Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/zIoz3IOIQZ7o7Dw9usF1pBO2Clc.roa
File: zIoz3IOIQZ7o7Dw9usF1pBO2Clc.roa (raw, json)
Hash identifier: wqqZNSy9+9iPtSRr/bu61m0X8wsWpMfofL8ftig3WtA=
Subject key identifier: CC:8A:33:DC:83:88:41:9E:E8:EC:3C:3D:BA:C1:75:A4:13:B6:0A:57
Certificate issuer: /CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4
Certificate serial: 0767EC23
Authority key identifier: 53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/zIoz3IOIQZ7o7Dw9usF1pBO2Clc.roa
Signing time: Sat 01 Jan 2022 09:03:12 +0000
ROA not before: Sat 01 Jan 2022 09:03:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31078
IP address blocks: 31.220.136.0/21 maxlen: 21
193.34.24.0/22 maxlen: 22
217.115.0.0/20 maxlen: 20
2a00:1328::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124251171 (0x767ec23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4
Validity
Not Before: Jan 1 09:03:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc8a33dc8388419ee8ec3c3dbac175a413b60a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bb:7c:c0:18:f4:ea:41:c5:2e:c9:67:fd:50:
a1:19:88:c8:27:cf:3c:b7:81:65:c2:60:01:63:67:
31:a0:d9:4f:11:94:a8:bc:97:20:84:87:fa:26:27:
05:ef:da:09:05:78:3d:88:2c:12:ac:8f:01:b8:65:
a7:15:1e:27:21:16:97:78:8b:ec:4d:24:8e:a6:c0:
7f:36:4a:ba:04:df:9e:ae:9c:39:ab:4b:0a:fb:88:
4c:da:ae:4f:5e:72:8c:15:e0:86:85:5b:88:2c:65:
77:4c:68:bd:a7:02:b0:a0:25:ff:f2:8e:f1:eb:1a:
1d:52:95:20:c4:9e:41:b8:48:52:0b:7a:dd:3a:bc:
f4:f9:78:ac:40:93:2a:9e:39:8e:e0:73:74:cc:c1:
fc:0f:c8:92:30:99:6a:34:d5:18:4e:62:eb:39:68:
19:11:97:2e:a1:6e:2a:31:e3:d2:d7:0a:63:34:63:
86:33:e4:b6:72:0b:c4:80:4e:ae:29:9c:93:65:ce:
59:64:00:49:44:63:e0:da:dc:bb:9b:2b:7b:6c:d5:
fa:bf:e5:60:95:d4:f4:b6:0b:2d:5e:d2:5c:ff:c1:
21:37:eb:9a:fe:70:fb:30:08:84:43:49:aa:33:1a:
ce:50:dc:63:f5:53:5b:28:60:a3:7a:18:fa:3b:20:
18:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8A:33:DC:83:88:41:9E:E8:EC:3C:3D:BA:C1:75:A4:13:B6:0A:57
X509v3 Authority Key Identifier:
keyid:53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/zIoz3IOIQZ7o7Dw9usF1pBO2Clc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.136.0/21
193.34.24.0/22
217.115.0.0/20
IPv6:
2a00:1328::/32
Signature Algorithm: sha256WithRSAEncryption
22:6e:41:16:9b:43:49:fa:2d:e5:2c:65:44:35:1b:e1:93:d0:
19:32:d5:a9:11:74:10:86:2d:85:83:61:1d:f6:73:09:56:90:
fb:4e:86:00:ed:54:05:74:d4:f0:bb:1d:2e:cb:13:64:59:dc:
