Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/xZJfLLsCw7trIUVfH7AyxX1OdGg.roa
File: xZJfLLsCw7trIUVfH7AyxX1OdGg.roa (raw, json)
Hash identifier: gu8q76cPcg8FJdBwXnB2RHugfUNXjn5UbFytE+qpz+0=
Subject key identifier: C5:92:5F:2C:BB:02:C3:BB:6B:21:45:5F:1F:B0:32:C5:7D:4E:74:68
Certificate issuer: /CN=e87ce7df23140c0005125a61aad721531e681f0e
Certificate serial: 041189C8
Authority key identifier: E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/xZJfLLsCw7trIUVfH7AyxX1OdGg.roa
Signing time: Sat 01 Jan 2022 04:01:08 +0000
ROA not before: Sat 01 Jan 2022 04:01:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210057
IP address blocks: 31.14.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68258248 (0x41189c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e87ce7df23140c0005125a61aad721531e681f0e
Validity
Not Before: Jan 1 04:01:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5925f2cbb02c3bb6b21455f1fb032c57d4e7468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:17:d0:3c:1f:63:d3:0d:87:cf:cc:3d:bf:a5:
01:27:7a:57:8a:3a:25:18:94:18:7a:57:b1:d5:51:
c7:2a:21:c3:2a:e3:12:7d:6e:fc:d8:dc:58:c3:af:
14:63:58:55:55:12:0c:bb:41:64:6e:c5:79:f7:f5:
21:8d:67:5a:e8:bc:6f:63:eb:1d:e3:4d:47:48:a0:
f7:2f:bb:6a:9f:50:19:db:2b:9b:b0:a3:b7:99:9e:
d6:22:31:37:3a:aa:b0:32:f4:58:72:f9:c9:6e:ee:
5a:3c:8d:10:04:49:31:0f:73:34:00:86:36:10:40:
17:4a:48:a1:38:ee:c1:9f:3f:dd:d1:07:d0:1b:2c:
dc:88:30:46:fb:97:03:61:d5:bc:99:1b:5e:7b:e3:
94:fa:60:3f:77:bb:01:00:0c:d2:ec:94:b1:0d:1d:
80:82:ed:b9:80:87:dd:db:94:83:49:a7:56:51:4c:
9e:46:d7:15:00:d2:a4:77:48:4f:85:88:ba:35:ae:
63:2a:3c:df:c2:29:4f:c4:5e:6d:de:39:a8:d0:79:
e4:a5:8d:37:3e:34:e5:b7:89:d9:f9:67:83:0c:f5:
7b:97:0a:29:70:59:72:d9:0e:4d:14:f8:5c:ee:c9:
48:69:75:d3:c6:3e:8f:cf:00:9b:e5:a5:f3:b6:00:
d6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:92:5F:2C:BB:02:C3:BB:6B:21:45:5F:1F:B0:32:C5:7D:4E:74:68
X509v3 Authority Key Identifier:
keyid:E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/xZJfLLsCw7trIUVfH7AyxX1OdGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.71.0/24
Signature Algorithm: sha256WithRSAEncryption
50:c2:0c:cf:57:c4:c0:3a:90:58:41:f5:ea:b5:89:d1:fe:02:
01:ba:ee:fd:b9:eb:cc:cf:5f:38:b1:39:31:06:cf:fb:e4:0b:
96:e3:a2:0b:31:86:d6:c2:de:27:91:82:16:4d:39:0d:61:75:
6d:a3:d4:49:60:82:54:54:a8:ae:9a:de:ba:8f:f1:de:6d:b0:
dc:36:d9:19:3f:be:83:f4:fd:8f:3a:73:3d:c8:4d:6e:fa:e0:
c0:c0:94:15:6c:1a:cd:4a:fb:a8:f4:03:cf:ad:c3:cc:5d:cb:
dc:54:e7:9f:43:b5:1d:a0:0f:80:9a:eb:07:bc:e2:9a:70:1b:
99:d5:05:bd:5b:d4:76:fa:97:d8:9d:b4:2c:6d:1d:d9:85:f1:
11:97:24:41:80:ec:04:dc:0e:c1:41:71:c1:d6:b4:7d:15:d2:
cb:a6:54:f3:f1:e4:39:b6:4e:93:71:de:4e:96:6f:67:1b:20:
bc:05:89:ea:9e:48:4e:33:1b:21:ab:bf:96:b8:c9:31:61:28:
13:9e:d3:aa:2e:c3:9c:26:a4:e0:5d:d9:17:63:2d:bb:35:99:
69:b2:6b:5f:9a:70:63:ad:64:f7:2e:56:54:c5:00:7c:22:7c:
0a:b9:55:fb:50:1a:65:a1:d7:2a:3d:d3:cc:4e:91:7a:aa:f2:
d5:ab:e2:f8
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBBGJyDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
ODdjZTdkZjIzMTQwYzAwMDUxMjVhNjFhYWQ3MjE1MzFlNjgxZjBlMB4XDTIyMDEw
MTA0MDEwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzU5MjVmMmNiYjAy
YzNiYjZiMjE0NTVmMWZiMDMyYzU3ZDRlNzQ2ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALUX0DwfY9MNh8/MPb+lASd6V4o6JRiUGHpXsdVRxyohwyrj
En1u/NjcWMOvFGNYVVUSDLtBZG7Feff1IY1nWui8b2PrHeNNR0ig9y+7ap9QGdsr
m7Cjt5me1iIxNzqqsDL0WHL5yW7uWjyNEARJMQ9zNACGNhBAF0pIoTjuwZ8/3dEH
0Bss3IgwRvuXA2HVvJkbXnvjlPpgP3e7AQAM0uyUsQ0dgILtuYCH3duUg0mnVlFM
nkbXFQDSpHdIT4WIujWuYyo838IpT8Rebd45qNB55KWNNz405beJ2flngwz1e5cK
KXBZctkOTRT4XO7JSGl108Y+j88Am+Wl87YA1s8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTFkl8suwLDu2shRV8fsDLFfU50aDAfBgNVHSMEGDAWgBTofOffIxQMAAUS
WmGq1yFTHmgfDjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzZIem4zeU1VREFBRkVscGhxdGNoVXg1b0h3NC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTQvNzc2NzQ3LTYyNGEtNDk0ZS05NGIyLTMyM2QzNGRlZmM4YS8x
L3haSmZMTHNDdzd0cklVVmZIN0F5eFgxT2RHZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQv
Nzc2NzQ3LTYyNGEtNDk0ZS05NGIyLTMyM2QzNGRlZmM4YS8xLzZIem4zeU1VREFB
RkVscGhxdGNoVXg1b0h3NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAB8ORzANBgkqhkiG9w0BAQsFAAOC
AQEAUMIMz1fEwDqQWEH16rWJ0f4CAbru/bnrzM9fOLE5MQbP++QLluOiCzGG1sLe
J5GCFk05DWF1baPUSWCCVFSorpreuo/x3m2w3DbZGT++g/T9jzpzPchNbvrgwMCU
FWwazUr7qPQDz63DzF3L3FTnn0O1HaAPgJrrB7zimnAbmdUFvVvUdvqX2J20LG0d
2YXxEZckQYDsBNwOwUFxwda0fRXSy6ZU8/HkObZOk3HeTpZvZxsgvAWJ6p5ITjMb
Iau/lrjJMWEoE57Tqi7DnCak4F3ZF2MtuzWZabJrX5pwY61k9y5WVMUAfCJ8CrlV
+1AaZaHXKj3TzE6Reqry1avi+A==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:24 2023 by rpki-client on console-ams.rpki-client.org