Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/zAHSopNHoQyl-Zdg3TTsT6tL0xo.roa
File: zAHSopNHoQyl-Zdg3TTsT6tL0xo.roa (raw, json)
Hash identifier: VUdc8Q6n8hJFLc3GI1MaXbfDEbhTSjbHMUbr1So+MeA=
Subject key identifier: CC:01:D2:A2:93:47:A1:0C:A5:F9:97:60:DD:34:EC:4F:AB:4B:D3:1A
Certificate issuer: /CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Certificate serial: 01850A530E40D7858A6B8EA6898FE6D52C05
Authority key identifier: 8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/zAHSopNHoQyl-Zdg3TTsT6tL0xo.roa
Signing time: Tue 13 Dec 2022 07:11:33 +0000
ROA not before: Tue 13 Dec 2022 07:11:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56703
IP address blocks: 194.26.117.0/24 maxlen: 24
31.40.4.0/23 maxlen: 23
31.40.0.0/23 maxlen: 23
31.40.6.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0a:53:0e:40:d7:85:8a:6b:8e:a6:89:8f:e6:d5:2c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Validity
Not Before: Dec 13 07:11:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc01d2a29347a10ca5f99760dd34ec4fab4bd31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9a:f0:ef:40:e6:46:25:db:51:9d:b5:32:7b:
5b:35:c2:ec:33:87:db:1e:1f:01:b9:fb:54:42:af:
e8:2c:03:f4:03:2a:b4:3f:1f:c2:cd:01:ba:fa:76:
b7:54:06:ac:64:b9:7d:23:61:ee:d9:37:01:41:49:
a6:8c:9a:28:52:ad:f5:27:a4:fe:37:1b:e6:06:2a:
7b:83:a4:cd:2c:b2:ec:2f:5c:c1:26:6e:b3:e0:0f:
22:3d:f2:05:42:31:35:c8:9f:65:49:cd:8f:a8:0f:
1d:e5:1d:7e:18:1b:44:d8:dd:61:e5:ed:0e:e0:3f:
0f:37:a6:db:7f:28:f3:ec:95:00:2c:ce:19:33:da:
51:c3:84:b3:5f:a1:c6:56:e6:c5:0f:f4:bb:21:0c:
43:29:b2:74:43:ff:ce:2c:61:03:c4:52:05:78:ee:
23:cc:c0:b5:a2:41:95:f7:77:31:67:a5:73:c1:b8:
86:b5:2c:8a:f6:37:e4:c3:6a:d2:2b:81:42:6c:55:
8f:b9:f1:f3:34:20:cf:f5:46:38:d2:98:fb:aa:9d:
93:c4:f7:5d:d6:e0:2e:6f:81:e1:25:28:96:ac:dc:
ce:18:75:61:17:ba:e6:1a:eb:bc:f2:e3:98:19:7b:
0b:53:a1:46:8a:af:80:d5:9d:a0:53:33:6d:d5:98:
dc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:01:D2:A2:93:47:A1:0C:A5:F9:97:60:DD:34:EC:4F:AB:4B:D3:1A
X509v3 Authority Key Identifier:
keyid:8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/zAHSopNHoQyl-Zdg3TTsT6tL0xo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.0.0/23
31.40.4.0/22
194.26.117.0/24
Signature Algorithm: sha256WithRSAEncryption
44:ed:1e:58:8b:d6:28:03:c9:b7:a8:af:83:16:92:ac:8e:ef:
9d:c0:3e:35:ea:fe:2c:50:5c:25:af:ff:d3:db:a5:63:3d:c5:
b4:35:1e:80:4e:8a:6b:10:3d:14:07:c5:fa:48:fa:1b:c5:f5:
