Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/31315c-81a4-4969-8571-d76346a7adc6/1/ioT75TuLotsOZyp6Wom6yMUh7zU.roa
File: ioT75TuLotsOZyp6Wom6yMUh7zU.roa (raw, json)
Hash identifier: k+Q60iXUx5yzBNFv6Nue2QK240rPj2zy/ePK5lbAa+Q=
Subject key identifier: 8A:84:FB:E5:3B:8B:A2:DB:0E:67:2A:7A:5A:89:BA:C8:C5:21:EF:35
Certificate issuer: /CN=34a2ea557b42a9fd3a80211506193c2b3389dc6f
Certificate serial: 0184018B856EE715B25981D98B94F6E77818
Authority key identifier: 34:A2:EA:55:7B:42:A9:FD:3A:80:21:15:06:19:3C:2B:33:89:DC:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NKLqVXtCqf06gCEVBhk8KzOJ3G8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/31315c-81a4-4969-8571-d76346a7adc6/1/ioT75TuLotsOZyp6Wom6yMUh7zU.roa
Signing time: Sat 22 Oct 2022 21:13:51 +0000
ROA not before: Sat 22 Oct 2022 21:13:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 31.193.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:01:8b:85:6e:e7:15:b2:59:81:d9:8b:94:f6:e7:78:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34a2ea557b42a9fd3a80211506193c2b3389dc6f
Validity
Not Before: Oct 22 21:13:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a84fbe53b8ba2db0e672a7a5a89bac8c521ef35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:3d:51:ee:4e:d2:55:f6:be:ae:c0:80:6e:1d:
7b:59:2e:23:56:0c:14:0a:a3:44:bb:ec:c2:3c:40:
ee:e1:5e:26:9c:90:14:e7:40:26:cb:38:aa:ac:0e:
03:da:80:60:0c:ab:d3:5a:37:5b:bc:91:ee:30:4d:
0c:18:04:48:32:20:74:13:87:40:0f:55:65:18:ee:
7d:63:32:e9:55:de:90:1f:bc:a7:12:aa:3f:cb:61:
2e:7b:6b:70:87:d6:3e:ec:dc:f4:e5:70:76:a4:e8:
4c:52:de:0e:dd:77:4b:bf:2b:55:4f:18:a9:31:e6:
54:2b:1b:b7:c9:41:61:1f:df:aa:c7:ac:52:11:6d:
0b:81:83:da:78:b1:46:55:1f:e7:25:70:06:a1:c7:
d7:65:cb:31:37:bf:9f:27:59:ba:66:20:5a:09:ce:
07:4c:30:7f:0f:d9:53:b1:75:f5:4c:36:b3:27:fc:
c8:9a:43:b0:76:d8:0f:02:15:b0:9a:c7:ac:63:d4:
4b:22:d1:81:c6:3b:b1:59:5c:b6:f2:81:0b:f3:4b:
ba:d4:24:cf:43:b8:30:cc:1d:9f:27:77:5a:9f:1b:
3c:c6:6a:13:b8:59:29:e0:ed:20:36:67:8f:09:f9:
43:ae:0a:53:8b:d8:c4:b5:c2:cd:08:c3:76:a9:ca:
94:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:84:FB:E5:3B:8B:A2:DB:0E:67:2A:7A:5A:89:BA:C8:C5:21:EF:35
X509v3 Authority Key Identifier:
keyid:34:A2:EA:55:7B:42:A9:FD:3A:80:21:15:06:19:3C:2B:33:89:DC:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NKLqVXtCqf06gCEVBhk8KzOJ3G8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31315c-81a4-4969-8571-d76346a7adc6/1/ioT75TuLotsOZyp6Wom6yMUh7zU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31315c-81a4-4969-8571-d76346a7adc6/1/NKLqVXtCqf06gCEVBhk8KzOJ3G8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.191.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:ad:62:75:2f:31:d4:18:1e:5d:ae:d6:13:18:cd:27:22:04:
