Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/31NjuXaiDZJYju8XcZDru3XiDxw.roa
File: 31NjuXaiDZJYju8XcZDru3XiDxw.roa (raw, json)
Hash identifier: 8wx1hN/ywTJkmLOwxTb/HEtmVvqj/OLaKj4QSRMQtyM=
Subject key identifier: DF:53:63:B9:76:A2:0D:92:58:8E:EF:17:71:90:EB:BB:75:E2:0F:1C
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 01856F42AC0F9729969C5189327C874B07A9
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/31NjuXaiDZJYju8XcZDru3XiDxw.roa
Signing time: Sun 01 Jan 2023 21:35:18 +0000
ROA not before: Sun 01 Jan 2023 21:35:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61424
IP address blocks: 94.131.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:ac:0f:97:29:96:9c:51:89:32:7c:87:4b:07:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 1 21:35:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df5363b976a20d92588eef177190ebbb75e20f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:60:ff:72:7d:5d:91:35:87:c9:ef:20:b3:da:
9f:29:a3:ab:a5:dc:fe:41:df:78:70:81:07:79:9b:
42:89:9e:c5:20:e5:d7:8f:29:32:e0:cc:c8:30:86:
a9:7a:b5:04:c0:6c:27:d8:fb:f7:91:44:cc:6f:cd:
8f:63:c9:f9:c9:e6:17:ce:6e:f5:43:ce:eb:eb:c2:
39:dd:f7:a1:61:25:36:64:0e:16:c1:01:ca:27:da:
c5:3d:eb:49:27:28:73:33:bd:7f:e9:70:c8:c2:69:
a6:b1:2b:f6:e9:b7:4f:f9:2b:a7:20:84:07:77:69:
bb:27:fc:2f:80:d2:2b:76:b6:20:c9:cc:08:ba:f0:
e7:d9:fe:41:d2:9d:7a:91:5a:cc:e7:e1:0a:68:9d:
ab:70:b8:8c:04:ca:9b:fb:7b:fc:78:ec:c6:2e:5d:
5a:8b:2f:08:4f:3c:92:53:1c:f1:98:e5:11:a0:0f:
e5:8c:8a:aa:75:2a:80:2e:10:b7:65:03:b3:16:27:
6f:9f:14:92:2d:66:69:97:c4:d6:57:96:c9:ed:39:
69:fa:37:ea:55:22:9c:6d:59:a3:9b:ca:10:21:06:
db:6f:7d:00:05:b0:8b:19:76:0d:ab:bb:29:4e:7c:
26:5a:86:b6:60:c2:34:70:7c:c6:43:de:8c:59:ff:
be:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:53:63:B9:76:A2:0D:92:58:8E:EF:17:71:90:EB:BB:75:E2:0F:1C
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/31NjuXaiDZJYju8XcZDru3XiDxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.103.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:47:0d:88:9f:00:1a:d0:c1:81:7f:38:be:e3:54:d2:47:63:
27:35:d9:ef:fc:8b:d0:94:19:bb:85:53:a0:64:d0:7f:6e:ca:
d7:26:7b:b3:f5:92:da:ac:fa:9e:d5:3c:86:fd:90:52:2d:5c:
dd:cf:e1:f8:42:80:95:1d:62:1c:d4:8f:72:85:30:44:20:95:
cb:28:eb:0d:ca:fc:92:8d:e9:a3:19:6a:19:81:4e:45:22:14:
a0:75:53:86:35:34:8c:c6:74:cd:89:b8:fb:c1:bc:38:cb:30:
4c:0c:39:1a:c0:d8:b1:8f:ef:3b:40:a1:52:9f:61:4f:9a:46:
b9:1c:25:55:90:e3:43:c4:64:68:f0:a6:3d:43:44:57:b5:5f:
a5:26:9a:32:72:65:c3:3d:b9:f2:fd:15:05:2e:8a:c4:5f:5e:
d6:06:d5:55:b8:d7:2a:dd:9e:70:9c:4e:89:91:ca:d2:2d:a1:
cb:52:d9:31:cf:37:f7:00:29:19:5f:77:80:b3:13:5f:75:f1:
bf:8c:9e:21:8f:95:4a:89:00:ae:52:91:2b:82:f0:78:e5:f1:
1f:dc:2b:56:23:13:2b:5c:a5:fc:62:43:42:f9:a9:69:f6:63:
11:33:16:9d:2b:fa:f2:d4:14:c4:e5:ef:b6:05:52:6b:55:84:
f4:d2:57:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:14 2025 by rpki-client