Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/vE7w5Tz0DTb11eqetDL8VcPUKZI.roa
File: vE7w5Tz0DTb11eqetDL8VcPUKZI.roa (raw, json)
Hash identifier: b0ui3mCEJvs4X3E49M4qor7mjTRU9n5zEXBH8epEOFM=
Subject key identifier: BC:4E:F0:E5:3C:F4:0D:36:F5:D5:EA:9E:B4:32:FC:55:C3:D4:29:92
Certificate issuer: /CN=13440366007eb56f10e9f99e95204d330508b9b0
Certificate serial: 02BA48
Authority key identifier: 13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/vE7w5Tz0DTb11eqetDL8VcPUKZI.roa
Signing time: Mon 28 Feb 2022 11:53:08 +0000
ROA not before: Mon 28 Feb 2022 11:53:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48109
IP address blocks: 89.31.192.0/24 maxlen: 24
89.31.192.0/21 maxlen: 21
89.31.194.0/24 maxlen: 24
89.31.196.0/24 maxlen: 24
89.31.193.0/24 maxlen: 24
89.31.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178760 (0x2ba48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13440366007eb56f10e9f99e95204d330508b9b0
Validity
Not Before: Feb 28 11:53:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc4ef0e53cf40d36f5d5ea9eb432fc55c3d42992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:38:b6:33:5a:2e:a0:b0:08:2c:ee:7b:df:f5:
9c:b4:00:5f:d1:54:96:fb:7c:63:03:28:8d:35:0b:
38:f6:91:89:65:b2:23:24:ee:05:75:00:81:86:df:
41:fd:77:2b:47:8b:41:8e:be:59:f9:98:1a:ab:c0:
16:bc:20:82:cc:01:5c:c0:f0:84:7c:66:4d:98:a7:
d6:6f:c3:39:90:ab:6e:10:70:bf:b3:0f:69:53:01:
4c:37:34:43:24:d3:7f:23:6e:14:b4:53:f2:a5:cb:
3b:af:2c:9d:29:af:db:52:c9:dd:e7:41:dc:15:29:
1c:8e:6a:a3:6f:82:3b:7e:73:b9:3e:fb:57:be:6e:
c0:03:1b:52:69:5e:70:45:8a:90:ff:2c:b7:bf:44:
fe:a4:32:a2:94:d3:93:1e:9c:1a:67:7b:cd:21:e5:
cb:db:4d:8b:88:5f:93:0b:56:c7:22:cb:ca:e6:2f:
a5:7f:9d:c1:e5:6f:78:ee:6a:8f:a1:12:ed:5d:25:
4c:08:bb:27:e6:c0:bb:9b:9c:f5:92:8c:53:1e:45:
64:71:85:c3:21:88:aa:9e:ba:9a:89:78:68:93:49:
fe:0e:6e:ad:8c:73:bd:b0:a3:cf:62:14:10:7b:85:
d6:cc:e5:f6:18:cb:53:c6:ea:83:cb:9f:f6:87:f7:
f7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4E:F0:E5:3C:F4:0D:36:F5:D5:EA:9E:B4:32:FC:55:C3:D4:29:92
X509v3 Authority Key Identifier:
keyid:13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/vE7w5Tz0DTb11eqetDL8VcPUKZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.31.192.0/21
Signature Algorithm: sha256WithRSAEncryption
12:b2:b7:24:4b:2a:70:94:7b:79:dc:72:ac:b8:97:3c:dc:f0:
70:95:d3:55:c6:52:9e:15:c0:57:d1:35:ea:df:34:7d:6f:bf:
3d:4a:e3:8b:29:e7:f0:06:c5:9c:26:c4:0a:c2:9f:2a:65:da:
