Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/JlB6rmZyZKeYbhQJGESFOXLEltM.roa
File: JlB6rmZyZKeYbhQJGESFOXLEltM.roa (raw, json)
Hash identifier: 6cLPATJc1B/wQFdnnHIv+IDRhrvrZVRAuYpZ5GFk2AM=
Subject key identifier: 26:50:7A:AE:66:72:64:A7:98:6E:14:09:18:44:85:39:72:C4:96:D3
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 0184664A19EC04CA233C838FC42FADA1FF05
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/JlB6rmZyZKeYbhQJGESFOXLEltM.roa
Signing time: Fri 11 Nov 2022 10:44:02 +0000
ROA not before: Fri 11 Nov 2022 10:44:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 31.14.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:66:4a:19:ec:04:ca:23:3c:83:8f:c4:2f:ad:a1:ff:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Nov 11 10:44:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26507aae667264a7986e14091844853972c496d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2f:69:f8:2c:04:1f:02:2c:17:3b:7a:48:e1:
84:4d:19:a4:90:1a:78:3f:18:e1:b0:90:32:cc:35:
2c:9b:20:9f:02:34:68:90:2d:f2:2f:cd:40:af:2b:
eb:7c:bd:e9:d5:d9:5c:33:32:eb:21:1c:00:e2:46:
99:21:db:ef:88:dd:7e:96:71:5d:86:2c:dc:91:3c:
3f:fb:61:e3:ca:9b:7f:7c:5e:1d:5e:f3:29:75:e9:
0f:db:f5:7c:0f:6f:5a:84:bf:d4:57:18:10:30:85:
a2:9d:3d:2c:27:0d:12:89:e1:60:19:f3:d5:b0:61:
da:e8:3c:ea:55:3e:a8:88:b8:6d:fa:fa:d9:d2:e7:
e6:59:11:3f:a4:e0:0f:0c:bc:82:bf:82:10:2e:2f:
ad:8f:44:16:d5:01:61:be:5d:71:01:93:2b:32:d4:
2e:1f:36:ea:91:a1:70:5d:28:9a:95:ef:9d:77:88:
bb:40:1c:e4:3d:45:22:05:12:d3:ad:c9:ae:0b:b4:
0e:27:78:31:fa:e1:04:91:19:69:ac:e2:13:72:62:
dd:76:87:0f:39:48:63:aa:32:da:54:c2:b0:9c:00:
7d:a0:f7:f8:79:cb:e8:a7:53:6f:ee:6f:10:e9:22:
83:d7:35:1d:5c:15:f8:b6:40:8e:ce:fe:bb:eb:b7:
76:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:50:7A:AE:66:72:64:A7:98:6E:14:09:18:44:85:39:72:C4:96:D3
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/JlB6rmZyZKeYbhQJGESFOXLEltM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.37.0/24
Signature Algorithm: sha256WithRSAEncryption
28:83:f0:43:57:f4:37:5a:3a:9e:3a:26:6e:e7:e8:43:9c:93:
b0:25:6b:0d:a2:a7:ee:f0:a4:58:80:fe:49:95:6b:67:bf:42:
22:c3:8e:78:d3:9b:ef:21:52:a3:53:aa:d4:19:87:88:f8:d9:
c7:5d:62:0f:9e:a3:b6:a8:b1:18:fa:e7:b5:2d:89:39:85:ad:
c1:96:75:27:50:9b:3b:5d:90:b3:ae:9c:e6:7f:1e:35:0d:b0:
e4:fb:45:a6:12:27:39:8f:38:3d:25:99:06:7e:29:98:24:21:
0e:22:02:b7:a1:a8:ba:46:44:05:d1:49:23:f0:7e:33:44:42:
5d:71:02:4c:26:61:78:a6:01:d3:2a:c2:a4:e8:c5:e1:1c:37:
9f:13:11:ec:24:63:67:ee:8c:7e:74:c6:3f:e0:bd:23:13:8c:
a1:08:91:be:64:51:d0:44:7c:66:b6:9e:04:8b:ec:76:02:a9:
91:f7:2c:18:af:06:5f:b4:2f:75:75:8f:8b:04:17:4b:69:08:
06:d4:55:20:f2:8f:65:57:87:cb:fa:3b:1a:e2:fd:52:b8:f3:
ca:f2:4b:79:df:84:3c:fc:59:cf:88:14:53:55:57:ec:a8:06:
54:a6:61:5c:13:cb:75:ca:60:70:0a:4a:48:db:be:f3:15:ec:
91:d1:1c:51
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYRmShnsBMojPIOPxC+tof8FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MThiNzM0MzQ5YmYzMjdkOTQ1M2I5NjUwMWU0NGIxOTJl
NTUxNDIwHhcNMjIxMTExMTA0NDAyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjUwN2FhZTY2NzI2NGE3OTg2ZTE0MDkxODQ0ODUzOTcyYzQ5NmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlC9p+CwEHwIsFzt6SOGETRmkkBp4
PxjhsJAyzDUsmyCfAjRokC3yL81AryvrfL3p1dlcMzLrIRwA4kaZIdvviN1+lnFd
hizckTw/+2Hjypt/fF4dXvMpdekP2/V8D29ahL/UVxgQMIWinT0sJw0SieFgGfPV
sGHa6DzqVT6oiLht+vrZ0ufmWRE/pOAPDLyCv4IQLi+tj0QW1QFhvl1xAZMrMtQu
HzbqkaFwXSiale+dd4i7QBzkPUUiBRLTrcmuC7QOJ3gx+uEEkRlprOITcmLddocP
OUhjqjLaVMKwnAB9oPf4ecvop1Nv7m8Q6SKD1zUdXBX4tkCOzv6767d2/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCZQeq5mcmSnmG4UCRhEhTlyxJbTMB8GA1UdIwQY
MBaAFDcYtzQ0m/Mn2UU7llAeRLGS5VFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjct
YzgyM2NjOGYzODM3LzEvSmxCNnJtWnlaS2VZYmhRSkdFU0ZPWExFbHRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjctYzgyM2NjOGYzODM3
LzEvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHw4lMA0G
CSqGSIb3DQEBCwUAA4IBAQAog/BDV/Q3WjqeOiZu5+hDnJOwJWsNoqfu8KRYgP5J
lWtnv0Iiw45405vvIVKjU6rUGYeI+NnHXWIPnqO2qLEY+ue1LYk5ha3BlnUnUJs7
XZCzrpzmfx41DbDk+0WmEic5jzg9JZkGfimYJCEOIgK3oai6RkQF0Ukj8H4zREJd
cQJMJmF4pgHTKsKk6MXhHDefExHsJGNn7ox+dMY/4L0jE4yhCJG+ZFHQRHxmtp4E
i+x2AqmR9ywYrwZftC91dY+LBBdLaQgG1FUg8o9lV4fL+jsa4v1SuPPK8kt534Q8
/FnPiBRTVVfsqAZUpmFcE8t1ymBwCkpI277zFeyR0RxR
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:47 2023 by rpki-client on console-fra.rpki-client.org