b0:2c:07:ab:55:91:de:95:09:48:ab:78:8a:
45:55:90:bb:ef:cb:a7:75:92:1a:45:47:54:97:14:
ec:ac:79:02:90:db:3d:c4:54:61:db:8e:ea:e3:ca:
7c:52:34:9d:e5:a5:1a:42:52:4d:87:26:6a:83:34:
26:97:ae:68:09:c8:f9:d3:0f:8c:37:dc:ae:8b:a2:
b2:78:eb:3b:47:3f:44:d8:3d:49:4d:1e:45:fb:08:
c7:2e:63:4e:73:6c:5e:b5:9f:6f:fa:d7:f8:85:42:
3b:45:05:5d:f1:12:57:66:5f:4b:38:db:c0:dc:6e:
3d:33:51:7b:31:94:85:08:39:f9:62:07:b9:a8:cf:
03:fc:e3:8c:e1:08:6d:c5:06:59:d4:bc:03:9c:7a:
4d:76:55:2b:ea:7b:c8:68:ff:07:1c:9a:56:73:35:
82:ca:cf:f4:84:25:ff:0d:59:79:45:47:0f:bd:0d:
4f:14:b7:c7:41:09:94:d1:e1:40:71:80:45:9c:4f:
17:5f:f2:91:0f:fc:cd:4d:f3:bf:e6:3b:2c:78:81:
0a:4f:b6:fa:3e:a9:5e:1f:53:7b:ae:f8:33:a4:48:
52:a4:a1:42:6e:5f:d5:60:98:9f:f2:89:30:66:bb:
df:f0:d6:0a:41:8e:50:03:50:b9:f0:ac:ed:5b:06:
a8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F0:8D:52:3B:5D:75:C5:7F:06:2B:29:21:03:58:1C:D4:32:87:7C
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/1vCNUjtddcV_BispIQNYHNQyh3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.39.0/24
185.155.54.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:28:b8:92:52:07:69:a2:d2:1b:ba:4b:44:1b:7c:19:e0:86:
2f:4d:89:14:2a:5c:95:8e:34:ca:54:63:d5:4d:b5:df:81:31:
ad:07:e5:21:a8:b3:c3:b7:dc:84:35:20:9c:18:02:87:d4:15:
ce:69:42:3f:ae:1b:23:0b:fd:02:ed:ec:f2:9b:22:2e:f1:c3:
b0:a1:cc:5c:43:08:b4:f6:1a:0e:05:a9:8d:8a:6a:09:7b:a4:
57:e7:59:bc:58:a1:ce:16:6d:16:63:a0:c1:d0:58:9a:a5:7e:
bc:9f:54:10:7a:73:34:a0:66:07:56:01:ba:b3:63:8a:e1:b9:
53:4d:a1:9d:a9:8f:6f:9c:2c:93:aa:97:5e:41:c8:5c:1e:f1:
20:37:87:a5:ac:7c:c7:35:f3:63:7b:d3:2b:33:1a:b7:06:96:
90:87:2e:fb:c5:b2:8e:36:83:ab:e2:fa:56:48:c8:30:1c:8e:
7b:f3:80:87:23:64:bc:6e:b6:d8:94:4a:c6:37:90:8b:f7:f8:
f9:97:51:73:e5:99:df:10:13:48:e4:00:48:e0:a0:8e:90:0d:
24:ed:f5:43:2b:38:f6:f3:bd:de:8a:ff:23:4c:a9:aa:01:d1:
18:c8:5c:57:36:5e:a7:04:8d:b2:9c:ec:31:4c:8b:40:7d:4e:
08:be:89:89
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYJSxgXYEG1uP9pycBpOz4aeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MThiNzM0MzQ5YmYzMjdkOTQ1M2I5NjUwMWU0NGIxOTJl
NTUxNDIwHhcNMjIwNzMxMDU0MTI1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNmYwOGQ1MjNiNWQ3NWM1N2YwNjJiMjkyMTAzNTgxY2Q0MzI4NzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbAsB6tVkd6VCUireIpFVZC778un
dZIaRUdUlxTsrHkCkNs9xFRh247q48p8UjSd5aUaQlJNhyZqgzQml65oCcj50w+M
N9yui6KyeOs7Rz9E2D1JTR5F+wjHLmNOc2xetZ9v+tf4hUI7RQVd8RJXZl9LONvA
3G49M1F7MZSFCDn5Yge5qM8D/OOM4QhtxQZZ1LwDnHpNdlUr6nvIaP8HHJpWczWC
ys/0hCX/DVl5RUcPvQ1PFLfHQQmU0eFAcYBFnE8XX/KRD/zNTfO/5jsseIEKT7b6
PqleH1N7rvgzpEhSpKFCbl/VYJif8okwZrvf8NYKQY5QA1C58KztWwaoCwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNbwjVI7XXXFfwYrKSEDWBzUMod8MB8GA1UdIwQY
MBaAFDcYtzQ0m/Mn2UU7llAeRLGS5VFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjct
YzgyM2NjOGYzODM3LzEvMXZDTlVqdGRkY1ZfQmlzcElRTllITlF5aDN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjctYzgyM2NjOGYzODM3
LzEvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHw4nAwQA
uZs2MA0GCSqGSIb3DQEBCwUAA4IBAQAbKLiSUgdpotIbuktEG3wZ4IYvTYkUKlyV
jjTKVGPVTbXfgTGtB+UhqLPDt9yENSCcGAKH1BXOaUI/rhsjC/0C7ezymyIu8cOw
ocxcQwi09hoOBamNimoJe6RX51m8WKHOFm0WY6DB0FiapX68n1QQenM0oGYHVgG6
s2OK4blTTaGdqY9vnCyTqpdeQchcHvEgN4elrHzHNfNje9MrMxq3BpaQhy77xbKO
NoOr4vpWSMgwHI5784CHI2S8brbYlErGN5CL9/j5l1Fz5ZnfEBNI5ABI4KCOkA0k
7fVDKzj2873eiv8jTKmqAdEYyFxXNl6nBI2ynOwxTItAfU4IvomJ
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:47 2023 by rpki-client on console-fra.rpki-client.org