Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/6O5dqmbdtDk963ir_y2u1wcZjDk.roa
File: 6O5dqmbdtDk963ir_y2u1wcZjDk.roa (raw, json)
Hash identifier: /2j5gBM2AKPN2wdF/oFjDc9Ye5/k3tv7l4lEtEjl3DQ=
Subject key identifier: E8:EE:5D:AA:66:DD:B4:39:3D:EB:78:AB:FF:2D:AE:D7:07:19:8C:39
Certificate issuer: /CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Certificate serial: 01848BA8A4E194F53B92DAEA6D37D1165831
Authority key identifier: E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/6O5dqmbdtDk963ir_y2u1wcZjDk.roa
Signing time: Fri 18 Nov 2022 16:53:15 +0000
ROA not before: Fri 18 Nov 2022 16:53:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 31.42.154.0/24 maxlen: 24
185.171.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:8b:a8:a4:e1:94:f5:3b:92:da:ea:6d:37:d1:16:58:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Validity
Not Before: Nov 18 16:53:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8ee5daa66ddb4393deb78abff2daed707198c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:73:e9:61:05:f7:1b:20:51:10:df:77:5c:4a:
23:3c:61:85:c8:4a:d4:8a:79:f2:90:d6:87:06:4a:
3f:13:36:90:3a:3e:9c:7a:6c:e5:73:71:06:1c:32:
68:26:cc:0c:8a:55:34:63:b4:dc:4a:0b:d1:ca:fa:
d3:29:a3:01:44:4b:d2:40:aa:d0:cb:91:ef:d1:75:
f3:0c:1a:c7:5f:77:7c:0c:ad:0a:91:ab:7b:3c:75:
39:55:bb:66:5f:7a:cb:2d:4a:73:ea:04:3e:77:c4:
5d:b5:a7:d2:e5:72:13:1e:35:af:d7:2f:12:36:43:
b3:51:ac:de:ad:92:6b:3b:b6:4b:68:88:f1:a1:07:
cb:2d:e0:35:d0:6d:1f:3b:5a:db:c6:3c:40:ad:fe:
6d:84:6d:c5:f2:24:26:2a:83:ef:d9:1d:09:b0:56:
48:64:1b:49:5c:61:56:8f:fa:bf:fd:aa:b7:6e:ae:
fc:7d:e2:83:49:d2:38:06:44:fe:fd:db:13:40:44:
20:09:e2:d6:c6:7e:ed:ba:e2:d7:9e:49:8b:16:7b:
95:1b:39:79:c2:e7:7c:f7:3f:4c:c2:82:0e:e8:dc:
87:39:b3:4a:97:79:5c:0d:5e:34:48:21:43:51:04:
85:09:df:da:e3:b5:3e:0e:ec:df:98:e2:65:54:20:
99:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:EE:5D:AA:66:DD:B4:39:3D:EB:78:AB:FF:2D:AE:D7:07:19:8C:39
X509v3 Authority Key Identifier:
keyid:E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/6O5dqmbdtDk963ir_y2u1wcZjDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.154.0/24
185.171.30.0/24
Signature Algorithm: sha256WithRSAEncryption
95:14:25:f7:fc:c7:8a:45:1a:58:a7:2c:46:84:03:f4:f4:b8:
79:dc:ae:02:fa:15:07:a9:6d:09:ff:fe:10:e7:07:ec:6c:b1:
d6:24:1c:e3:3e:f2:a4:57:bd:8e:64:cb:47:31:68:e8:b7:4e:
14:fc:e3:dd:35:f9:34:06:d0:08:08:af:3d:30:8d:67:aa:85:
3a:47:89:53:2b:cf:e4:4d:dd:93:72:24:23:76:d5:b3:da:ae:
29:28:02:15:ef:bc:58:59:b7:39:bf:34:57:06:40:c8:70:8f:
80:f0:7a:3d:d0:35:0c:ba:8b:b3:78:fc:b1:97:3c:fc:ba:a3:
05:30:e8:44:a4:ff:27:e5:ef:d5:eb:4b:f8:84:06:61:8b:44:
38:f7:20:32:49:39:ae:0b:0c:91:86:48:71:2a:a3:48:18:a9:
a8:f5:8b:a4:79:bc:25:b9:6a:ff:d5:9a:96:56:d8:b9:55:68:
48:7d:e5:87:df:74:d2:b4:f0:ac:14:7a:cb:74:65:66:e6:c6:
84:ba:03:c6:03:7d:04:77:32:e1:e5:ab:05:bd:54:0b:1c:d2:
3f:89:8d:d7:50:e2:f6:38:99:3e:b7:2f:d0:55:57:8a:44:f7:
32:fb:f6:9b:7f:a6:3e:e9:cc:00:60:80:4e:0f:54:40:b8:bd:
23:76:ed:c9
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYSLqKThlPU7ktrqbTfRFlgxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMTlkMGNkNjU1OTNkOTY5ZThkNDUzODJhMTk0YWFhNzNj
MGZmOGMwHhcNMjIxMTE4MTY1MzE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGVlNWRhYTY2ZGRiNDM5M2RlYjc4YWJmZjJkYWVkNzA3MTk4YzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnPpYQX3GyBREN93XEojPGGFyErU
innykNaHBko/EzaQOj6cemzlc3EGHDJoJswMilU0Y7TcSgvRyvrTKaMBREvSQKrQ
y5Hv0XXzDBrHX3d8DK0Kkat7PHU5VbtmX3rLLUpz6gQ+d8RdtafS5XITHjWv1y8S
NkOzUazerZJrO7ZLaIjxoQfLLeA10G0fO1rbxjxArf5thG3F8iQmKoPv2R0JsFZI
ZBtJXGFWj/q//aq3bq78feKDSdI4BkT+/dsTQEQgCeLWxn7tuuLXnkmLFnuVGzl5
wud89z9MwoIO6NyHObNKl3lcDV40SCFDUQSFCd/a47U+DuzfmOJlVCCZowIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOjuXapm3bQ5Pet4q/8trtcHGYw5MB8GA1UdIwQY
MBaAFOMZ0M1lWT2Wno1FOCoZSqpzwP+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHhuUXpXVlpQWmFlalVVNEtobEtxblBBXzR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hZTg2OWMtODEyYy00Y2Q2LWJhZjkt
MjE3Y2Y5Mzg0NWJjLzEvNk81ZHFtYmR0RGs5NjNpcl95MnUxd2NaakRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9hZTg2OWMtODEyYy00Y2Q2LWJhZjktMjE3Y2Y5Mzg0NWJj
LzEvNHhuUXpXVlpQWmFlalVVNEtobEtxblBBXzR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHyqaAwQA
uaseMA0GCSqGSIb3DQEBCwUAA4IBAQCVFCX3/MeKRRpYpyxGhAP09Lh53K4C+hUH
qW0J//4Q5wfsbLHWJBzjPvKkV72OZMtHMWjot04U/OPdNfk0BtAICK89MI1nqoU6
R4lTK8/kTd2TciQjdtWz2q4pKAIV77xYWbc5vzRXBkDIcI+A8Ho90DUMuouzePyx
lzz8uqMFMOhEpP8n5e/V60v4hAZhi0Q49yAySTmuCwyRhkhxKqNIGKmo9Yukebwl
uWr/1ZqWVti5VWhIfeWH33TStPCsFHrLdGVm5saEugPGA30EdzLh5asFvVQLHNI/
iY3XUOL2OJk+ty/QVVeKRPcy+/abf6Y+6cwAYIBOD1RAuL0jdu3J
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:31 2023 by rpki-client on console-fra.rpki-client.org