Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/0mGD4O2WFzLSA5hVtMTHIQJCJto.roa
File: 0mGD4O2WFzLSA5hVtMTHIQJCJto.roa (raw, json)
Hash identifier: yasgbfe66RpqLscklswIF44RFNpxRvTZ1e90vus3EoM=
Subject key identifier: D2:61:83:E0:ED:96:17:32:D2:03:98:55:B4:C4:C7:21:02:42:26:DA
Certificate issuer: /CN=0007534eb77caa836f8f118630164e0236e5fe86
Certificate serial: 0183754D11B7CC92CBD201A12AFA462F9E2C
Authority key identifier: 00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/0mGD4O2WFzLSA5hVtMTHIQJCJto.roa
Signing time: Sun 25 Sep 2022 15:38:48 +0000
ROA not before: Sun 25 Sep 2022 15:38:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207889
IP address blocks: 31.135.179.0/24 maxlen: 24
31.135.176.0/24 maxlen: 24
31.135.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:75:4d:11:b7:cc:92:cb:d2:01:a1:2a:fa:46:2f:9e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0007534eb77caa836f8f118630164e0236e5fe86
Validity
Not Before: Sep 25 15:38:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d26183e0ed961732d2039855b4c4c721024226da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3e:8d:1b:d1:9b:29:61:0f:04:5c:b2:30:ee:
d2:5e:4a:5c:4b:88:88:11:94:73:0e:e7:10:84:2d:
52:db:87:06:c1:b2:82:b1:95:7b:2d:81:0b:e3:68:
8d:8a:8e:48:54:c8:1e:fb:11:b3:e7:c6:39:a0:30:
8a:59:f4:59:af:56:f6:c5:99:c8:16:f0:e2:77:6d:
00:fe:c4:08:c5:0d:e3:f3:ff:49:50:35:a4:4e:bd:
72:d5:4b:78:11:a5:99:a0:e4:f5:40:70:f0:1f:26:
e9:ee:0a:df:f1:0a:25:91:20:9d:e2:ba:26:bf:4e:
80:c7:9d:51:18:45:6a:4f:bd:51:93:d1:95:81:7e:
c1:18:55:fb:f5:9b:03:7b:6c:15:8c:f2:59:a0:d0:
60:1d:1f:c8:73:0e:cf:b4:0c:f9:34:b6:ad:e0:c4:
d4:cf:cc:b7:a1:93:cc:59:cd:1a:ce:46:61:a7:eb:
22:fb:2c:47:33:05:12:59:0f:b1:f8:b3:82:f9:ee:
ac:a3:0a:8f:26:a4:6d:75:1a:6c:e9:72:d1:09:66:
89:c9:92:9b:18:c1:a8:51:d0:bd:7d:0d:6f:0d:db:
65:60:a4:e6:28:bf:84:fb:ac:27:32:1c:99:4f:cc:
a8:f3:22:ae:25:ad:52:a1:5d:e7:74:b7:4e:fe:20:
f3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:61:83:E0:ED:96:17:32:D2:03:98:55:B4:C4:C7:21:02:42:26:DA
X509v3 Authority Key Identifier:
keyid:00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/0mGD4O2WFzLSA5hVtMTHIQJCJto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.135.176.0/23
31.135.179.0/24
Signature Algorithm: sha256WithRSAEncryption
44:6a:de:77:48:f5:2c:e2:73:59:c3:5e:94:f6:9f:17:75:64:
89:20:19:e2:15:83:eb:36:43:e5:6e:75:82:ce:df:09:8f:f9:
