Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/b3er4Ol6juhHj4zJiGWMA0WetV4.roa
File: b3er4Ol6juhHj4zJiGWMA0WetV4.roa (raw, json)
Hash identifier: FweTGqRIVjqc7i3fDClwK78mMXAVuL5vRNPyVEAnR2k=
Subject key identifier: 6F:77:AB:E0:E9:7A:8E:E8:47:8F:8C:C9:88:65:8C:03:45:9E:B5:5E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01875726F070BFE977E52996BB039919E36A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/b3er4Ol6juhHj4zJiGWMA0WetV4.roa
Signing time: Thu 06 Apr 2023 15:19:42 +0000
ROA not before: Thu 06 Apr 2023 15:19:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210352
IP address blocks: 194.87.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:57:26:f0:70:bf:e9:77:e5:29:96:bb:03:99:19:e3:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 6 15:19:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f77abe0e97a8ee8478f8cc988658c03459eb55e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:28:cb:76:c4:25:f7:bf:ee:f7:82:08:ff:8b:
f9:2d:a9:35:de:11:23:da:f7:80:c0:f2:e2:e8:0f:
f4:0d:67:9a:2b:2d:a3:26:09:b7:cf:2a:c5:1f:a2:
8e:ee:d9:26:fb:9b:4f:fc:4a:62:a3:c7:00:66:d0:
f6:20:68:25:0d:8b:e1:ec:68:8d:21:67:ef:70:93:
8d:ac:cf:99:79:08:21:2c:96:34:97:72:ad:23:f7:
1a:c4:34:22:79:ee:a8:d6:d4:fb:1b:29:5c:6b:86:
f5:45:4c:b6:ff:b2:2d:76:93:a5:fb:b4:46:db:b3:
40:e4:94:04:3d:f6:25:6a:f6:8b:fc:5f:86:82:a0:
8a:d0:0a:de:70:e8:2c:e9:7e:f8:33:c3:b5:ee:86:
c2:6a:41:66:cd:34:42:24:66:28:89:57:7f:0b:dd:
0f:4a:4d:05:b4:0e:f8:c3:c5:76:45:be:bb:51:1c:
13:1e:38:71:27:53:7a:70:2a:36:29:3c:15:71:f7:
c1:6c:26:90:d0:10:87:47:3e:18:6c:65:e4:06:14:
91:cc:b1:d3:09:ae:61:4c:41:5f:d2:a8:df:0c:d1:
ba:47:ae:0d:ee:b2:c6:56:24:6a:93:41:8d:c2:dc:
a5:ef:90:69:46:d6:ff:fc:96:c0:92:60:4e:d3:0f:
87:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:77:AB:E0:E9:7A:8E:E8:47:8F:8C:C9:88:65:8C:03:45:9E:B5:5E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/b3er4Ol6juhHj4zJiGWMA0WetV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.31.0/24
Signature Algorithm: sha256WithRSAEncryption
46:65:38:4f:c0:8c:0a:6a:32:67:ae:95:81:38:df:56:3c:12:
af:a3:56:2a:16:6a:ae:98:65:83:44:08:d0:a2:fc:48:e0:a9:
f0:5c:27:94:b8:e4:75:79:cf:09:38:69:63:5e:80:26:59:73:
0b:09:ca:e2:7a:43:07:bf:40:d6:69:25:c6:39:5a:14:ff:99:
71:41:48:4f:31:5b:b2:77:7f:01:26:e9:34:1a:ae:71:ce:9b:
63:2b:04:c9:0a:53:55:93:a0:a5:be:60:fe:17:57:6c:53:57:
bf:20:2c:a8:70:4a:ec:7a:99:00:6e:8e:74:2d:0b:e7:d3:f0:
28:df:06:41:06:64:bc:fb:01:f4:ef:7d:40:44:ac:cf:63:98:
b9:6a:40:02:81:b6:18:fd:bc:1f:08:e0:6b:e5:ba:a5:0a:49:
3e:1a:1d:21:03:10:b6:98:e7:e0:98:57:f4:09:50:8d:95:e3:
ec:5e:64:c0:42:ba:b8:eb:b4:47:5f:9b:2a:22:a5:11:8a:f2:
c8:a0:28:e2:e8:fa:64:a9:51:d2:8b:56:42:ed:66:f9:48:c4:
9b:34:66:92:90:9b:ca:e1:1f:69:ea:d9:af:3a:e1:fd:3b:b4:
01:2b:e6:b0:2a:2a:25:4b:ff:40:bb:22:c8:e8:46:0d:95:94:
92:e3:9c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:23:20 2025 by rpki-client