08:3f:f6:b0:6b:fa:ac:d4:d5:03:bb:92:f6:56:f0:77:37:87:
ba:8d:28:bb:9a:56:fe:0d:72:8b:ca:ce:8d:24:21:7e:0e:9a:
27:8d:2f:03:9c:f4:a7:8a:5c:d3:c3:ef:29:2c:17:58:26:7f:
65:fb:10:b0:dc:46:9d:3a:ba:31:e4:b3:92:0c:d7:51:a9:ae:
43:9b:0f:d2:5c:ab:0e:42:f0:59:f7:8e:59:6d:60:4d:02:19:
17:d4:ad:9c:85:9f:66:47:c3:07:e9:d9:59:59:f1:48:13:ad:
f5:1c:f5:1f:25:d6:2a:52:92:60:a7:6e:fe:a3:40:99:d5:d3:
ee:7b:04:9b:ae:c9:f4:b3:2c:ed:41:ab:e2:45:31:86:42:e4:
ca:68:5f:0d:4e:08:77:4b:a5:2b:91:0f:35:b6:23:89:a0:4b:
f6:b9:9a:28:17:f7:72:22:2b:ae:e2:28:41:32:12:1c:b8:68:
ac:95:d2:13:b3:e9:e9:34:67:2f:d5:86:ad:44:21:75:06:30:
c2:89:be:46
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYUKUw5A14WKa46miY/m1SwFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmZTAyYjdlZWRmZmMzOGFiNWVhYjQ0MTYxNzJlN2Q4OGU5
YWQxZTIwHhcNMjIxMjEzMDcxMTMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzAxZDJhMjkzNDdhMTBjYTVmOTk3NjBkZDM0ZWM0ZmFiNGJkMzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJrw70DmRiXbUZ21MntbNcLsM4fb
Hh8BuftUQq/oLAP0Ayq0Px/CzQG6+na3VAasZLl9I2Hu2TcBQUmmjJooUq31J6T+
NxvmBip7g6TNLLLsL1zBJm6z4A8iPfIFQjE1yJ9lSc2PqA8d5R1+GBtE2N1h5e0O
4D8PN6bbfyjz7JUALM4ZM9pRw4SzX6HGVubFD/S7IQxDKbJ0Q//OLGEDxFIFeO4j
zMC1okGV93cxZ6VzwbiGtSyK9jfkw2rSK4FCbFWPufHzNCDP9UY40pj7qp2TxPdd
1uAub4HhJSiWrNzOGHVhF7rmGuu88uOYGXsLU6FGiq+A1Z2gUzNt1ZjcaQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMwB0qKTR6EMpfmXYN007E+rS9MaMB8GA1UdIwQY
MBaAFI/gK37t/8OKteq0QWFy59iOmtHiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvai1BcmZ1M193NHExNnJSQllYTG4ySTZhMGVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kMmMyMzUtYTFmNS00OTg0LWFhZGYt
NTE0NmYxM2I3MWExLzEvekFIU29wTkhvUXlsLVpkZzNUVHNUNnRMMHhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9kMmMyMzUtYTFmNS00OTg0LWFhZGYtNTE0NmYxM2I3MWEx
LzEvai1BcmZ1M193NHExNnJSQllYTG4ySTZhMGVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBHygAAwQC
HygEAwQAwhp1MA0GCSqGSIb3DQEBCwUAA4IBAQBE7R5Yi9YoA8m3qK+DFpKsju+d
wD416v4sUFwlr//T26VjPcW0NR6AToprED0UB8X6SPobxfUIP/awa/qs1NUDu5L2
VvB3N4e6jSi7mlb+DXKLys6NJCF+DponjS8DnPSnilzTw+8pLBdYJn9l+xCw3Ead
Orox5LOSDNdRqa5Dmw/SXKsOQvBZ945ZbWBNAhkX1K2chZ9mR8MH6dlZWfFIE631
HPUfJdYqUpJgp27+o0CZ1dPuewSbrsn0syztQaviRTGGQuTKaF8NTgh3S6UrkQ81
tiOJoEv2uZooF/dyIiuu4ihBMhIcuGisldITs+npNGcv1YatRCF1BjDCib5G
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:58 2024 by rpki-client on console-fra.rpki-client.org