fd:7f:9a:a1:f7:99:b1:49:b6:56:3a:d8:58:a6:bb:54:88:43:
5f:84:d7:63:61:a9:9d:f1:ba:19:85:33:00:b8:67:ee:3a:d8:
21:c3:94:67:9b:4f:c2:e5:ca:2c:37:7e:5a:ae:b9:e8:d5:da:
2c:d0:a2:3d:e3:62:c2:46:73:b5:1b:fd:0a:95:77:6d:65:f0:
62:51:a6:be:08:e2:c3:8f:e6:32:71:f9:c0:08:cc:09:dd:7b:
dc:9a:7f:78:dd:bf:28:7b:f5:82:3d:7b:a5:13:a8:f6:65:19:
01:96:86:37:80:05:e2:aa:9c:a1:62:44:72:91:ea:bf:4a:b4:
29:c2:0c:a9:7e:57:a7:85:0c:a3:15:55:33:96:3b:38:9c:06:
5b:7e:f6:f0:cd:82:59:3d:f1:b9:da:50:40:6f:46:b2:ec:64:
d0:2c:9a:2e:87:bf:a7:2b:cc:7f:6c:3e:94:05:14:4d:ef:5e:
27:1a:eb:dc:2a:9d:ec:a5:fc:43:b4:43:06:6d:bc:82:12:d5:
1a:0b:74:d7
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDArpIMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEz
NDQwMzY2MDA3ZWI1NmYxMGU5Zjk5ZTk1MjA0ZDMzMDUwOGI5YjAwHhcNMjIwMjI4
MTE1MzA4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhiYzRlZjBlNTNjZjQw
ZDM2ZjVkNWVhOWViNDMyZmM1NWMzZDQyOTkyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvDi2M1ouoLAILO573/WctABf0VSW+3xjAyiNNQs49pGJZbIj
JO4FdQCBht9B/XcrR4tBjr5Z+Zgaq8AWvCCCzAFcwPCEfGZNmKfWb8M5kKtuEHC/
sw9pUwFMNzRDJNN/I24UtFPypcs7ryydKa/bUsnd50HcFSkcjmqjb4I7fnO5PvtX
vm7AAxtSaV5wRYqQ/yy3v0T+pDKilNOTHpwaZ3vNIeXL202LiF+TC1bHIsvK5i+l
f53B5W947mqPoRLtXSVMCLsn5sC7m5z1koxTHkVkcYXDIYiqnrqaiXhok0n+Dm6t
jHO9sKPPYhQQe4XWzOX2GMtTxuqDy5/2h/f35wIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFLxO8OU89A029dXqnrQy/FXD1CmSMB8GA1UdIwQYMBaAFBNEA2YAfrVvEOn5
npUgTTMFCLmwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
RTBRRFpnQi10VzhRNmZtZWxTQk5Nd1VJdWJBLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9iYS8wYjAyODAtOTYyMy00NGJhLThkZGYtNDRjMWE0ZWI5NjljLzEv
dkU3dzVUejBEVGIxMWVxZXRETDhWY1BVS1pJLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8w
YjAyODAtOTYyMy00NGJhLThkZGYtNDRjMWE0ZWI5NjljLzEvRTBRRFpnQi10VzhR
NmZtZWxTQk5Nd1VJdWJBLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDWR/AMA0GCSqGSIb3DQEBCwUAA4IB
AQASsrckSypwlHt53HKsuJc83PBwldNVxlKeFcBX0TXq3zR9b789SuOLKefwBsWc
JsQKwp8qZdr9f5qh95mxSbZWOthYprtUiENfhNdjYamd8boZhTMAuGfuOtghw5Rn
m0/C5cosN35arrno1dos0KI942LCRnO1G/0KlXdtZfBiUaa+COLDj+YycfnACMwJ
3Xvcmn943b8oe/WCPXulE6j2ZRkBloY3gAXiqpyhYkRykeq/SrQpwgypflenhQyj
FVUzljs4nAZbfvbwzYJZPfG52lBAb0ay7GTQLJouh7+nK8x/bD6UBRRN714nGuvc
Kp3spfxDtEMGbbyCEtUaC3TX
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:50 2023 by rpki-client on console-fra.rpki-client.org