Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/41KphVG3G6YHqlUnPIhpPQtJb4A.roa
File: 41KphVG3G6YHqlUnPIhpPQtJb4A.roa (raw, json)
Hash identifier: xuteBo+7cOUNutnKVJH3442CLxH2idGgnt7Yu18sS7I=
Subject key identifier: E3:52:A9:85:51:B7:1B:A6:07:AA:55:27:3C:88:69:3D:0B:49:6F:80
Certificate issuer: /CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Certificate serial: 0182F82EF4BB96DD8F3C8B6568B144C40C88
Authority key identifier: D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/41KphVG3G6YHqlUnPIhpPQtJb4A.roa
Signing time: Thu 01 Sep 2022 08:33:22 +0000
ROA not before: Thu 01 Sep 2022 08:33:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50616
IP address blocks: 185.156.12.0/22 maxlen: 23
31.22.48.0/22 maxlen: 23
31.22.56.0/22 maxlen: 23
31.22.52.0/22 maxlen: 23
31.22.60.0/22 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f8:2e:f4:bb:96:dd:8f:3c:8b:65:68:b1:44:c4:0c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Validity
Not Before: Sep 1 08:33:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e352a98551b71ba607aa55273c88693d0b496f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:01:18:72:21:3a:02:93:b1:af:42:99:1f:f8:
6a:7a:7d:cb:ab:8e:7a:83:41:db:19:17:7a:38:3a:
47:7c:3e:c5:77:f5:63:d5:98:b4:79:93:5a:3d:a2:
be:b5:4a:96:90:f5:eb:1a:ba:30:23:1f:cf:bd:bf:
af:8e:7f:59:07:03:60:bc:d0:1e:dc:64:4b:53:f9:
63:71:34:60:b2:f5:b9:8b:91:e3:83:d1:1b:a8:b4:
61:15:fc:29:8c:1a:77:07:7b:c6:2d:d4:7d:b4:26:
1c:58:24:0a:0f:b3:93:a9:1e:df:20:92:b1:0b:ab:
c7:a8:1e:c4:e6:0a:43:dd:da:0b:a6:65:30:ad:7f:
af:c1:ad:ab:fd:5e:8b:eb:98:cd:dc:b1:02:06:44:
a6:ea:06:44:0f:fa:cf:1b:7c:97:be:c9:83:15:a6:
45:0a:3d:4f:d5:76:e0:46:14:b9:8e:49:0d:62:25:
d0:8d:66:14:18:00:e6:eb:7b:60:e9:9f:0f:55:bc:
ab:3b:97:b2:17:b9:0b:1b:da:07:b6:c1:f9:5a:bf:
3c:5a:3f:9d:59:6b:e7:3b:e4:39:6e:e9:e9:1a:7c:
22:d6:00:0b:95:b2:95:09:b5:af:5a:ef:e5:a2:e3:
5a:93:36:19:9c:62:61:3c:59:47:97:e9:08:75:ec:
c3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:52:A9:85:51:B7:1B:A6:07:AA:55:27:3C:88:69:3D:0B:49:6F:80
X509v3 Authority Key Identifier:
keyid:D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/41KphVG3G6YHqlUnPIhpPQtJb4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.48.0/20
185.156.12.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:21:b5:4b:8f:08:f6:e0:af:e8:b5:38:b4:5b:55:21:9b:a9:
8e:ef:1f:ad:25:9c:ae:52:3a:54:10:75:d6:4b:fe:32:71:8d:
