Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/DiZYvSeHWOS8KRcnWqy44Dakpv8.roa
File: DiZYvSeHWOS8KRcnWqy44Dakpv8.roa (raw, json)
Hash identifier: efB5t5uHdbpMyM1S3oVvYAKRLnfymcToTJKtNV4QW9Q=
Subject key identifier: 0E:26:58:BD:27:87:58:E4:BC:29:17:27:5A:AC:B8:E0:36:A4:A6:FF
Certificate issuer: /CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Certificate serial: 0183EF8C9983C30A5C3C811280BBEC4FA2A3
Authority key identifier: 12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/DiZYvSeHWOS8KRcnWqy44Dakpv8.roa
Signing time: Wed 19 Oct 2022 09:21:52 +0000
ROA not before: Wed 19 Oct 2022 09:21:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39246
IP address blocks: 31.193.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ef:8c:99:83:c3:0a:5c:3c:81:12:80:bb:ec:4f:a2:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Validity
Not Before: Oct 19 09:21:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e2658bd278758e4bc2917275aacb8e036a4a6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:54:12:62:82:f7:4c:98:5c:19:3e:51:b7:fa:
18:a5:c6:6a:3d:4b:ab:22:b7:de:8c:a7:da:18:fe:
2f:a2:4b:55:7f:35:77:a0:63:10:81:00:89:6e:54:
2e:a8:14:10:46:8f:d8:38:bd:6a:bb:ef:7d:f7:a5:
fb:57:a4:88:f6:2c:70:3c:0f:16:b7:d8:55:47:0a:
3a:48:5b:e9:66:02:41:db:59:d7:2f:62:67:15:fe:
ce:0a:1a:b9:e2:30:02:a5:e6:8c:dc:e2:a2:15:12:
ed:dd:61:6c:fa:b4:39:e8:42:3a:13:6e:c2:10:a5:
d5:df:4c:d3:a3:a3:4a:54:8f:d7:a6:2a:ad:54:57:
27:cc:87:3e:2b:81:1e:c7:09:b1:91:3b:3d:f8:fc:
a5:67:78:15:e4:93:8c:f1:51:6d:f9:65:b9:09:9c:
ea:d4:c1:1e:28:1c:27:a7:77:ef:d4:d0:5b:dd:1a:
fa:7e:96:20:35:43:9e:cf:91:7c:72:bb:3b:0a:e2:
29:5f:30:74:09:24:34:f2:8e:26:20:be:d9:a1:79:
ec:52:31:ab:e8:0f:e7:ce:16:40:3b:dc:35:dc:b6:
f6:35:93:d6:31:89:7d:b7:5e:36:b9:c4:2a:97:8b:
e1:58:0c:0a:5d:82:2b:ad:e5:32:66:5d:13:1c:02:
6d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:26:58:BD:27:87:58:E4:BC:29:17:27:5A:AC:B8:E0:36:A4:A6:FF
X509v3 Authority Key Identifier:
keyid:12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/DiZYvSeHWOS8KRcnWqy44Dakpv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.189.0/24
Signature Algorithm: sha256WithRSAEncryption
26:d8:c9:37:35:e2:5b:43:d2:3e:c8:93:9c:c5:28:03:49:70:
fd:d0:24:cd:b8:ef:d2:67:23:bb:c5:7b:66:71:bf:5d:ff:ca:
0f:d4:1b:a6:df:53:b4:84:1e:52:39:e5:c9:ca:68:f2:6f:99:
3b:ee:8d:2b:8a:30:9f:a1:ed:fa:16:6c:6f:72:5a:0b:3b:71:
d7:c2:43:70:c9:49:77:cf:b2:d3:54:bb:7a:8c:f4:d2:45:09:
24:72:5f:1f:6a:1f:f2:cb:0f:99:e4:18:83:4e:5f:eb:f2:76:
44:93:0a:a0:1e:1a:0f:52:03:6f:10:11:c9:10:0d:72:22:a1:
6d:92:b7:43:41:f3:33:3b:f1:85:9b:19:cc:3b:bc:c0:f7:fe:
fe:63:bf:f4:38:20:53:d4:c8:74:5f:de:f8:33:de:15:c3:10:
c8:0a:48:5e:5e:cc:03:c2:9e:48:d4:2c:9a:c4:eb:1b:e7:fa:
11:cf:51:f1:45:42:66:e1:ab:45:d4:81:61:0a:ef:fa:a4:51:
19:99:d3:35:09:d1:5b:b2:5d:48:7c:63:c1:99:75:7b:90:6d:
97:e6:73:e4:de:b5:24:85:ed:d0:5c:2a:b8:62:81:88:f9:88:
e2:fb:f3:1f:54:a9:b0:fd:34:f2:58:ad:0c:54:8c:a6:7f:64:
29:c2:d2:f1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYPvjJmDwwpcPIESgLvsT6KjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyZWY5ZTQ5ZmVjZjI1MDllYjY3NjllZWUyY2RkNGE1MjUz
YjcxYzUwHhcNMjIxMDE5MDkyMTUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTI2NThiZDI3ODc1OGU0YmMyOTE3Mjc1YWFjYjhlMDM2YTRhNmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1QSYoL3TJhcGT5Rt/oYpcZqPUur
IrfejKfaGP4voktVfzV3oGMQgQCJblQuqBQQRo/YOL1qu+9996X7V6SI9ixwPA8W
t9hVRwo6SFvpZgJB21nXL2JnFf7OChq54jACpeaM3OKiFRLt3WFs+rQ56EI6E27C
EKXV30zTo6NKVI/XpiqtVFcnzIc+K4EexwmxkTs9+PylZ3gV5JOM8VFt+WW5CZzq
1MEeKBwnp3fv1NBb3Rr6fpYgNUOez5F8crs7CuIpXzB0CSQ08o4mIL7ZoXnsUjGr
6A/nzhZAO9w13Lb2NZPWMYl9t142ucQql4vhWAwKXYIrreUyZl0THAJt5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA4mWL0nh1jkvCkXJ1qsuOA2pKb/MB8GA1UdIwQY
MBaAFBLvnkn+zyUJ62dp7uLN1KUlO3HFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXUtZVNmN1BKUW5yWjJudTRzM1VwU1U3Y2NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS85YzI3YzItZmRiZS00ZTM5LWJhOTIt
MWQ1ZDk0NWEwNWEzLzEvRGlaWXZTZUhXT1M4S1JjbldxeTQ0RGFrcHY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS85YzI3YzItZmRiZS00ZTM5LWJhOTItMWQ1ZDk0NWEwNWEz
LzEvRXUtZVNmN1BKUW5yWjJudTRzM1VwU1U3Y2NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH8G9MA0G
CSqGSIb3DQEBCwUAA4IBAQAm2Mk3NeJbQ9I+yJOcxSgDSXD90CTNuO/SZyO7xXtm
cb9d/8oP1Bum31O0hB5SOeXJymjyb5k77o0rijCfoe36FmxvcloLO3HXwkNwyUl3
z7LTVLt6jPTSRQkkcl8fah/yyw+Z5BiDTl/r8nZEkwqgHhoPUgNvEBHJEA1yIqFt
krdDQfMzO/GFmxnMO7zA9/7+Y7/0OCBT1Mh0X974M94VwxDICkheXswDwp5I1Cya
xOsb5/oRz1HxRUJm4atF1IFhCu/6pFEZmdM1CdFbsl1IfGPBmXV7kG2X5nPk3rUk
he3QXCq4YoGI+Yji+/MfVKmw/TTyWK0MVIymf2QpwtLx
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:43 2023 by rpki-client on console-fra.rpki-client.org