53:28:19:7a:c8:f9:44:8f:0a:c5:00:c5:c5:05:ca:0a:3d:bd:
af:cb:85:61:41:8f:b1:7f:85:12:56:e8:5d:32:58:f3:ea:ff:
fd:88:0f:39:f7:96:74:85:96:31:b5:40:5f:cc:9e:e4:9b:1a:
e6:de:b9:2d:96:17:d0:dc:ca:c4:ef:18:2d:33:38:77:1a:47:
1f:d8:e5:55:d7:12:fa:4e:b9:3c:ef:77:d1:95:52:ad:b5:9d:
57:11:a1:bd:0c:fd:d4:00:ff:cc:23:65:2b:cb:c7:41:4a:36:
6c:5f:76:44:44:d2:2e:d8:80:c8:2b:6f:46:5f:9b:07:41:dc:
e9:97:83:65:98:ef:6f:e7:e2:47:30:70:f0:4b:25:32:da:02:
a0:7f:a2:79:38:4c:af:c0:3d:4b:35:74:a2:26:c8:fc:65:da:
92:6d:f9:c3:ec:00:73:4d:a5:fb:bc:c9:e8:19:56:41:9a:70:
d6:38:92:36:49:cb:b1:b8:59:f8:73:56:ee:50:1e:7d:89:b2:
c1:dc:d3:05
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIEB2fsIzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
M2IxYThlYmMzZWNmN2Y1ZGI3ZjZjYWNkMDBlOTIwYWY4NWFlOGI0MB4XDTIyMDEw
MTA5MDMxMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2M4YTMzZGM4Mzg4
NDE5ZWU4ZWMzYzNkYmFjMTc1YTQxM2I2MGE1NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ+7fMAY9OpBxS7JZ/1QoRmIyCfPPLeBZcJgAWNnMaDZTxGU
qLyXIISH+iYnBe/aCQV4PYgsEqyPAbhlpxUeJyEWl3iL7E0kjqbAfzZKugTfnq6c
OatLCvuITNquT15yjBXghoVbiCxld0xovacCsKAl//KO8esaHVKVIMSeQbhIUgt6
3Tq89Pl4rECTKp45juBzdMzB/A/IkjCZajTVGE5i6zloGRGXLqFuKjHj0tcKYzRj
hjPktnILxIBOrimck2XOWWQASURj4Nrcu5sre2zV+r/lYJXU9LYLLV7SXP/BITfr
mv5w+zAIhENJqjMazlDcY/VTWyhgo3oY+jsgGNkCAwEAAaOCAiQwggIgMB0GA1Ud
DgQWBBTMijPcg4hBnujsPD26wXWkE7YKVzAfBgNVHSMEGDAWgBRTsajrw+z39dt/
bKzQDpIK+FrotDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1U3R282OFBzOV9YYmYyeXMwQTZTQ3ZoYTZMUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzIvMDcwNjMwLTUyMzQtNDljNC04NGZlLTE1YmRhNmI4NjdjYi8x
L3pJb3ozSU9JUVo3bzdEdzl1c0YxcEJPMkNsYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzIv
MDcwNjMwLTUyMzQtNDljNC04NGZlLTE1YmRhNmI4NjdjYi8xL1U3R282OFBzOV9Y
YmYyeXMwQTZTQ3ZoYTZMUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAx/ciAMEAsEiGAMEBNlzADANBAIA
AjAHAwUAKgATKDANBgkqhkiG9w0BAQsFAAOCAQEAIm5BFptDSfot5SxlRDUb4ZPQ
GTLVqRF0EIYthYNhHfZzCVaQ+06GAO1UBXTU8LsdLssTZFncUygZesj5RI8KxQDF
xQXKCj29r8uFYUGPsX+FElboXTJY8+r//YgPOfeWdIWWMbVAX8ye5Jsa5t65LZYX
0NzKxO8YLTM4dxpHH9jlVdcS+k65PO930ZVSrbWdVxGhvQz91AD/zCNlK8vHQUo2
bF92RETSLtiAyCtvRl+bB0Hc6ZeDZZjvb+fiRzBw8EslMtoCoH+ieThMr8A9SzV0
oibI/GXakm35w+wAc02l+7zJ6BlWQZpw1jiSNknLsbhZ+HNW7lAefYmywdzTBQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:39 2024 by rpki-client on console-fra.rpki-client.org