Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/vrwmFp-CLWMSBlGgF5CwETiZynM.roa
File: vrwmFp-CLWMSBlGgF5CwETiZynM.roa (raw, json)
Hash identifier: hSG0WNcCSwIEBONuU7TAyzg/AE/ZbaXtd1xTp65un5A=
Subject key identifier: BE:BC:26:16:9F:82:2D:63:12:06:51:A0:17:90:B0:11:38:99:CA:73
Certificate issuer: /CN=79b6ceac5d42a637f36ba1e3fdae90ad5fee2cff
Certificate serial: 0162C308
Authority key identifier: 79:B6:CE:AC:5D:42:A6:37:F3:6B:A1:E3:FD:AE:90:AD:5F:EE:2C:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/vrwmFp-CLWMSBlGgF5CwETiZynM.roa
Signing time: Mon 04 Jul 2022 18:24:25 +0000
ROA not before: Mon 04 Jul 2022 18:24:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209733
IP address blocks: 31.24.252.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23249672 (0x162c308)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79b6ceac5d42a637f36ba1e3fdae90ad5fee2cff
Validity
Not Before: Jul 4 18:24:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bebc26169f822d63120651a01790b0113899ca73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0d:52:7d:ef:bd:cd:3c:fe:10:01:05:d3:b2:
44:b9:9c:d9:6e:b6:7b:8b:17:cc:e4:7b:5b:36:c4:
84:21:b8:76:65:bd:2f:0b:a9:c8:48:a8:b1:35:d8:
93:65:da:a2:8b:3a:c1:11:12:cd:45:a5:3f:13:ca:
1b:b4:ea:c1:26:ab:66:4a:50:0a:e8:db:38:e5:4a:
7f:e7:8a:bb:1f:a7:2b:a7:0a:ae:b9:d6:0a:57:91:
df:e9:61:19:0b:ef:e3:b8:46:66:5d:12:44:65:72:
eb:37:87:66:ee:c4:9b:6c:7c:98:1a:f7:da:53:a4:
57:67:ba:90:25:f8:45:da:2c:12:be:ac:be:39:2b:
8d:d7:87:79:8d:37:99:34:d7:d2:d5:16:15:d9:66:
7e:74:99:c0:a5:0a:06:db:8c:bc:e2:d9:43:27:c2:
d0:a0:fa:86:18:5a:b0:bb:76:d1:fd:5b:d1:3f:23:
c7:2c:88:8d:57:b5:80:4a:83:78:cb:9d:10:92:ad:
4b:b8:74:2e:66:eb:fc:f6:dc:25:f5:de:3c:14:36:
df:a7:ac:93:eb:dc:e8:9d:98:28:44:2c:4e:0d:19:
49:46:78:03:59:3a:b6:3b:c3:74:ed:43:09:4f:f5:
c3:17:04:89:bd:3c:2e:89:7f:bd:53:36:30:b4:b2:
40:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BC:26:16:9F:82:2D:63:12:06:51:A0:17:90:B0:11:38:99:CA:73
X509v3 Authority Key Identifier:
keyid:79:B6:CE:AC:5D:42:A6:37:F3:6B:A1:E3:FD:AE:90:AD:5F:EE:2C:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/vrwmFp-CLWMSBlGgF5CwETiZynM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.252.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:60:9b:8f:65:12:15:62:75:ff:3a:97:f1:a2:94:5f:76:0e:
ea:3e:17:44:f5:bd:b3:95:c0:9d:a2:6e:0c:a9:30:e3:37:3a:
