Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/qLqwN4pgoWGjf54ZJvkumYEBS78.roa
File: qLqwN4pgoWGjf54ZJvkumYEBS78.roa (raw, json)
Hash identifier: U4UNrGpT0DWQIXeD9PWXAjWiOwXKPFdN57mGzWhFMQc=
Subject key identifier: A8:BA:B0:37:8A:60:A1:61:A3:7F:9E:19:26:F9:2E:99:81:01:4B:BF
Certificate issuer: /CN=9706aa905465586424f387fdbd83648b72d946de
Certificate serial: 0188905A88CDB427C33FFFF01190146BD540
Authority key identifier: 97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/qLqwN4pgoWGjf54ZJvkumYEBS78.roa
Signing time: Tue 06 Jun 2023 10:57:12 +0000
ROA not before: Tue 06 Jun 2023 10:57:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201964
IP address blocks: 31.187.84.0/22 maxlen: 22
31.187.87.0/24 maxlen: 24
185.55.84.0/22 maxlen: 22
2a02:4820::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:90:5a:88:cd:b4:27:c3:3f:ff:f0:11:90:14:6b:d5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9706aa905465586424f387fdbd83648b72d946de
Validity
Not Before: Jun 6 10:57:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8bab0378a60a161a37f9e1926f92e9981014bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ba:96:8c:4b:fc:6f:0d:ec:2a:03:bd:ec:38:
a5:81:e4:47:d1:bb:a1:8d:74:d8:89:20:3a:ea:dc:
3f:50:fa:4f:41:be:67:37:2d:75:8c:5e:a6:b6:58:
22:49:be:75:7f:47:4d:f3:20:a2:e0:e3:02:ad:ed:
7f:0e:8a:48:a2:bb:14:22:e9:87:ff:bd:ec:ad:68:
be:da:ef:14:91:b6:74:90:97:8a:e6:03:bc:60:5a:
a2:aa:9b:0c:70:f4:33:e3:d6:7d:07:78:12:34:f6:
7c:a1:06:eb:ca:bb:52:35:0a:6b:c6:8c:fd:53:8e:
cd:e0:2f:7b:be:e6:9b:02:d0:09:d4:a9:2d:0f:b4:
45:af:3e:1f:0c:e5:d3:35:50:72:c0:1c:5d:07:4c:
5c:e2:b4:a8:a0:2a:07:3b:dd:d4:ec:c2:51:16:fd:
da:bb:83:16:5c:0f:e0:0f:3a:86:e1:1b:48:58:3f:
6e:d6:45:55:64:7a:31:73:3d:7f:4c:6f:c7:c5:6f:
6d:1d:64:cc:e5:3c:90:8e:3f:9a:6a:98:e6:ba:0a:
96:12:96:30:da:b6:e2:09:db:9b:a1:d1:93:c0:e3:
ed:f0:78:cd:87:dc:60:91:5f:95:25:c0:cf:0a:ec:
6a:d1:3f:66:10:ed:55:e6:89:e0:31:5c:4a:ec:e0:
5e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BA:B0:37:8A:60:A1:61:A3:7F:9E:19:26:F9:2E:99:81:01:4B:BF
X509v3 Authority Key Identifier:
keyid:97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/qLqwN4pgoWGjf54ZJvkumYEBS78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.84.0/22
185.55.84.0/22
IPv6:
2a02:4820::/32
Signature Algorithm: sha256WithRSAEncryption
72:8c:e2:c8:1b:08:0e:5b:f2:d7:7d:2f:5b:14:2c:98:b8:02:
06:d2:ac:ab:3c:73:73:ef:9e:4f:4a:1a:c8:6a:65:19:3a:7e:
78:6e:a0:f9:77:fb:c7:d7:03:4c:40:91:8b:d5:c7:73:3d:4d:
cd:aa:74:10:ea:86:64:8e:10:a2:05:a8:c1:7c:f8:84:7d:40:
b9:f0:0d:e0:8b:0d:6d:25:20:b5:f4:35:c6:c5:de:de:8f:64:
35:64:5a:f1:2b:b3:21:18:1b:ca:73:9c:cc:35:19:ae:9d:29:
12:4e:7b:31:35:c9:61:d9:54:3b:05:bd:41:22:7e:d0:a7:68:
39:5a:71:14:e8:9c:63:38:dd:af:a2:b5:4a:9a:df:76:5c:89:
10:4f:dd:79:98:8c:5f:cd:2d:70:1b:5f:da:74:84:89:a0:f9:
fd:15:ac:20:b8:a9:b4:b4:2a:57:1d:54:1c:47:0b:59:4e:b0:
e0:e9:fa:76:57:4a:a9:e8:2e:33:33:26:56:8e:16:1e:ce:43:
4e:fe:c1:c7:63:bc:f2:40:bf:11:c7:75:92:df:7d:ee:de:68:
2b:ae:71:f9:79:8d:39:ec:12:df:af:b8:29:4c:de:ff:2a:37:
59:09:f5:e2:a5:d5:e7:9f:de:40:a8:24:c1:06:89:31:30:0d:
b3:38:b3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:29 2025 by rpki-client