Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/ry7QVxdJGA4JKOTsSfD84TayhAU.roa
File: ry7QVxdJGA4JKOTsSfD84TayhAU.roa (raw, json)
Hash identifier: 9MMNWpFz9Da/WUgrdHYQXsQkDxqyIKHoAsltCfJ+Gng=
Subject key identifier: AF:2E:D0:57:17:49:18:0E:09:28:E4:EC:49:F0:FC:E1:36:B2:84:05
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 0185DDAD01A4C3A89AB0EB065585BA11F17B
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/ry7QVxdJGA4JKOTsSfD84TayhAU.roa
Signing time: Mon 23 Jan 2023 08:09:40 +0000
ROA not before: Mon 23 Jan 2023 08:09:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209720
IP address blocks: 92.118.134.0/24 maxlen: 24
31.40.166.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:dd:ad:01:a4:c3:a8:9a:b0:eb:06:55:85:ba:11:f1:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Jan 23 08:09:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af2ed0571749180e0928e4ec49f0fce136b28405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:db:c2:af:29:ff:a8:cf:10:cd:46:37:83:6e:
a5:e7:b0:64:df:4e:09:76:45:a0:bd:d9:24:85:83:
c4:c5:07:88:90:b1:9f:49:21:2c:3d:86:bc:f1:21:
c9:94:4b:ce:09:f5:5f:62:92:6d:83:04:46:8d:c2:
b3:05:ab:2d:32:68:e9:b9:30:0e:8d:e8:3f:d4:9c:
4a:ff:cb:03:c6:f1:54:3e:3e:dd:6c:db:c6:03:ed:
6b:3e:4a:d6:99:bc:0c:ba:c4:e8:de:69:13:b2:66:
d5:12:32:52:57:57:8a:cb:66:76:91:09:4e:cb:d8:
57:7e:f0:fa:51:6b:47:a4:69:1d:04:aa:b0:63:a0:
98:22:a6:09:25:fc:ac:76:78:b1:e4:91:6d:8d:40:
bf:62:d0:98:bc:04:c9:c7:e0:6d:e5:83:e6:6c:d1:
2b:ab:1e:23:df:d7:bd:01:21:6d:14:f7:c5:a7:20:
77:90:48:da:c9:a9:6b:fa:43:25:b6:7a:2f:41:dd:
d4:70:ee:28:a7:db:34:78:95:1a:81:c7:22:c2:a3:
7b:c0:cf:36:98:9c:a3:8b:f4:be:47:4e:dc:8d:e4:
9c:8d:a0:76:38:78:ce:7b:4c:11:3a:42:70:0e:4e:
a3:ee:cb:f6:36:68:cb:0f:95:3d:ee:80:f1:44:ae:
7e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2E:D0:57:17:49:18:0E:09:28:E4:EC:49:F0:FC:E1:36:B2:84:05
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/ry7QVxdJGA4JKOTsSfD84TayhAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.166.0/24
92.118.134.0/24
Signature Algorithm: sha256WithRSAEncryption
69:2e:29:44:57:c2:be:f0:bb:43:27:c1:8b:95:22:8c:1e:1f:
72:5d:88:6a:65:76:fd:17:ae:3d:6c:d2:af:8b:78:34:9e:55:
4c:ea:ec:39:4b:7a:75:37:34:90:f5:40:99:ad:b5:dc:d8:73:
00:87:b4:10:5b:fa:84:0e:70:a0:b1:f0:43:e6:56:13:9a:a5:
24:17:37:b9:3c:85:b3:6d:de:fb:24:69:7d:8a:3d:81:32:76:
70:9b:74:84:84:69:1d:b8:a1:48:a5:c3:17:d4:c8:83:66:b8:
3e:a2:13:f8:fb:88:3e:c0:df:30:40:9e:33:9f:cb:21:06:ce:
41:59:d7:80:70:f6:36:61:b9:be:56:7c:d5:73:b9:bf:f1:3d:
9a:9f:a7:ca:26:83:f9:66:7b:1e:83:af:ba:eb:38:db:24:e0:
19:78:2e:08:c3:09:2d:da:a6:0f:b2:e3:a3:32:b4:d3:f3:a1:
54:c5:8d:b3:b9:bd:16:06:1a:cc:b1:f6:73:b7:33:5e:8b:38:
57:f9:ed:a1:c2:bb:b8:c2:b0:bf:27:85:3b:85:1d:de:26:ff:
c6:36:dd:7b:4c:3b:e5:7b:8f:f4:32:a3:87:49:81:5c:33:53:
f8:35:89:70:25:fd:87:f8:af:85:7d:1e:b0:d5:09:0c:4c:be:
17:bc:76:e8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYXdrQGkw6iasOsGVYW6EfF7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYWY1YzJlNWVkYzE5NzgzNGQwN2YzNDU5NjJiMDc0NWJl
ZTY2ZDcwHhcNMjMwMTIzMDgwOTQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjJlZDA1NzE3NDkxODBlMDkyOGU0ZWM0OWYwZmNlMTM2YjI4NDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNvCryn/qM8QzUY3g26l57Bk304J
dkWgvdkkhYPExQeIkLGfSSEsPYa88SHJlEvOCfVfYpJtgwRGjcKzBastMmjpuTAO
jeg/1JxK/8sDxvFUPj7dbNvGA+1rPkrWmbwMusTo3mkTsmbVEjJSV1eKy2Z2kQlO
y9hXfvD6UWtHpGkdBKqwY6CYIqYJJfysdnix5JFtjUC/YtCYvATJx+Bt5YPmbNEr
qx4j39e9ASFtFPfFpyB3kEjayalr+kMltnovQd3UcO4op9s0eJUagcciwqN7wM82
mJyji/S+R07cjeScjaB2OHjOe0wROkJwDk6j7sv2NmjLD5U97oDxRK5+NwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFK8u0FcXSRgOCSjk7Enw/OE2soQFMB8GA1UdIwQY
MBaAFB6vXC5e3Bl4NNB/NFlisHRb7mbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODIt
NGEzNGMxYmJhYjJiLzEvcnk3UVZ4ZEpHQTRKS09Uc1NmRDg0VGF5aEFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODItNGEzNGMxYmJhYjJi
LzEvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHyimAwQA
XHaGMA0GCSqGSIb3DQEBCwUAA4IBAQBpLilEV8K+8LtDJ8GLlSKMHh9yXYhqZXb9
F649bNKvi3g0nlVM6uw5S3p1NzSQ9UCZrbXc2HMAh7QQW/qEDnCgsfBD5lYTmqUk
Fze5PIWzbd77JGl9ij2BMnZwm3SEhGkduKFIpcMX1MiDZrg+ohP4+4g+wN8wQJ4z
n8shBs5BWdeAcPY2Ybm+VnzVc7m/8T2an6fKJoP5Znseg6+66zjbJOAZeC4Iwwkt
2qYPsuOjMrTT86FUxY2zub0WBhrMsfZztzNeizhX+e2hwru4wrC/J4U7hR3eJv/G
Nt17TDvle4/0MqOHSYFcM1P4NYlwJf2H+K+FfR6w1QkMTL4XvHbo
-----END CERTIFICATE-----
Generated at Tue Apr 22 01:04:30 2025 by rpki-client