Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/fskaCnCcp22H0wChwJxx1-Pfvss.roa
File: fskaCnCcp22H0wChwJxx1-Pfvss.roa (raw, json)
Hash identifier: E7lirjXvVoOADdAhu5YPdB/3cYQ1rLGsIIXYPrzYkfA=
Subject key identifier: 7E:C9:1A:0A:70:9C:A7:6D:87:D3:00:A1:C0:9C:71:D7:E3:DF:BE:CB
Certificate issuer: /CN=4081f85602b1168925d83eb3ca61609f357956a6
Certificate serial: 0187E5FDDC271BEFCC64F33CA7796AA3D9DF
Authority key identifier: 40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/fskaCnCcp22H0wChwJxx1-Pfvss.roa
Signing time: Thu 04 May 2023 09:00:32 +0000
ROA not before: Thu 04 May 2023 09:00:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49100
IP address blocks: 31.130.190.0/24 maxlen: 24
31.130.191.0/24 maxlen: 24
31.130.188.0/24 maxlen: 24
31.130.189.0/24 maxlen: 24
31.130.187.0/24 maxlen: 24
31.130.176.0/22 maxlen: 22
31.130.176.0/24 maxlen: 24
31.130.177.0/24 maxlen: 24
31.130.178.0/24 maxlen: 24
31.130.179.0/24 maxlen: 24
31.130.184.0/24 maxlen: 24
31.130.184.0/21 maxlen: 21
31.130.180.0/24 maxlen: 24
31.130.185.0/24 maxlen: 24
31.130.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e5:fd:dc:27:1b:ef:cc:64:f3:3c:a7:79:6a:a3:d9:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4081f85602b1168925d83eb3ca61609f357956a6
Validity
Not Before: May 4 09:00:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ec91a0a709ca76d87d300a1c09c71d7e3dfbecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9f:bc:c9:8c:89:f0:5b:ea:dd:6f:79:db:04:
96:99:b5:44:c8:0f:75:d4:20:30:be:59:9d:56:08:
99:ec:a7:1f:53:29:99:0d:59:09:f1:f2:40:7c:c6:
d8:7f:89:f9:ca:12:27:94:a0:69:6f:e8:e7:79:1b:
36:05:a5:83:45:12:42:04:32:84:b4:94:59:2d:ed:
f4:d1:2a:ae:ee:4d:cb:d7:90:55:ba:2e:5d:58:34:
92:a8:3b:7e:74:5c:ff:68:4c:89:96:5a:14:20:3f:
4f:9e:6d:99:2b:c7:cc:1d:55:63:25:26:cb:94:15:
a6:71:66:0a:f6:bf:b9:3b:7c:86:05:73:32:cc:9f:
df:01:2d:ad:2c:26:6c:2e:4a:3e:c3:04:0f:3e:e7:
32:55:95:0e:67:a0:1a:09:8f:d1:eb:54:2f:a7:c9:
4f:28:bf:49:47:8c:b3:ce:57:30:fc:e7:f3:bf:41:
83:9f:7c:6e:26:e7:8f:d0:4a:f6:8a:c3:2f:ca:fd:
81:bb:d8:56:ae:f4:8f:62:fc:1e:3d:b4:2d:03:29:
11:9f:c1:29:18:f3:d6:9c:1d:a5:4b:ae:9e:5e:39:
26:63:f1:c4:5d:50:04:1c:92:f1:a4:cf:1d:df:3f:
3e:21:66:5d:34:ae:fd:48:5b:98:69:c0:ba:66:99:
b8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C9:1A:0A:70:9C:A7:6D:87:D3:00:A1:C0:9C:71:D7:E3:DF:BE:CB
X509v3 Authority Key Identifier:
keyid:40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/fskaCnCcp22H0wChwJxx1-Pfvss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.176.0-31.130.180.255
31.130.184.0/21
Signature Algorithm: sha256WithRSAEncryption
4c:62:af:df:92:59:4a:a5:e5:29:0b:de:c5:e5:65:8b:37:19:
76:c3:89:96:b0:68:79:2b:e5:4d:77:76:da:e3:3d:5c:99:4c:
85:e2:69:bb:ec:64:ec:b7:3e:52:a2:49:eb:7e:26:1f:d6:ff:
52:12:2d:ff:a5:71:d1:ac:3a:6a:35:2b:c8:82:81:5e:f3:b2:
b8:f3:cf:c4:ce:67:a0:e4:dd:89:80:d4:fd:f5:91:e7:21:92:
8d:8b:78:78:5d:b1:cb:8b:fa:43:ce:5d:b1:8c:1f:7a:47:af:
18:25:06:5d:8d:1a:ea:0f:3b:1b:b0:94:37:ac:c7:91:12:3e:
ec:b3:31:aa:33:b1:c3:e7:6e:7d:d5:d7:33:ec:56:65:ff:f3:
78:cf:cd:ee:22:48:b2:0b:83:4b:d9:7d:d4:db:06:6c:c8:69:
24:2d:b1:03:fe:34:0c:13:04:b0:81:bf:8c:a5:ef:07:ce:14:
94:7b:bb:28:ed:2e:0c:87:9f:53:34:b9:f6:75:6f:4f:4c:f0:
05:f3:cd:10:1a:4d:e5:46:1d:5e:17:b6:c9:37:16:b9:38:61:
ce:15:bc:74:ad:8a:5f:83:7b:c0:83:c5:30:d9:dc:67:fc:c7:
74:01:23:fc:f8:01:2d:c1:ed:f8:f9:cd:17:d2:6c:79:7d:7f:
22:40:c7:d6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 18 02:01:26 2025 by rpki-client