Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/6N19zdIarETaQ9qEhqqRvNRxzn4.roa
File: 6N19zdIarETaQ9qEhqqRvNRxzn4.roa (raw, json)
Hash identifier: wGlsjIJeSeodmIH8OnQDVypN5uNrCcE5T4W/uvWeFqw=
Subject key identifier: E8:DD:7D:CD:D2:1A:AC:44:DA:43:DA:84:86:AA:91:BC:D4:71:CE:7E
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 018573220E599539D63EA2ECCB7327A39607
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/6N19zdIarETaQ9qEhqqRvNRxzn4.roa
Signing time: Mon 02 Jan 2023 15:38:09 +0000
ROA not before: Mon 02 Jan 2023 15:38:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201776
IP address blocks: 31.40.165.0/24 maxlen: 24
31.40.162.0/23 maxlen: 23
31.40.167.0/24 maxlen: 24
31.40.172.0/23 maxlen: 23
31.40.178.0/23 maxlen: 23
31.40.132.0/24 maxlen: 24
31.40.138.0/24 maxlen: 24
31.40.137.0/24 maxlen: 24
31.40.135.0/24 maxlen: 24
31.40.134.0/24 maxlen: 24
31.40.143.0/24 maxlen: 24
31.40.142.0/24 maxlen: 24
31.40.140.0/24 maxlen: 24
31.40.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:22:0e:59:95:39:d6:3e:a2:ec:cb:73:27:a3:96:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Jan 2 15:38:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8dd7dcdd21aac44da43da8486aa91bcd471ce7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:52:4a:5c:af:b0:60:26:a6:f9:9a:90:a9:e4:
83:9c:61:e6:17:c4:f0:5b:1a:27:86:83:ea:d9:4b:
6c:27:fc:fb:07:84:50:9b:2a:f4:71:ad:44:91:fa:
86:65:b9:30:66:25:a8:7a:6b:37:e3:bd:a5:30:b0:
70:2e:13:81:c9:fd:ec:20:f8:9a:89:7e:97:23:9d:
4a:fb:82:4e:5a:40:68:ae:cb:fd:6c:f4:cc:6f:af:
62:4e:ba:05:be:c2:3f:76:ed:5e:8d:88:44:81:ee:
01:50:0d:e0:16:89:71:e3:56:1f:84:a8:1b:54:c6:
61:87:d7:f2:0e:1e:c5:94:61:59:89:93:e6:3e:33:
90:e9:ba:4a:92:ee:24:a8:91:95:90:18:55:5d:98:
15:38:6c:8c:e2:bb:bb:a5:9d:84:87:ee:c1:b1:24:
38:5e:1e:68:ca:25:04:a5:b1:2b:b5:b2:14:98:33:
87:3d:56:3d:2d:43:5f:ce:df:2b:f7:d3:76:a4:5f:
bc:b1:e1:a8:cb:12:24:d2:d9:2e:bc:53:cf:10:79:
54:c5:2d:32:31:c9:cf:96:e8:c5:24:85:61:74:d3:
33:b3:74:32:eb:d7:5a:5f:9b:c8:3a:c3:bd:91:bd:
bf:9c:1c:39:ab:64:27:e1:a3:42:40:37:86:42:d7:
be:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DD:7D:CD:D2:1A:AC:44:DA:43:DA:84:86:AA:91:BC:D4:71:CE:7E
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/6N19zdIarETaQ9qEhqqRvNRxzn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.132.0/24
31.40.134.0/23
31.40.137.0-31.40.138.255
31.40.140.0/24
31.40.142.0/23
31.40.151.0/24
31.40.162.0/23
31.40.165.0/24
31.40.167.0/24
31.40.172.0/23
