Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/H0OTplec1pmFP-vOCRXZYv73DIY.roa
File: H0OTplec1pmFP-vOCRXZYv73DIY.roa (raw, json)
Hash identifier: WBN+o1Wg2YCq3VMQKoFVzHNZH9n3lomQhRGGUGUohkY=
Subject key identifier: 1F:43:93:A6:57:9C:D6:99:85:3F:EB:CE:09:15:D9:62:FE:F7:0C:86
Certificate issuer: /CN=fb79c26f31575345159c840ed278a878a9256615
Certificate serial: 01856CCACDBA74C195BD7E93D6861FD3ED8C
Authority key identifier: FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/H0OTplec1pmFP-vOCRXZYv73DIY.roa
Signing time: Sun 01 Jan 2023 10:05:08 +0000
ROA not before: Sun 01 Jan 2023 10:05:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208685
IP address blocks: 31.3.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:cd:ba:74:c1:95:bd:7e:93:d6:86:1f:d3:ed:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb79c26f31575345159c840ed278a878a9256615
Validity
Not Before: Jan 1 10:05:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f4393a6579cd699853febce0915d962fef70c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:73:b9:83:5a:71:4f:14:3e:ad:8d:52:5e:79:
c3:63:b2:fb:9b:d3:4f:a5:b7:f0:01:f5:f7:92:88:
9b:c8:75:a6:73:28:d1:86:d4:f7:69:66:55:6d:01:
47:91:b5:f4:f0:9a:5c:e0:c5:a8:e9:88:37:38:fa:
86:09:f2:7c:36:7e:c3:93:7b:d2:dd:a2:05:7f:11:
4b:e2:b1:67:50:9d:bf:89:64:b3:27:1a:8b:c8:a5:
37:4b:c9:6b:bb:88:9f:87:9c:bd:1c:db:0f:f4:f2:
25:11:6e:a4:89:9f:ad:d8:20:2b:9c:4c:9a:7e:b6:
6f:9e:57:d2:49:13:00:ce:5c:cb:be:20:e5:6e:d9:
f0:05:ae:ca:9c:74:35:5f:7d:b5:de:04:c0:a9:97:
94:ee:cd:88:cd:b4:75:d3:1e:1c:12:d3:43:67:57:
52:18:bf:2d:6a:86:a5:96:07:4d:10:a0:05:da:70:
67:30:d3:cd:85:fd:28:4f:b2:5b:3d:f3:24:4d:8c:
7e:a4:40:6a:76:27:ed:67:88:03:0a:ea:96:41:b4:
8e:a1:1a:82:5a:26:7b:10:5d:d9:20:e3:af:fc:3d:
de:43:ad:51:28:f8:19:a5:03:99:61:f8:8f:65:13:
8a:c9:91:4c:e3:1f:2f:e6:54:c7:bd:e8:df:4a:23:
ef:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:43:93:A6:57:9C:D6:99:85:3F:EB:CE:09:15:D9:62:FE:F7:0C:86
X509v3 Authority Key Identifier:
keyid:FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/H0OTplec1pmFP-vOCRXZYv73DIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.156.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:96:ea:96:d7:84:40:53:aa:10:1b:7c:b7:c1:65:95:a1:5a:
c1:4e:dd:fc:6c:e3:df:2a:7a:3d:4d:bf:1b:44:83:4b:37:e0:
16:96:06:4d:1d:ea:69:07:91:f4:09:fd:81:10:cb:76:d9:90:
bd:11:42:3b:00:f0:d8:bb:0d:94:6b:12:26:5c:82:b8:43:1b:
7f:b7:98:12:a3:56:c1:c2:b2:a7:f6:67:54:c3:4a:36:11:8d:
fb:80:46:41:d0:ea:82:6f:43:71:62:25:a0:34:e8:59:3d:a8:
f1:da:e7:f0:47:17:bc:a9:58:d5:1e:71:cc:3c:81:ae:93:63:
fb:04:8a:04:0c:05:81:eb:68:19:46:28:b6:d0:01:46:6d:28:
32:4a:02:d4:f6:40:a4:ec:14:8b:9f:ac:c6:de:92:55:0e:67:
4a:5f:a7:ba:e1:fe:c4:36:e6:dc:e9:28:72:99:9a:35:f9:f5:
c3:38:0d:c8:d7:f2:9c:0e:7f:51:e0:a6:e0:53:ad:24:88:49:
92:87:f0:67:57:df:b9:30:aa:4d:44:ff:19:5c:80:c5:3c:a6:
05:41:0a:4f:ca:ba:d9:62:11:84:7b:a4:f2:a5:26:9e:94:7a:
38:fb:aa:9c:57:36:f8:c0:74:9d:bd:7b:61:4e:54:20:d3:ba:
74:53:6e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:49:26 2025 by rpki-client