Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/DL_cZPdymHTQUgrcNKM4CMr02cM.roa
File: DL_cZPdymHTQUgrcNKM4CMr02cM.roa (raw, json)
Hash identifier: jIl+Szy0NKStz3sadrGp1AoWVA2oFLAGC1/BlyaD7qQ=
Subject key identifier: 0C:BF:DC:64:F7:72:98:74:D0:52:0A:DC:34:A3:38:08:CA:F4:D9:C3
Certificate issuer: /CN=3025fd339aa64504f289a00c4173c55a0002eb44
Certificate serial: 01806308
Authority key identifier: 30:25:FD:33:9A:A6:45:04:F2:89:A0:0C:41:73:C5:5A:00:02:EB:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCX9M5qmRQTyiaAMQXPFWgAC60Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/DL_cZPdymHTQUgrcNKM4CMr02cM.roa
Signing time: Wed 02 Feb 2022 15:59:57 +0000
ROA not before: Wed 02 Feb 2022 15:59:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210879
IP address blocks: 31.216.61.0/24 maxlen: 24
2a11:4980::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25191176 (0x1806308)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3025fd339aa64504f289a00c4173c55a0002eb44
Validity
Not Before: Feb 2 15:59:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0cbfdc64f7729874d0520adc34a33808caf4d9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:54:5a:72:8e:68:f3:bf:3e:a9:49:b1:d5:41:
90:cd:12:35:0e:b5:d8:da:b6:78:61:1a:c1:b1:d7:
d2:f7:f8:9e:ba:6f:07:a0:ef:0e:99:2e:26:96:fd:
f9:ef:80:cc:84:ad:1e:f1:5e:03:a7:b1:52:fa:40:
75:73:92:e5:9c:98:04:21:1c:af:d9:69:4a:e3:f4:
15:f2:3d:0e:43:49:fb:3b:6d:11:68:08:1d:a2:a9:
b7:74:c3:fc:f9:3c:d5:71:68:61:7a:d6:18:20:d4:
30:e4:1a:7c:b9:fe:f7:43:ce:1f:77:6d:50:41:13:
94:10:7d:ec:8d:df:25:f0:60:de:c9:79:ce:97:7c:
89:ea:0f:39:b7:99:bb:24:da:2d:a8:67:1f:d4:08:
e8:04:ca:db:5e:86:31:c7:40:38:19:77:96:6e:c6:
50:f7:7b:30:1e:4c:64:a8:bd:48:60:5e:15:45:fa:
fa:61:d7:4e:19:6e:45:9b:3a:6c:9a:f8:8e:d8:37:
26:b4:f9:71:81:ba:d4:2e:e2:2c:c0:1f:9e:de:25:
33:df:e3:ad:8d:5b:9b:b6:2a:42:8c:30:17:b1:e5:
85:2c:f3:35:d7:10:a4:31:91:74:6b:cf:7a:7d:bc:
41:fd:97:00:b0:b2:da:ba:86:85:52:44:73:0f:85:
67:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BF:DC:64:F7:72:98:74:D0:52:0A:DC:34:A3:38:08:CA:F4:D9:C3
X509v3 Authority Key Identifier:
keyid:30:25:FD:33:9A:A6:45:04:F2:89:A0:0C:41:73:C5:5A:00:02:EB:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCX9M5qmRQTyiaAMQXPFWgAC60Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/DL_cZPdymHTQUgrcNKM4CMr02cM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.61.0/24
IPv6:
2a11:4980::/29
Signature Algorithm: sha256WithRSAEncryption
ab:68:e2:d7:6f:26:6f:02:ff:e4:9a:3e:ca:61:08:fb:8a:ba:
55:f2:f5:46:82:bb:dd:3e:40:fd:1a:47:77:7c:7c:9f:06:2e:
ed:88:a3:6b:82:b7:58:12:7d:b2:11:1f:9d:1f:39:5d:6a:04:
44:de:40:0d:f8:f2:53:98:bd:73:ff:b7:0b:46:34:ca:1f:71:
b8:80:8b:7c:92:91:ff:57:a3:db:c4:97:8d:a6:b8:2b:f5:21:
9e:54:c1:e0:44:6b:76:55:73:f2:f8:4b:74:f8:98:39:d5:76:
04:38:77:00:18:d0:55:33:1d:db:4e:70:67:b4:91:8c:b1:6e:
f4:34:f9:5c:87:4b:cc:28:06:85:ce:e2:a6:fe:d0:64:ba:d6:
ca:fd:74:83:5f:a6:18:98:b8:bd:1d:e5:f1:de:1b:11:62:86:
63:ed:94:a5:86:05:61:8b:2d:ad:2f:46:b7:8e:1d:fe:0a:74:
5a:12:71:9d:48:bc:b4:77:aa:ce:e2:5f:69:f8:4a:30:fe:f3:
24:f3:8c:25:1a:c3:46:38:5f:51:85:21:ca:5e:d9:5a:4d:61:
e0:d0:96:d8:94:e7:ee:81:1b:d7:36:07:43:4c:f4:cd:c2:cc:
0b:5e:e8:1a:b9:ae:2c:af:bf:6a:3d:f7:63:dd:88:12:3f:73:
be:32:a6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:31:30 2025 by rpki-client