a5:cf:5b:39:52:81:08:58:73:41:a7:ee:69:d4:75:e7:a2:80:
c5:1c:f6:88:1f:1f:8d:53:ea:1b:82:60:b8:87:9a:33:a1:c4:
ac:c8:53:12:15:f5:75:f2:95:3b:a1:7b:b2:be:84:7f:37:23:
55:04:7a:3d:94:53:54:52:92:03:b9:ef:dd:b8:24:a3:dd:ee:
c0:4c:e2:68:30:94:23:01:35:ea:bd:f5:47:55:76:d5:ed:a2:
5e:9d:a4:ba:8b:7b:e7:4b:d2:c3:bf:a7:40:2a:bc:64:67:b7:
fc:1b:3a:ef:33:be:1c:20:b4:47:5e:1b:38:7e:e7:94:65:6f:
75:d2:92:92:21:de:37:1c:ae:e4:53:aa:f5:b3:12:ab:64:5f:
da:4f:d3:26:10:06:37:ad:c4:29:2a:ad:c9:c6:00:9b:e1:80:
98:0a:3b:4e:a0:55:d4:26:14:f6:9c:0d:7f:74:06:d8:27:62:
a4:be:02:36:9a:8b:72:bc:cf:28:e7:00:67:5c:68:37:0d:92:
f8:97:02:25:2c:e6:aa:8e:59:a9:a7:97:ea:c6:95:53:af:93:
b8:66:42:4d
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAWLDCDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
OWI2Y2VhYzVkNDJhNjM3ZjM2YmExZTNmZGFlOTBhZDVmZWUyY2ZmMB4XDTIyMDcw
NDE4MjQyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmViYzI2MTY5Zjgy
MmQ2MzEyMDY1MWEwMTc5MGIwMTEzODk5Y2E3MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJcNUn3vvc08/hABBdOyRLmc2W62e4sXzOR7WzbEhCG4dmW9
LwupyEiosTXYk2Xaoos6wRESzUWlPxPKG7TqwSarZkpQCujbOOVKf+eKux+nK6cK
rrnWCleR3+lhGQvv47hGZl0SRGVy6zeHZu7Em2x8mBr32lOkV2e6kCX4RdosEr6s
vjkrjdeHeY03mTTX0tUWFdlmfnSZwKUKBtuMvOLZQyfC0KD6hhhasLt20f1b0T8j
xyyIjVe1gEqDeMudEJKtS7h0Lmbr/PbcJfXePBQ236esk+vc6J2YKEQsTg0ZSUZ4
A1k6tjvDdO1DCU/1wxcEib08Lol/vVM2MLSyQEMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS+vCYWn4ItYxIGUaAXkLAROJnKczAfBgNVHSMEGDAWgBR5ts6sXUKmN/Nr
oeP9rpCtX+4s/zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ViYk9yRjFDcGpmemE2SGpfYTZRclZfdUxQOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmMvYTdkNDIxLWU4Y2QtNDkyOS1hZWQwLTRmZTNmNjExMTBkZS8x
L3Zyd21GcC1DTFdNU0JsR2dGNUN3RVRpWnluTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMv
YTdkNDIxLWU4Y2QtNDkyOS1hZWQwLTRmZTNmNjExMTBkZS8xL2ViYk9yRjFDcGpm
emE2SGpfYTZRclZfdUxQOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAB8Y/DANBgkqhkiG9w0BAQsFAAOC
AQEAe2Cbj2USFWJ1/zqX8aKUX3YO6j4XRPW9s5XAnaJuDKkw4zc6pc9bOVKBCFhz
QafuadR156KAxRz2iB8fjVPqG4JguIeaM6HErMhTEhX1dfKVO6F7sr6EfzcjVQR6
PZRTVFKSA7nv3bgko93uwEziaDCUIwE16r31R1V21e2iXp2kuot750vSw7+nQCq8
ZGe3/Bs67zO+HCC0R14bOH7nlGVvddKSkiHeNxyu5FOq9bMSq2Rf2k/TJhAGN63E
KSqtycYAm+GAmAo7TqBV1CYU9pwNf3QG2CdipL4CNpqLcrzPKOcAZ1xoNw2S+JcC
JSzmqo5ZqaeX6saVU6+TuGZCTQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:57 2023 by rpki-client on console-ams.rpki-client.org