Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/FMKkNzGb7GLg0ZLTljol-sLp3v0.roa
File: FMKkNzGb7GLg0ZLTljol-sLp3v0.roa (raw, json)
Hash identifier: u+hkc+uEo1hCSac0uCkzcn6eP15vbdXSgCqOPBaBaog=
Subject key identifier: 14:C2:A4:37:31:9B:EC:62:E0:D1:92:D3:96:3A:25:FA:C2:E9:DE:FD
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 018573220F55814A2D9284838AC0AC06A1EF
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/FMKkNzGb7GLg0ZLTljol-sLp3v0.roa
Signing time: Mon 02 Jan 2023 15:38:10 +0000
ROA not before: Mon 02 Jan 2023 15:38:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204791
IP address blocks: 31.40.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:22:0f:55:81:4a:2d:92:84:83:8a:c0:ac:06:a1:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Jan 2 15:38:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14c2a437319bec62e0d192d3963a25fac2e9defd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2c:4e:39:df:67:70:31:bb:fb:fa:c9:b9:5b:
9d:e7:d1:df:f2:10:00:b6:2a:a1:89:20:29:19:11:
b4:1e:5a:d2:ca:7d:57:23:0d:f7:f0:17:0a:c1:50:
55:1c:6c:aa:a3:a4:32:4b:a1:68:2d:10:be:b5:c0:
ab:35:5d:2c:0d:bc:81:42:a5:09:b0:ab:75:2d:89:
93:bd:c1:53:8d:93:cc:39:b6:5b:64:d8:27:71:3c:
53:2a:28:91:75:ba:31:cc:e1:75:2d:07:91:1e:53:
ce:60:fb:bb:79:85:84:86:d6:b9:2a:61:78:8e:e4:
5e:a7:cf:f6:2c:66:02:ab:46:8b:c6:a4:b2:1a:52:
4e:7a:77:84:9d:4b:ab:53:b0:98:9b:3b:a1:5d:45:
b0:0b:02:32:c2:dd:a9:0a:03:64:f4:8d:4f:33:b4:
28:81:a9:ca:91:a7:c2:7a:91:db:ae:52:ce:a6:27:
61:c1:6d:d8:ae:e3:7a:86:af:95:2f:58:55:f6:ec:
e6:bc:dc:dd:77:53:fe:8e:06:e3:e7:7e:3c:53:d3:
78:aa:cf:ac:a8:4b:fb:3a:3c:6f:58:b7:c4:df:58:
e6:96:dd:79:f7:73:f7:68:ec:13:2b:10:e4:0f:b5:
f0:2b:0b:04:8d:cc:e2:72:8b:b9:c2:67:9e:61:f4:
b8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C2:A4:37:31:9B:EC:62:E0:D1:92:D3:96:3A:25:FA:C2:E9:DE:FD
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/FMKkNzGb7GLg0ZLTljol-sLp3v0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.130.0/24
Signature Algorithm: sha256WithRSAEncryption
74:e5:e7:d0:e7:f3:39:ac:a3:1a:90:73:43:88:44:fe:ae:7e:
ec:1c:df:62:55:f9:95:e8:21:ca:9a:ab:bb:8a:bd:56:56:41:
cf:c7:c5:21:db:7d:c5:74:1b:1d:18:04:42:ca:ab:30:02:05:
53:a7:44:df:89:15:83:f7:b8:b5:5e:01:31:24:a6:bf:20:a7:
e4:52:cd:26:78:a8:97:fb:c9:c0:73:f1:49:74:c3:f9:fa:9b:
6b:f1:a3:c9:7d:c2:5a:8f:18:2b:3c:d6:86:f1:81:0d:3a:cb:
e0:f5:a7:a7:51:9b:74:b2:3c:7e:3e:84:68:c1:d0:a3:71:81:
15:a1:98:6a:1d:a0:eb:3d:a3:92:bf:b2:1d:5b:92:a9:4e:1d:
5e:0a:50:5f:01:fd:13:d2:93:00:c2:7b:39:d3:de:2d:fb:1f:
b8:d2:0c:dc:5c:81:75:f8:51:28:03:3e:65:89:87:b8:0c:1d:
f8:64:bc:65:65:ab:66:74:01:e9:1e:bd:e4:a0:5e:4f:0c:3e:
7e:86:f1:64:c7:6c:84:a5:52:a0:c6:5b:38:1f:ae:a5:ba:92:
97:3a:17:96:44:fe:e1:74:e7:36:6a:66:cf:01:81:c0:21:33:
10:65:1c:d8:1f:c6:f2:9e:e2:09:13:46:1f:99:3d:dc:87:ec:
5a:32:28:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:16:11 2025 by rpki-client