0a:b6:36:b9:5d:25:f5:c6:0d:10:25:a8:bb:0d:b2:7b:cb:ff:
d5:10:fd:97:0a:50:24:cb:0f:16:51:47:a6:00:ce:86:e5:c9:
7a:eb:2b:a4:75:8e:6f:84:b5:4d:2e:28:85:0e:96:c4:43:f5:
2b:6d:01:ee:63:9f:74:d2:79:59:a8:aa:72:0a:ae:ab:9b:8d:
03:1d:7f:cb:1d:d3:8a:22:50:51:73:5e:1a:39:4a:8c:c5:68:
8d:ab:f5:cf:12:f3:f6:29:06:95:cb:85:04:50:a1:a4:bd:b7:
bf:ea:a2:63:33:ac:3c:1b:ec:b9:a5:ed:ed:cd:4f:f3:01:8c:
65:a7:f5:00:9c:ff:35:7b:c6:e6:79:b9:1b:12:eb:d6:4c:72:
47:78:c2:09:6b:1f:4f:2d:48:d8:14:eb:be:39:a0:ab:4f:3a:
b0:ae:b6:5a:a9:e6:ba:72:2b:e1:c9:67:b7:3d:f9:ce:dc:78:
4f:14:12:ff:9e:69:9e:55:9e:c8:26:d1:78:c0:21:81:31:32:
84:ea:22:23:3b:0b:1f:7b:96:9d:72:24:23:28:7c:c5:14:ad:
ba:2d:db:1a:e0:19:bf:26:c0:57:a2:eb:07:c8:d5:8d:ca:0d:
97:68:da:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQBi4Vu5xWyWYHZi5T253gYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0YTJlYTU1N2I0MmE5ZmQzYTgwMjExNTA2MTkzYzJiMzM4
OWRjNmYwHhcNMjIxMDIyMjExMzUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTg0ZmJlNTNiOGJhMmRiMGU2NzJhN2E1YTg5YmFjOGM1MjFlZjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8j1R7k7SVfa+rsCAbh17WS4jVgwU
CqNEu+zCPEDu4V4mnJAU50AmyziqrA4D2oBgDKvTWjdbvJHuME0MGARIMiB0E4dA
D1VlGO59YzLpVd6QH7ynEqo/y2Eue2twh9Y+7Nz05XB2pOhMUt4O3XdLvytVTxip
MeZUKxu3yUFhH9+qx6xSEW0LgYPaeLFGVR/nJXAGocfXZcsxN7+fJ1m6ZiBaCc4H
TDB/D9lTsXX1TDazJ/zImkOwdtgPAhWwmsesY9RLItGBxjuxWVy28oEL80u61CTP
Q7gwzB2fJ3danxs8xmoTuFkp4O0gNmePCflDrgpTi9jEtcLNCMN2qcqUCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIqE++U7i6LbDmcqelqJusjFIe81MB8GA1UdIwQY
MBaAFDSi6lV7Qqn9OoAhFQYZPCszidxvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTktMcVZYdENxZjA2Z0NFVkJoazhLek9KM0c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8zMTMxNWMtODFhNC00OTY5LTg1NzEt
ZDc2MzQ2YTdhZGM2LzEvaW9UNzVUdUxvdHNPWnlwNldvbTZ5TVVoN3pVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8zMTMxNWMtODFhNC00OTY5LTg1NzEtZDc2MzQ2YTdhZGM2
LzEvTktMcVZYdENxZjA2Z0NFVkJoazhLek9KM0c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH8G/MA0G
CSqGSIb3DQEBCwUAA4IBAQBKrWJ1LzHUGB5drtYTGM0nIgQKtja5XSX1xg0QJai7
DbJ7y//VEP2XClAkyw8WUUemAM6G5cl66yukdY5vhLVNLiiFDpbEQ/UrbQHuY590
0nlZqKpyCq6rm40DHX/LHdOKIlBRc14aOUqMxWiNq/XPEvP2KQaVy4UEUKGkvbe/
6qJjM6w8G+y5pe3tzU/zAYxlp/UAnP81e8bmebkbEuvWTHJHeMIJax9PLUjYFOu+
OaCrTzqwrrZaqea6civhyWe3PfnO3HhPFBL/nmmeVZ7IJtF4wCGBMTKE6iIjOwsf
e5adciQjKHzFFK26Ldsa4Bm/JsBXousHyNWNyg2XaNqF
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:12 2023 by rpki-client on console-fra.rpki-client.org