Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/1-xd-G-vuPnyeKQAVZnvuR0Ws3EQ.roa
File: 1-xd-G-vuPnyeKQAVZnvuR0Ws3EQ.roa (raw, json)
Hash identifier: 8QPhOYDg31vRWFMsxqC8Z/BCjf4Il07bOoG6wLxaAkc=
Subject key identifier: FB:17:7E:1B:EB:EE:3E:7C:9E:29:00:15:66:7B:EE:47:45:AC:DC:44
Certificate issuer: /CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Certificate serial: 0184FE2E56B87351671BBACDFC04F25FFF29
Authority key identifier: 8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/1-xd-G-vuPnyeKQAVZnvuR0Ws3EQ.roa
Signing time: Sat 10 Dec 2022 22:36:00 +0000
ROA not before: Sat 10 Dec 2022 22:36:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56703
IP address blocks: 31.40.4.0/23 maxlen: 23
31.40.0.0/23 maxlen: 23
31.40.6.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:fe:2e:56:b8:73:51:67:1b:ba:cd:fc:04:f2:5f:ff:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Validity
Not Before: Dec 10 22:36:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb177e1bebee3e7c9e290015667bee4745acdc44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:11:10:62:7b:14:e5:6a:ec:f2:db:f8:74:43:
a7:a9:1c:e3:62:8c:36:76:8d:b4:be:45:2a:2c:c3:
e1:30:e0:fe:1e:83:73:97:29:f9:b1:a5:ba:d6:c4:
fe:06:ea:ec:5f:2c:49:15:bd:de:37:4e:55:a5:e1:
ae:a9:fc:25:18:e2:d2:e9:1e:f5:97:f7:d0:70:29:
a2:cd:67:b9:8e:6c:35:f5:e5:59:48:e3:48:d7:7d:
ce:5f:2c:91:1a:0f:0a:59:3a:ef:d9:43:d8:6b:e9:
75:8f:6e:e1:79:5f:d2:65:cc:64:e5:45:eb:1a:ed:
8f:c6:40:bb:c2:b1:c8:a0:0e:c3:a9:b2:26:80:e0:
bc:5d:60:76:1c:1a:40:71:04:ac:15:1f:19:8f:cc:
76:64:87:09:6f:97:4f:02:27:5b:79:f3:84:6d:c3:
d3:51:71:71:86:2d:e1:c1:fc:a5:7e:c0:6a:51:8e:
46:05:2c:98:6e:4b:0e:fd:61:63:cd:a0:59:24:d4:
83:e4:c7:0c:fe:8d:21:fa:41:ca:d3:84:4e:5c:f8:
d6:58:d5:48:34:e2:eb:ea:be:66:00:a2:39:b4:1b:
99:01:2f:3d:e5:09:8e:3e:6b:64:96:f3:98:fc:95:
88:3e:f3:f6:10:50:37:fc:6c:83:1b:f3:ed:fd:df:
3a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:17:7E:1B:EB:EE:3E:7C:9E:29:00:15:66:7B:EE:47:45:AC:DC:44
X509v3 Authority Key Identifier:
keyid:8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/1-xd-G-vuPnyeKQAVZnvuR0Ws3EQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.0.0/23
31.40.4.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:04:99:03:60:59:70:36:86:c4:2f:41:76:46:ff:95:e9:cf:
66:dc:c2:f7:bd:48:4b:7b:24:21:f1:32:5d:50:09:57:c0:7e:
db:26:48:ee:a5:8a:78:e6:fc:1b:15:27:28:94:0d:02:8e:6d:
