Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/qYVqnESAVJK2RpmgrRz4Heckirs.roa
File: qYVqnESAVJK2RpmgrRz4Heckirs.roa (raw, json)
Hash identifier: GsX6bC6DITmJYRyDFzSg0Oxuw+t8UfWrLa5yMEJDupQ=
Subject key identifier: A9:85:6A:9C:44:80:54:92:B6:46:99:A0:AD:1C:F8:1D:E7:24:8A:BB
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 088367DD
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/qYVqnESAVJK2RpmgrRz4Heckirs.roa
Signing time: Sat 01 Jan 2022 14:59:57 +0000
ROA not before: Sat 01 Jan 2022 14:59:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47629
IP address blocks: 31.40.176.0/23 maxlen: 23
31.40.174.0/23 maxlen: 23
31.40.184.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142829533 (0x88367dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Jan 1 14:59:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9856a9c44805492b64699a0ad1cf81de7248abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:01:83:84:89:39:35:84:10:27:e2:ce:35:2a:
b4:aa:de:70:f8:ab:39:c9:02:dd:41:65:ac:15:77:
c3:0a:4f:bf:6c:a2:57:78:af:bd:63:db:30:38:b3:
ed:c2:5e:42:e5:7a:8c:36:c0:39:61:83:3c:82:14:
13:79:56:3a:42:9b:d4:12:f5:fb:fd:89:03:b0:e4:
b8:a2:7a:fe:71:90:29:42:61:a2:ef:fd:c2:4b:04:
89:34:a1:03:a7:ab:af:88:bb:e2:a5:f5:a3:f8:69:
be:00:98:12:56:78:fe:a8:05:67:26:24:49:f9:a0:
ec:4c:16:3b:4b:a2:1e:0d:e9:3b:4c:83:a6:41:e9:
ff:77:f9:73:50:c7:61:db:a6:8e:ea:71:07:1a:50:
be:27:33:c4:07:74:2e:b8:e3:ca:08:b3:2f:35:02:
8b:7c:f5:8b:79:5a:63:be:36:9d:89:60:d2:03:4d:
84:6b:b1:6e:da:ec:37:0e:d2:99:a2:08:aa:65:12:
c4:e8:83:f8:84:db:03:3c:b7:fb:d0:fd:94:84:87:
a3:1c:ea:90:d0:1b:a7:93:d4:ad:9b:09:85:1c:bb:
83:1e:28:ae:2f:22:9a:66:d3:56:68:46:e8:be:02:
ff:76:49:df:2b:40:fb:5c:3a:f4:ff:c7:7b:f5:a6:
ff:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:85:6A:9C:44:80:54:92:B6:46:99:A0:AD:1C:F8:1D:E7:24:8A:BB
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/qYVqnESAVJK2RpmgrRz4Heckirs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.174.0-31.40.177.255
31.40.184.0/22
Signature Algorithm: sha256WithRSAEncryption
32:cd:e2:2e:6f:63:9e:d5:52:a0:d0:64:99:bf:a9:b0:f6:67:
ca:b1:95:ce:8a:cb:cb:66:1d:be:4f:50:88:ce:14:ae:4a:52:
ae:5c:0f:8a:53:bf:81:44:4f:ca:63:c9:26:f2:0f:3b:34:58:
7a:0e:80:bb:91:81:b3:10:74:14:a0:da:79:a5:e0:8c:f1:e2:
96:5a:f4:c6:36:2d:69:98:c4:36:f3:a2:12:8e:08:d6:64:04:
4e:c4:db:b8:c7:b0:27:e0:de:8f:9d:2e:86:c4:d7:25:20:f1:
99:07:c8:a7:43:63:b3:c8:11:43:23:d6:02:97:97:ef:fc:ff:
b7:70:6a:04:7c:54:0d:6a:de:86:5a:c4:87:e7:c1:7d:8a:a8:
29:b5:75:a2:f8:62:71:00:c8:94:8c:63:52:ec:8f:26:9b:60:
f8:90:4e:78:1e:d4:4a:2e:4e:3e:ef:eb:16:26:f2:17:2e:93:
7a:2d:7e:4d:e2:5c:23:30:73:dc:23:2c:4d:64:20:0b:63:1b:
ea:84:26:90:13:c7:ba:fd:e9:2b:cb:47:85:f8:bc:47:08:0e:
3a:2a:e6:ef:2c:19:cd:20:81:18:e8:a3:66:f8:0b:ca:40:90:
76:b7:18:ec:e5:85:1e:96:e5:2a:10:51:f1:fb:24:2d:fb:25:
f1:aa:ed:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:44:56 2025 by rpki-client