fb:ba:9c:12:71:c9:49:8f:fd:7f:6a:7b:3d:42:0f:81:72:61:
8a:86:ee:a7:f5:f2:f1:16:e1:88:4a:89:1f:24:7a:1a:9e:bd:
d4:49:3f:c5:d1:49:dd:b6:7b:c6:26:75:3f:a9:61:c5:37:39:
9f:3b:f2:3e:d9:78:56:87:8c:6c:54:93:c1:06:ba:62:7e:32:
87:e9:85:b1:88:d7:78:68:c3:53:c9:74:04:5d:1b:e7:3a:5f:
2e:8a:25:97:78:f1:4a:06:3c:69:63:ab:20:dc:fc:29:43:ae:
54:49:92:c3:a4:4d:27:a4:3f:31:44:41:65:a5:6e:2b:d4:3c:
7b:dd:fa:69:b9:aa:ab:ed:6b:f7:ca:7d:ce:fb:41:7d:43:36:
f2:71:f7:7b:dd:39:b1:fb:57:c2:f5:8a:38:e4:3b:89:63:08:
45:ba:61:d0:ed:2a:3c:4a:6e:c5:90:f4:10:61:80:ec:0a:fb:
08:55:46:b1:8d:6e:bb:82:15:b8:68:7e:8f:f6:30:bf:7e:72:
71:b7:59:2b:10:aa:2a:e8:83:6c:0a:1f:2b:e2:ee:3b:f6:ca:
c1:b6:b9:07
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYL4LvS7lt2PPItlaLFExAyIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OTRlODFkNzJmNTljNjVhMGQxODE0NGExYjI2MDc5ODM1
MzZiNGEwHhcNMjIwOTAxMDgzMzIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzUyYTk4NTUxYjcxYmE2MDdhYTU1MjczYzg4NjkzZDBiNDk2ZjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwEYciE6ApOxr0KZH/hqen3Lq456
g0HbGRd6ODpHfD7Fd/Vj1Zi0eZNaPaK+tUqWkPXrGrowIx/Pvb+vjn9ZBwNgvNAe
3GRLU/ljcTRgsvW5i5Hjg9EbqLRhFfwpjBp3B3vGLdR9tCYcWCQKD7OTqR7fIJKx
C6vHqB7E5gpD3doLpmUwrX+vwa2r/V6L65jN3LECBkSm6gZED/rPG3yXvsmDFaZF
Cj1P1XbgRhS5jkkNYiXQjWYUGADm63tg6Z8PVbyrO5eyF7kLG9oHtsH5Wr88Wj+d
WWvnO+Q5bunpGnwi1gALlbKVCbWvWu/louNakzYZnGJhPFlHl+kIdezDWwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFONSqYVRtxumB6pVJzyIaT0LSW+AMB8GA1UdIwQY
MBaAFNeU6B1y9ZxloNGBRKGyYHmDU2tKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTVUb0hYTDFuR1dnMFlGRW9iSmdlWU5UYTBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mNmExMjQtN2YwMS00ZTQwLWI3OTYt
Y2NhNTJiNjI2ZmNhLzEvNDFLcGhWRzNHNllIcWxVblBJaHBQUXRKYjRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mNmExMjQtN2YwMS00ZTQwLWI3OTYtY2NhNTJiNjI2ZmNh
LzEvMTVUb0hYTDFuR1dnMFlGRW9iSmdlWU5UYTBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEHxYwAwQC
uZwMMA0GCSqGSIb3DQEBCwUAA4IBAQCgIbVLjwj24K/otTi0W1Uhm6mO7x+tJZyu
UjpUEHXWS/4ycY37upwScclJj/1/ans9Qg+BcmGKhu6n9fLxFuGISokfJHoanr3U
ST/F0UndtnvGJnU/qWHFNzmfO/I+2XhWh4xsVJPBBrpifjKH6YWxiNd4aMNTyXQE
XRvnOl8uiiWXePFKBjxpY6sg3PwpQ65USZLDpE0npD8xREFlpW4r1Dx73fppuaqr
7Wv3yn3O+0F9Qzbycfd73Tmx+1fC9Yo45DuJYwhFumHQ7So8Sm7FkPQQYYDsCvsI
VUaxjW67ghW4aH6P9jC/fnJxt1krEKoq6INsCh8r4u479srBtrkH
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:59 2024 by rpki-client on console-ams.rpki-client.org