71:48:9e:02:fe:c2:66:63:be:96:ba:bb:7f:e4:1e:20:1c:7b:
25:bc:cf:6e:97:68:cc:b4:91:fa:99:3b:2b:61:b4:14:64:99:
ed:0f:50:53:73:0e:7a:b8:21:d3:8b:a9:6f:76:86:13:d5:80:
9c:0b:3c:92:b1:42:a6:5e:7c:3c:6c:7e:8c:bd:82:0f:d6:f6:
76:82:11:5b:ee:da:ff:63:ab:67:ea:89:9d:26:a9:e3:39:20:
cd:a7:f2:68:b0:a5:3d:f0:61:21:fb:7b:49:42:18:e2:b3:29:
d5:58:ed:4c:21:9f:5a:e7:f6:86:ed:d1:15:cd:bd:4f:1b:aa:
3c:51:d2:7d:15:37:a9:b1:d3:8e:29:0c:8d:0e:55:3d:81:d9:
16:18:b2:7c:11:03:86:c9:e2:36:0a:ea:40:d0:65:ac:76:8b:
f4:cf:40:d2:be:5d:1f:ea:8c:20:b1:29:08:4d:5a:20:6b:d4:
22:31:fa:81:41:d0:fe:b9:50:1a:65:6c:e3:24:cc:6a:5b:ab:
8a:4e:44:86:e8:e7:88:b7:78:c6:11:0a:06:c5:92:d1:77:1f:
00:07:91:47
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYN1TRG3zJLL0gGhKvpGL54sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMDc1MzRlYjc3Y2FhODM2ZjhmMTE4NjMwMTY0ZTAyMzZl
NWZlODYwHhcNMjIwOTI1MTUzODQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjYxODNlMGVkOTYxNzMyZDIwMzk4NTViNGM0YzcyMTAyNDIyNmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApD6NG9GbKWEPBFyyMO7SXkpcS4iI
EZRzDucQhC1S24cGwbKCsZV7LYEL42iNio5IVMge+xGz58Y5oDCKWfRZr1b2xZnI
FvDid20A/sQIxQ3j8/9JUDWkTr1y1Ut4EaWZoOT1QHDwHybp7grf8QolkSCd4rom
v06Ax51RGEVqT71Rk9GVgX7BGFX79ZsDe2wVjPJZoNBgHR/Icw7PtAz5NLat4MTU
z8y3oZPMWc0azkZhp+si+yxHMwUSWQ+x+LOC+e6sowqPJqRtdRps6XLRCWaJyZKb
GMGoUdC9fQ1vDdtlYKTmKL+E+6wnMhyZT8yo8yKuJa1SoV3ndLdO/iDzNQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNJhg+Dtlhcy0gOYVbTExyECQibaMB8GA1UdIwQY
MBaAFAAHU063fKqDb48RhjAWTgI25f6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUFkVFRyZDhxb052anhHR01CWk9BamJsX29ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80MWU5MGMtNjFjYy00NzBjLWEzODgt
NmQxYzliMTUzY2YwLzEvMG1HRDRPMldGekxTQTVoVnRNVEhJUUpDSnRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi80MWU5MGMtNjFjYy00NzBjLWEzODgtNmQxYzliMTUzY2Yw
LzEvQUFkVFRyZDhxb052anhHR01CWk9BamJsX29ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBH4ewAwQA
H4ezMA0GCSqGSIb3DQEBCwUAA4IBAQBEat53SPUs4nNZw16U9p8XdWSJIBniFYPr
NkPlbnWCzt8Jj/lxSJ4C/sJmY76Wurt/5B4gHHslvM9ul2jMtJH6mTsrYbQUZJnt
D1BTcw56uCHTi6lvdoYT1YCcCzySsUKmXnw8bH6MvYIP1vZ2ghFb7tr/Y6tn6omd
JqnjOSDNp/JosKU98GEh+3tJQhjisynVWO1MIZ9a5/aG7dEVzb1PG6o8UdJ9FTep
sdOOKQyNDlU9gdkWGLJ8EQOGyeI2CupA0GWsdov0z0DSvl0f6owgsSkITVoga9Qi
MfqBQdD+uVAaZWzjJMxqW6uKTkSG6OeIt3jGEQoGxZLRdx8AB5FH
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:22 2024 by rpki-client on console-fra.rpki-client.org