Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/r3qtRgoYQXjTI7az6p4WRRKKPlQ.roa
File: r3qtRgoYQXjTI7az6p4WRRKKPlQ.roa (raw, json)
Hash identifier: Krn70K+AK4VMJjYajAmKxFRruQ4lmz5LPCxvGEDEd2o=
Subject key identifier: AF:7A:AD:46:0A:18:41:78:D3:23:B6:B3:EA:9E:16:45:12:8A:3E:54
Certificate issuer: /CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Certificate serial: A41CD3
Authority key identifier: A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/r3qtRgoYQXjTI7az6p4WRRKKPlQ.roa
Signing time: Sat 01 Jan 2022 05:06:24 +0000
ROA not before: Sat 01 Jan 2022 05:06:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34259
IP address blocks: 31.133.115.0/24 maxlen: 24
31.133.117.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10755283 (0xa41cd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Validity
Not Before: Jan 1 05:06:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af7aad460a184178d323b6b3ea9e1645128a3e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:07:df:79:b4:89:a1:81:b0:f6:77:25:20:a8:
42:14:2e:b1:f0:0a:fa:5e:54:3a:b6:31:9d:ec:83:
ec:d6:65:7e:6e:cb:22:cf:0d:6b:36:28:b7:9a:c7:
22:08:b6:8e:a5:d6:3d:a6:24:7f:a9:67:da:3a:b2:
47:c2:d1:d0:34:b5:0a:f8:ec:fe:2d:0e:5f:77:f5:
4b:87:3a:5d:c7:31:5c:47:a6:02:6d:08:d0:bd:b3:
9a:a4:8c:fd:3f:ec:e7:c3:67:8f:48:90:02:27:9e:
7d:67:6d:28:3b:fd:cc:d2:a1:5b:ff:10:73:4d:37:
e9:37:a6:24:bb:1c:be:7c:5d:8b:5b:71:93:ed:5d:
05:c7:48:50:22:c5:89:a0:41:f6:a5:d8:fa:83:8a:
15:dc:65:36:9f:24:63:d9:02:53:5c:d5:fa:7e:8d:
5e:b3:af:27:29:2e:8b:13:a8:58:4b:8e:ae:eb:05:
fe:66:b0:9c:00:f8:44:5c:91:e4:25:f9:2f:b5:08:
19:58:94:23:5c:57:37:cb:3c:7c:a2:1f:bb:94:6c:
14:7a:e4:1a:e1:74:b1:0e:02:db:d9:fa:48:35:b0:
9e:80:2f:3b:5e:a2:12:a4:c1:a3:11:f0:db:03:d4:
52:36:95:a0:ea:d5:b2:f1:c2:ad:bd:12:c9:ad:a8:
ea:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7A:AD:46:0A:18:41:78:D3:23:B6:B3:EA:9E:16:45:12:8A:3E:54
X509v3 Authority Key Identifier:
keyid:A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/r3qtRgoYQXjTI7az6p4WRRKKPlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.115.0/24
31.133.117.0/24
Signature Algorithm: sha256WithRSAEncryption
41:33:95:40:2b:03:0e:ad:14:69:4a:bc:8b:36:5f:75:4d:cb:
67:70:61:37:30:ce:45:13:26:b1:3c:83:40:c9:88:ef:b3:48:
33:77:96:e8:02:cc:a6:5a:52:bf:fe:ae:cb:db:7f:3c:25:f3:
2b:2f:0f:2a:9a:40:18:28:18:db:ca:5a:d3:11:d1:ca:e5:10:
59:54:70:aa:b7:92:96:c5:b8:15:ff:b5:ad:2f:02:10:cb:1e:
49:9d:db:f3:62:bb:54:75:7e:e8:6a:6a:36:c0:b6:03:68:49:
75:46:02:c8:64:1b:fe:bc:0d:f6:ab:93:f5:75:71:bc:79:7d:
5e:ed:f9:d0:86:d7:f8:a7:17:64:40:e4:28:1b:3a:44:9b:17:
07:b6:ff:b9:47:b6:b0:e0:13:82:4a:bd:a4:b3:a2:19:ae:a3:
4a:6e:02:8d:c8:2f:d9:ec:35:db:d5:cf:e6:c3:fc:8c:91:9d:
21:8e:5c:21:b3:b6:55:66:e3:c3:ea:4a:ea:35:b4:35:80:7f:
b5:c8:a9:d4:57:3a:f2:c6:b9:98:fc:2b:62:c2:3b:d0:e2:be:
93:9a:62:5f:86:1a:09:2d:5b:06:79:29:4c:03:29:bd:b8:60:
e4:b3:01:28:06:01:7a:f2:db:f7:2e:97:38:5c:84:7c:be:5f:
ee:3c:a3:08
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAKQc0zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
OTM5Y2MxNjIxZWUzMDEwYWU5OGUxMjdiZDI1NGE3ODMzZmQyODI3MB4XDTIyMDEw
MTA1MDYyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWY3YWFkNDYwYTE4
NDE3OGQzMjNiNmIzZWE5ZTE2NDUxMjhhM2U1NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANYH33m0iaGBsPZ3JSCoQhQusfAK+l5UOrYxneyD7NZlfm7L
Is8NazYot5rHIgi2jqXWPaYkf6ln2jqyR8LR0DS1Cvjs/i0OX3f1S4c6XccxXEem
Am0I0L2zmqSM/T/s58Nnj0iQAieefWdtKDv9zNKhW/8Qc0036TemJLscvnxdi1tx
k+1dBcdIUCLFiaBB9qXY+oOKFdxlNp8kY9kCU1zV+n6NXrOvJykuixOoWEuOrusF
/mawnAD4RFyR5CX5L7UIGViUI1xXN8s8fKIfu5RsFHrkGuF0sQ4C29n6SDWwnoAv
O16iEqTBoxHw2wPUUjaVoOrVsvHCrb0Sya2o6uMCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSveq1GChhBeNMjtrPqnhZFEoo+VDAfBgNVHSMEGDAWgBSpOcwWIe4wEK6Y
4Se9JUp4M/0oJzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3FUbk1GaUh1TUJDdW1PRW52U1ZLZURQOUtDYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGMvZDViZjcyLTMxMTUtNGM3MS1hMWJmLWIwNjE5NGQxM2M2Yi8x
L3IzcXRSZ29ZUVhqVEk3YXo2cDRXUlJLS1BsUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMv
ZDViZjcyLTMxMTUtNGM3MS1hMWJmLWIwNjE5NGQxM2M2Yi8xL3FUbk1GaUh1TUJD
dW1PRW52U1ZLZURQOUtDYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAB+FcwMEAB+FdTANBgkqhkiG9w0B
AQsFAAOCAQEAQTOVQCsDDq0UaUq8izZfdU3LZ3BhNzDORRMmsTyDQMmI77NIM3eW
6ALMplpSv/6uy9t/PCXzKy8PKppAGCgY28pa0xHRyuUQWVRwqreSlsW4Ff+1rS8C
EMseSZ3b82K7VHV+6GpqNsC2A2hJdUYCyGQb/rwN9quT9XVxvHl9Xu350IbX+KcX
ZEDkKBs6RJsXB7b/uUe2sOATgkq9pLOiGa6jSm4Cjcgv2ew129XP5sP8jJGdIY5c
IbO2VWbjw+pK6jW0NYB/tcip1Fc68sa5mPwrYsI70OK+k5piX4YaCS1bBnkpTAMp
vbhg5LMBKAYBevLb9y6XOFyEfL5f7jyjCA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:22 2024 by rpki-client on console-fra.rpki-client.org