31.40.178.0/23
Signature Algorithm: sha256WithRSAEncryption
74:21:33:fe:9a:ef:f3:8b:e0:d4:02:d8:bf:06:5d:28:31:30:
aa:59:15:3f:31:58:55:e3:9f:86:fe:d3:49:20:3b:53:ee:8d:
c6:f9:2c:31:03:bb:65:8a:55:4f:8c:86:29:78:ea:97:dd:c7:
8e:77:be:5f:57:18:bf:a1:6a:16:a7:15:a6:93:46:72:0a:f9:
3f:03:8d:dc:22:c4:51:9c:87:e4:e0:7d:cb:73:94:de:ae:6e:
03:dd:51:e7:16:b7:15:a0:42:02:db:73:bc:bc:49:62:c9:2a:
ac:65:9c:d8:e8:18:4d:16:9b:34:5f:43:d0:9a:a2:85:61:ac:
cc:91:31:13:83:be:31:7f:35:cd:e4:ce:ef:b7:fb:6d:5f:40:
72:6f:1f:6f:83:87:90:4a:34:90:fe:f6:cc:c1:a5:76:c6:06:
78:e4:c3:12:21:9f:d1:9e:49:39:76:f1:2d:b0:cf:69:88:7e:
8c:31:4a:fb:0d:f7:a2:ba:b8:bf:29:97:da:11:33:24:a6:5a:
b9:f6:d1:65:dc:fe:89:3e:34:a2:8d:05:38:f0:ba:d2:79:8a:
3b:c3:e7:67:a8:5e:0d:78:e9:e4:b6:ce:46:13:65:0d:8a:cc:
9f:a8:8a:5b:8e:aa:cd:5c:ba:ec:4c:4d:0d:4d:f3:ed:41:b1:
26:0b:3c:db
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgISAYVzIg5ZlTnWPqLsy3Mno5YHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYWY1YzJlNWVkYzE5NzgzNGQwN2YzNDU5NjJiMDc0NWJl
ZTY2ZDcwHhcNMjMwMTAyMTUzODA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGRkN2RjZGQyMWFhYzQ0ZGE0M2RhODQ4NmFhOTFiY2Q0NzFjZTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlJKXK+wYCam+ZqQqeSDnGHmF8Tw
WxonhoPq2UtsJ/z7B4RQmyr0ca1EkfqGZbkwZiWoems3472lMLBwLhOByf3sIPia
iX6XI51K+4JOWkBorsv9bPTMb69iTroFvsI/du1ejYhEge4BUA3gFolx41YfhKgb
VMZhh9fyDh7FlGFZiZPmPjOQ6bpKku4kqJGVkBhVXZgVOGyM4ru7pZ2Eh+7BsSQ4
Xh5oyiUEpbErtbIUmDOHPVY9LUNfzt8r99N2pF+8seGoyxIk0tkuvFPPEHlUxS0y
McnPlujFJIVhdNMzs3Qy69daX5vIOsO9kb2/nBw5q2Qn4aNCQDeGQte+CQIDAQAB
o4ICTTCCAkkwHQYDVR0OBBYEFOjdfc3SGqxE2kPahIaqkbzUcc5+MB8GA1UdIwQY
MBaAFB6vXC5e3Bl4NNB/NFlisHRb7mbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODIt
NGEzNGMxYmJhYjJiLzEvNk4xOXpkSWFyRVRhUTlxRWhxcVJ2TlJ4em40LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODItNGEzNGMxYmJhYjJi
LzEvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQAHyiEAwQB
HyiGMAwDBAAfKIkDBAAfKIoDBAAfKIwDBAEfKI4DBAAfKJcDBAEfKKIDBAAfKKUD
BAAfKKcDBAEfKKwDBAEfKLIwDQYJKoZIhvcNAQELBQADggEBAHQhM/6a7/OL4NQC
2L8GXSgxMKpZFT8xWFXjn4b+00kgO1Pujcb5LDEDu2WKVU+Mhil46pfdx453vl9X
GL+hahanFaaTRnIK+T8DjdwixFGch+TgfctzlN6ubgPdUecWtxWgQgLbc7y8SWLJ
KqxlnNjoGE0WmzRfQ9CaooVhrMyRMRODvjF/Nc3kzu+3+21fQHJvH2+Dh5BKNJD+
9szBpXbGBnjkwxIhn9GeSTl28S2wz2mIfowxSvsN96K6uL8pl9oRMySmWrn20WXc
/ok+NKKNBTjwutJ5ijvD52eoXg146eS2zkYTZQ2KzJ+oiluOqs1cuuxMTQ1N8+1B
sSYLPNs=
-----END CERTIFICATE-----
Generated at Sat Apr 19 03:17:15 2025 by rpki-client