Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/a_3_MNY2kTnwIjhHDE2EReE7u2M.roa
File: a_3_MNY2kTnwIjhHDE2EReE7u2M.roa (raw, json)
Hash identifier: LjXxA9t2oMY+Ub7P87JF1dDP6Bcn4H8okmnejfHKi90=
Subject key identifier: 6B:FD:FF:30:D6:36:91:39:F0:22:38:47:0C:4D:84:45:E1:3B:BB:63
Certificate issuer: /CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Certificate serial: 018209FFB88818971351B25039A7C691A55B
Authority key identifier: 8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/a_3_MNY2kTnwIjhHDE2EReE7u2M.roa
Signing time: Sun 17 Jul 2022 02:32:09 +0000
ROA not before: Sun 17 Jul 2022 02:32:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397423
IP address blocks: 91.226.225.0/24 maxlen: 24
31.40.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:09:ff:b8:88:18:97:13:51:b2:50:39:a7:c6:91:a5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Validity
Not Before: Jul 17 02:32:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6bfdff30d6369139f02238470c4d8445e13bbb63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:24:df:ab:de:d3:51:1a:f0:6c:e2:8b:44:e9:
ce:78:f1:aa:f3:8d:fe:46:0a:6a:7f:57:c4:7b:5b:
9a:a7:8c:bc:33:e6:99:f2:ed:d5:17:d9:d6:42:09:
7b:35:c5:1c:7d:e5:3e:c3:b4:9a:c4:db:0e:b2:e2:
87:0c:e0:e8:79:71:2f:3a:6a:cc:a5:e1:43:cd:e8:
b9:a6:8a:4a:d5:df:66:29:37:5b:09:61:08:34:5f:
45:16:67:b4:64:bf:56:c1:bf:e7:1a:48:53:10:23:
85:f5:04:45:0d:86:dd:f0:6a:ce:c6:53:0d:bd:d1:
ca:b1:60:39:0a:8f:46:e7:9e:3c:ca:ea:90:cc:9b:
81:97:4a:f4:1f:1c:8e:93:0d:80:57:df:e8:b3:01:
73:8e:c4:4b:4d:c0:73:c0:02:b2:b2:58:19:d3:dc:
5b:53:91:00:fb:65:90:92:e8:9f:45:d6:55:4a:a1:
a6:7b:24:25:49:a3:5e:00:a6:8b:a6:b6:93:ec:8f:
cc:12:7a:47:14:4e:c6:d3:58:e2:36:a0:68:15:fa:
94:0a:79:8f:9c:bb:76:23:e2:07:d4:3f:23:26:72:
78:ae:01:e3:7a:03:0c:d1:75:db:ae:78:c6:67:0b:
fc:50:79:85:9b:fe:e5:81:9a:89:2f:d8:de:35:3a:
c3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FD:FF:30:D6:36:91:39:F0:22:38:47:0C:4D:84:45:E1:3B:BB:63
X509v3 Authority Key Identifier:
keyid:8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/a_3_MNY2kTnwIjhHDE2EReE7u2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.2.0/24
91.226.225.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:31:91:e4:f9:9f:29:96:a7:cb:43:9d:d3:c4:7b:d8:16:74:
c5:a0:b5:a9:f9:93:98:c4:45:70:d6:4b:fe:18:63:94:bf:f5:
1a:c3:3c:2d:bc:7b:47:e3:97:a7:e0:7a:8f:b8:35:f5:ca:c0:
cd:ae:ed:c5:b4:d3:14:5d:44:cd:3f:d2:3d:18:9f:2e:af:b7:
7b:7c:05:cb:82:b1:84:b4:bb:46:18:ef:6e:47:39:78:46:b8:
fb:6b:eb:6c:f8:26:2b:90:27:ce:61:00:cd:56:31:ee:04:e0:
c8:7f:f6:15:6c:d5:86:b6:c1:ea:59:4d:56:4b:f3:cb:51:aa:
13:83:98:1d:a3:5a:60:ac:98:36:d8:95:3c:da:70:6c:28:72:
bc:dc:2d:4e:3f:d5:7a:84:1d:93:3d:a6:54:38:89:48:bd:73:
df:49:33:ed:36:3d:d5:63:de:c8:37:f7:ef:70:43:86:18:60:
2d:27:40:f6:d1:c3:c2:9b:4f:3c:9a:01:a0:5d:e9:af:7d:f3:
fc:bb:aa:94:05:96:6a:cf:6b:7c:05:ce:20:fd:81:42:0d:53:
ef:72:d7:fa:f5:84:31:27:f7:a4:78:2c:a7:c9:16:eb:05:57:
b6:59:97:54:67:58:1f:b5:36:bd:1e:45:9e:08:7d:b0:35:bc:
06:5d:9a:53
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYIJ/7iIGJcTUbJQOafGkaVbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmZTAyYjdlZWRmZmMzOGFiNWVhYjQ0MTYxNzJlN2Q4OGU5
YWQxZTIwHhcNMjIwNzE3MDIzMjA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YmZkZmYzMGQ2MzY5MTM5ZjAyMjM4NDcwYzRkODQ0NWUxM2JiYjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSTfq97TURrwbOKLROnOePGq843+
Rgpqf1fEe1uap4y8M+aZ8u3VF9nWQgl7NcUcfeU+w7SaxNsOsuKHDODoeXEvOmrM
peFDzei5popK1d9mKTdbCWEINF9FFme0ZL9Wwb/nGkhTECOF9QRFDYbd8GrOxlMN
vdHKsWA5Co9G5548yuqQzJuBl0r0HxyOkw2AV9/oswFzjsRLTcBzwAKyslgZ09xb
U5EA+2WQkuifRdZVSqGmeyQlSaNeAKaLpraT7I/MEnpHFE7G01jiNqBoFfqUCnmP
nLt2I+IH1D8jJnJ4rgHjegMM0XXbrnjGZwv8UHmFm/7lgZqJL9jeNTrDMwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGv9/zDWNpE58CI4RwxNhEXhO7tjMB8GA1UdIwQY
MBaAFI/gK37t/8OKteq0QWFy59iOmtHiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvai1BcmZ1M193NHExNnJSQllYTG4ySTZhMGVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kMmMyMzUtYTFmNS00OTg0LWFhZGYt
NTE0NmYxM2I3MWExLzEvYV8zX01OWTJrVG53SWpoSERFMkVSZUU3dTJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9kMmMyMzUtYTFmNS00OTg0LWFhZGYtNTE0NmYxM2I3MWEx
LzEvai1BcmZ1M193NHExNnJSQllYTG4ySTZhMGVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHygCAwQA
W+LhMA0GCSqGSIb3DQEBCwUAA4IBAQBLMZHk+Z8plqfLQ53TxHvYFnTFoLWp+ZOY
xEVw1kv+GGOUv/UawzwtvHtH45en4HqPuDX1ysDNru3FtNMUXUTNP9I9GJ8ur7d7
fAXLgrGEtLtGGO9uRzl4Rrj7a+ts+CYrkCfOYQDNVjHuBODIf/YVbNWGtsHqWU1W
S/PLUaoTg5gdo1pgrJg22JU82nBsKHK83C1OP9V6hB2TPaZUOIlIvXPfSTPtNj3V
Y97IN/fvcEOGGGAtJ0D20cPCm088mgGgXemvffP8u6qUBZZqz2t8Bc4g/YFCDVPv
ctf69YQxJ/ekeCynyRbrBVe2WZdUZ1gftTa9HkWeCH2wNbwGXZpT
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:25 2024 by rpki-client on console-ams.rpki-client.org