Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/1-v7Z9K3aUj8RMye-T_4x1F3WVrY.roa
File: 1-v7Z9K3aUj8RMye-T_4x1F3WVrY.roa (raw, json)
Hash identifier: DVPa6V9V7xaMMb/yU6CM3mptS8Ho6TOlvudAYoff6T0=
Subject key identifier: FA:FE:D9:F4:AD:DA:52:3F:11:33:27:BE:4F:FE:31:D4:5D:D6:56:B6
Certificate issuer: /CN=4081f85602b1168925d83eb3ca61609f357956a6
Certificate serial: DB7DEB
Authority key identifier: 40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/1-v7Z9K3aUj8RMye-T_4x1F3WVrY.roa
Signing time: Thu 24 Feb 2022 07:30:35 +0000
ROA not before: Thu 24 Feb 2022 07:30:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49100
IP address blocks: 31.130.190.0/24 maxlen: 24
31.130.191.0/24 maxlen: 24
31.130.188.0/24 maxlen: 24
31.130.189.0/24 maxlen: 24
31.130.187.0/24 maxlen: 24
31.130.177.0/24 maxlen: 24
31.130.178.0/24 maxlen: 24
31.130.179.0/24 maxlen: 24
31.130.184.0/24 maxlen: 24
31.130.185.0/24 maxlen: 24
31.130.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14384619 (0xdb7deb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4081f85602b1168925d83eb3ca61609f357956a6
Validity
Not Before: Feb 24 07:30:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fafed9f4adda523f113327be4ffe31d45dd656b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8d:7d:e4:c2:49:1f:cd:31:62:98:96:42:1f:
52:73:3a:86:5f:2f:d7:b8:9d:a5:56:ac:b7:ad:c1:
8f:67:b4:41:3b:9e:e1:65:3e:44:95:ef:20:f3:7d:
cb:18:89:6d:a7:1c:8f:52:5e:9b:84:44:b6:73:90:
a0:bc:f6:10:75:76:72:f7:81:3b:2f:2c:6c:f5:93:
d3:3a:a7:d5:d3:a7:0b:d7:ea:06:34:67:5d:f7:41:
95:d0:0f:e1:3b:20:02:04:60:54:dd:e3:d0:18:e0:
1b:10:85:c9:38:58:45:25:f8:a6:77:41:bd:76:e8:
2d:50:a7:e5:40:ea:a9:05:5a:1d:ec:de:c8:26:c1:
bd:d8:55:42:17:5b:3a:6b:8b:70:04:60:4a:87:21:
97:55:02:bf:18:2a:c6:e5:53:10:cb:6b:ee:39:8c:
b0:ee:b1:5d:99:98:3f:69:2c:8a:ef:7f:74:d4:d8:
15:ad:2d:50:4a:42:72:90:9f:3f:ae:95:4e:5f:15:
1f:62:0a:df:db:d9:37:bd:3c:47:8b:89:d4:24:51:
d2:31:50:5d:df:92:56:6c:67:00:20:73:a1:51:ee:
1c:a0:0d:af:1a:ca:8e:43:41:a7:89:69:73:fd:59:
c9:c8:66:da:93:51:cd:bd:9c:0b:5d:e9:a1:56:fa:
7f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FE:D9:F4:AD:DA:52:3F:11:33:27:BE:4F:FE:31:D4:5D:D6:56:B6
X509v3 Authority Key Identifier:
keyid:40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/1-v7Z9K3aUj8RMye-T_4x1F3WVrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.177.0-31.130.179.255
31.130.184.0/21
Signature Algorithm: sha256WithRSAEncryption
19:3f:58:5d:f7:a3:cb:99:7e:5e:ac:ba:00:2a:48:8c:d2:18:
b7:41:01:de:74:bd:32:5d:52:e6:1e:43:e9:81:10:04:0e:3d:
b6:18:81:44:f9:9a:c1:78:30:85:c0:2a:b9:43:d1:9b:1e:ee:
a2:2f:f2:c8:f5:70:46:30:58:07:29:22:48:f8:da:b0:6f:c2:
d3:b2:c9:b3:45:9b:6d:49:2f:c9:a6:90:7d:3c:90:63:23:64:
10:7c:74:f2:87:f5:f1:00:5d:1e:e3:bc:38:cd:5d:b1:9b:0e:
08:8d:e0:08:ab:44:34:10:55:28:43:3a:92:dd:ea:d6:a5:0d:
62:1c:b6:d9:36:d3:d2:c4:04:05:4e:93:f2:65:ce:9f:6a:df:
5b:75:21:6c:65:64:46:10:1a:21:8e:da:27:93:34:12:7c:53:
8e:b0:86:b3:a5:91:a7:d8:1c:80:56:1a:53:9e:8c:a5:83:a5:
1a:23:0c:20:3b:ec:3e:41:db:62:5a:b7:99:c3:10:ff:bf:24:
d4:03:27:50:11:38:81:3e:b4:71:35:41:8a:c4:48:56:50:6e:
19:61:20:82:b2:4f:f2:fa:ca:81:cc:e5:76:5c:d2:9b:0f:ad:
b5:5c:d8:08:44:c7:99:e6:ce:30:ea:0f:2b:91:9b:5b:1c:c8:
2e:31:2e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:55:19 2025 by rpki-client