Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/FIu1tk-OgWRYVDA1MknUIJnNCzM.roa
File: FIu1tk-OgWRYVDA1MknUIJnNCzM.roa (raw, json)
Hash identifier: rmEUO7hTNeWdumSJmQ6kAThEvfEFWw34OXbGaEZMBOM=
Subject key identifier: 14:8B:B5:B6:4F:8E:81:64:58:54:30:35:32:49:D4:20:99:CD:0B:33
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 043314B4
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/FIu1tk-OgWRYVDA1MknUIJnNCzM.roa
Signing time: Wed 01 Jun 2022 19:34:20 +0000
ROA not before: Wed 01 Jun 2022 19:34:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 31.43.164.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70456500 (0x43314b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Jun 1 19:34:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=148bb5b64f8e8164585430353249d42099cd0b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8d:58:db:4f:7d:1f:71:9f:9e:de:87:b4:28:
ce:b8:be:58:3c:fb:21:c1:fd:7c:c0:dd:08:b2:a5:
18:df:11:d6:b3:75:1e:90:29:49:d1:36:8f:7d:b2:
d4:49:17:92:4a:4d:97:8d:22:48:4b:3d:7c:17:7a:
cf:40:50:7b:38:c3:28:9b:67:56:af:f8:47:4f:b3:
ad:d7:ae:54:5d:6d:b1:01:7e:76:17:5c:8d:56:59:
a9:1d:92:5e:ba:e6:85:6e:a0:54:dd:86:ef:63:15:
5c:0d:0c:e3:c2:a9:b5:5a:40:82:6f:47:8f:ab:a7:
63:bb:49:ab:fd:08:d2:ac:ec:08:de:ba:11:9b:b9:
49:5f:b1:97:c7:60:59:d3:ba:21:5f:f1:25:d6:96:
a2:74:26:60:b5:f7:c6:87:c5:8f:52:9f:e4:19:96:
20:51:cc:39:bd:cb:33:d1:ef:72:65:f4:dc:4d:f4:
8c:28:46:b5:73:7b:93:2d:f6:2e:a2:0a:78:35:93:
b3:fb:41:69:15:00:35:ff:02:cd:17:58:3f:87:ce:
4d:b7:eb:40:21:28:54:6e:95:c6:cf:62:82:2a:84:
bd:dc:ef:c7:9f:66:03:49:b1:6a:7b:9f:79:ae:ba:
8e:7f:3a:fe:9f:ae:92:dc:56:a7:29:b4:da:41:6a:
ab:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8B:B5:B6:4F:8E:81:64:58:54:30:35:32:49:D4:20:99:CD:0B:33
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/FIu1tk-OgWRYVDA1MknUIJnNCzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.164.0/22
Signature Algorithm: sha256WithRSAEncryption
14:e4:96:b7:07:cb:76:5b:38:f8:05:d2:1a:0a:ab:32:6b:e8:
c2:cf:01:8c:48:4c:4b:5b:d6:00:72:5f:8e:33:4c:81:a6:a5:
26:7e:d1:82:7c:40:ef:98:3d:24:57:06:20:5a:37:e5:51:f5:
4b:ad:e0:69:64:ee:76:ea:f2:5e:4c:3d:22:f5:f7:a8:fc:e1:
52:de:d2:94:66:ba:e8:8d:cf:b8:1f:78:8a:0c:6a:df:f3:90:
02:5b:e5:13:fd:69:39:0b:44:6d:72:a1:f1:5d:12:e0:1f:21:
03:77:ab:f8:8d:dd:d6:fd:87:a6:0c:eb:c4:2b:87:88:23:d7:
81:13:1e:1a:5d:68:8b:2c:d1:98:f9:b0:34:5d:fe:32:30:38:
85:d4:39:50:0d:17:dc:46:a8:fa:d4:75:f8:57:95:d7:f7:0a:
42:df:d3:4e:69:11:a5:f7:0f:61:7b:e9:68:e5:8a:14:a1:6c:
67:69:01:67:20:cf:87:22:93:2c:15:91:2d:84:04:cc:05:f7:
a6:9e:d4:54:cd:07:cb:76:ba:e1:88:a0:68:99:8a:ac:02:85:
3b:47:9d:e0:ce:1e:b5:63:b8:18:b3:3d:ab:e9:a3:10:22:1e:
52:e7:be:b0:a3:46:95:ef:f1:29:44:d3:b9:9c:bc:4f:a0:7b:
24:e1:bb:61
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBDMUtDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
ZmYyNDcyNmRmM2U3N2Y2ZjRjOGUwNDM2NjEzYjM1MTEwZWVhZjM4MB4XDTIyMDYw
MTE5MzQyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTQ4YmI1YjY0Zjhl
ODE2NDU4NTQzMDM1MzI0OWQ0MjA5OWNkMGIzMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKaNWNtPfR9xn57eh7Qozri+WDz7IcH9fMDdCLKlGN8R1rN1
HpApSdE2j32y1EkXkkpNl40iSEs9fBd6z0BQezjDKJtnVq/4R0+zrdeuVF1tsQF+
dhdcjVZZqR2SXrrmhW6gVN2G72MVXA0M48KptVpAgm9Hj6unY7tJq/0I0qzsCN66
EZu5SV+xl8dgWdO6IV/xJdaWonQmYLX3xofFj1Kf5BmWIFHMOb3LM9HvcmX03E30
jChGtXN7ky32LqIKeDWTs/tBaRUANf8CzRdYP4fOTbfrQCEoVG6Vxs9igiqEvdzv
x59mA0mxanufea66jn86/p+uktxWpym02kFqqw0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQUi7W2T46BZFhUMDUySdQgmc0LMzAfBgNVHSMEGDAWgBTf8kcm3z539vTI
4ENmE7NREO6vODAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzNfSkhKdDgtZF9iMHlPQkRaaE96VVJEdXJ6Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzgvYTk2MDI0LTY1NTUtNGU4ZC1hZjM3LTYyYmI2ZDYzZTU5ZC8x
L0ZJdTF0ay1PZ1dSWVZEQTFNa25VSUpuTkN6TS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgv
YTk2MDI0LTY1NTUtNGU4ZC1hZjM3LTYyYmI2ZDYzZTU5ZC8xLzNfSkhKdDgtZF9i
MHlPQkRaaE96VVJEdXJ6Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAh8rpDANBgkqhkiG9w0BAQsFAAOC
AQEAFOSWtwfLdls4+AXSGgqrMmvows8BjEhMS1vWAHJfjjNMgaalJn7RgnxA75g9
JFcGIFo35VH1S63gaWTuduryXkw9IvX3qPzhUt7SlGa66I3PuB94igxq3/OQAlvl
E/1pOQtEbXKh8V0S4B8hA3er+I3d1v2HpgzrxCuHiCPXgRMeGl1oiyzRmPmwNF3+
MjA4hdQ5UA0X3Eao+tR1+FeV1/cKQt/TTmkRpfcPYXvpaOWKFKFsZ2kBZyDPhyKT
LBWRLYQEzAX3pp7UVM0Hy3a64YigaJmKrAKFO0ed4M4etWO4GLM9q+mjECIeUue+
sKNGle/xKUTTuZy8T6B7JOG7YQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org