f7:82:ae:f1:65:41:81:9d:d3:f1:b1:9e:8b:aa:8b:6d:d7:e2:
0f:d4:17:d5:9c:22:5d:df:a2:66:37:70:33:ca:de:10:38:32:
d6:e5:7b:d0:d3:d0:c4:06:e5:65:40:b1:63:42:b7:72:1a:30:
ba:d1:33:3e:4e:04:3b:9e:23:ee:52:92:88:34:9d:f5:8d:dc:
34:43:f3:ac:fc:f9:73:5b:f7:cf:c2:f1:f2:c0:8f:cf:a2:2e:
8a:5a:a1:56:b5:f7:80:5d:98:54:8d:54:cb:49:12:75:e4:00:
d5:d4:fb:2b:f6:10:89:53:38:e2:21:2c:0a:7e:d9:f4:10:ba:
61:20:c6:89:fc:10:67:20:02:fa:03:92:9e:f0:31:63:62:f9:
71:86:df:6e:2f:6b:97:23:70:89:4b:20:4a:09:00:12:e0:4b:
b5:16:0d:e9:b8:3a:41:c3:35:b4:df:0a:2e:e8:f8:08:b7:07:
05:a0:81:d0:bc:c6:c9:52:fd:13:ef:fd:a9:ba:30:66:60:53:
c5:2d:2a:06
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAYT+Lla4c1FnG7rN/ATyX/8pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmZTAyYjdlZWRmZmMzOGFiNWVhYjQ0MTYxNzJlN2Q4OGU5
YWQxZTIwHhcNMjIxMjEwMjIzNjAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjE3N2UxYmViZWUzZTdjOWUyOTAwMTU2NjdiZWU0NzQ1YWNkYzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApREQYnsU5Wrs8tv4dEOnqRzjYow2
do20vkUqLMPhMOD+HoNzlyn5saW61sT+BursXyxJFb3eN05VpeGuqfwlGOLS6R71
l/fQcCmizWe5jmw19eVZSONI133OXyyRGg8KWTrv2UPYa+l1j27heV/SZcxk5UXr
Gu2PxkC7wrHIoA7DqbImgOC8XWB2HBpAcQSsFR8Zj8x2ZIcJb5dPAidbefOEbcPT
UXFxhi3hwfylfsBqUY5GBSyYbksO/WFjzaBZJNSD5McM/o0h+kHK04ROXPjWWNVI
NOLr6r5mAKI5tBuZAS895QmOPmtklvOY/JWIPvP2EFA3/GyDG/Pt/d86VQIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFPsXfhvr7j58nikAFWZ77kdFrNxEMB8GA1UdIwQY
MBaAFI/gK37t/8OKteq0QWFy59iOmtHiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvai1BcmZ1M193NHExNnJSQllYTG4ySTZhMGVJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kMmMyMzUtYTFmNS00OTg0LWFhZGYt
NTE0NmYxM2I3MWExLzEvMS14ZC1HLXZ1UG55ZUtRQVZabnZ1UjBXczNFUS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOGUvZDJjMjM1LWExZjUtNDk4NC1hYWRmLTUxNDZmMTNiNzFh
MS8xL2otQXJmdTNfdzRxMTZyUkJZWExuMkk2YTBlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAR8oAAME
Ah8oBDANBgkqhkiG9w0BAQsFAAOCAQEArASZA2BZcDaGxC9Bdkb/lenPZtzC971I
S3skIfEyXVAJV8B+2yZI7qWKeOb8GxUnKJQNAo5t94Ku8WVBgZ3T8bGei6qLbdfi
D9QX1ZwiXd+iZjdwM8reEDgy1uV70NPQxAblZUCxY0K3chowutEzPk4EO54j7lKS
iDSd9Y3cNEPzrPz5c1v3z8Lx8sCPz6IuilqhVrX3gF2YVI1Uy0kSdeQA1dT7K/YQ
iVM44iEsCn7Z9BC6YSDGifwQZyAC+gOSnvAxY2L5cYbfbi9rlyNwiUsgSgkAEuBL
tRYN6bg6QcM1tN8KLuj4CLcHBaCB0LzGyVL9E+/9qbowZmBTxS0qBg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:57:55 2025 by rpki-client