Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/6tmeOvgaHsastUKdT9NvO-AIfKU.roa
File: 6tmeOvgaHsastUKdT9NvO-AIfKU.roa (raw, json)
Hash identifier: LrCullDYTMxvyEUDHalrlIzp4p3HyzQM2XHoduU6zrs=
Subject key identifier: EA:D9:9E:3A:F8:1A:1E:C6:AC:B5:42:9D:4F:D3:6F:3B:E0:08:7C:A5
Certificate issuer: /CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Certificate serial: 021BE0DD
Authority key identifier: 8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/6tmeOvgaHsastUKdT9NvO-AIfKU.roa
Signing time: Wed 06 Apr 2022 16:50:58 +0000
ROA not before: Wed 06 Apr 2022 16:50:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 91.226.224.0/24 maxlen: 24
31.40.4.0/24 maxlen: 24
31.40.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35381469 (0x21be0dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Validity
Not Before: Apr 6 16:50:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ead99e3af81a1ec6acb5429d4fd36f3be0087ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:22:05:05:b2:a0:f2:6a:32:26:41:a3:24:0f:
64:18:c4:3c:0a:42:bd:15:7e:44:2d:52:ee:7f:9c:
aa:f8:73:c8:04:5f:59:23:33:5c:24:cd:1e:5d:bd:
af:b6:f0:2c:2c:d3:9d:20:19:38:69:96:5d:6a:aa:
68:99:a8:ba:3a:37:03:8e:67:37:8f:13:f3:02:2c:
77:05:f2:6d:d3:ff:52:1a:dc:5c:c8:9a:62:5b:ff:
6c:69:74:49:70:89:31:11:dc:72:0a:54:50:af:fb:
4f:aa:a2:37:eb:16:8c:72:8b:e8:76:e5:70:6f:ee:
1f:fb:b1:89:6b:73:fa:dc:d7:6b:62:7d:51:bb:c1:
31:4b:c4:1b:b2:b4:39:86:23:6d:dd:be:c9:90:7e:
c8:18:5b:cb:c4:a7:ac:5e:85:cc:8b:b5:9f:cf:39:
e6:81:88:d6:9e:ab:00:1e:91:89:9f:15:19:f0:72:
30:be:34:22:15:39:fd:fc:ae:ed:28:09:5f:68:54:
da:9d:d3:71:af:f7:51:c4:d8:9b:08:50:64:8b:3f:
5f:0b:50:b0:5b:78:49:de:d0:68:01:43:e8:b7:29:
cd:ab:1c:9c:6b:8e:81:2c:bf:5b:c1:a2:5a:fd:05:
b0:55:48:5b:95:42:14:1a:12:e3:b5:0a:c1:ff:38:
35:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D9:9E:3A:F8:1A:1E:C6:AC:B5:42:9D:4F:D3:6F:3B:E0:08:7C:A5
X509v3 Authority Key Identifier:
keyid:8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/6tmeOvgaHsastUKdT9NvO-AIfKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.3.0-31.40.4.255
91.226.224.0/24
Signature Algorithm: sha256WithRSAEncryption
47:74:f5:2d:4d:74:64:bd:01:b4:d2:0a:87:ac:a4:7c:2b:57:
2e:1b:aa:41:67:10:ef:70:39:ac:b0:4d:1a:3b:1b:b2:17:bd:
54:30:cf:c7:cd:3e:37:72:a2:dd:e8:50:88:6e:91:53:b9:26:
4c:99:5c:b1:e2:66:bd:3d:d6:27:95:53:20:03:42:8e:30:2e:
00:3b:94:27:95:6e:ec:94:4d:16:57:5c:cb:07:80:16:f3:59:
33:d2:8b:92:ba:0f:3e:9f:86:f9:e3:94:85:6c:7d:a8:9d:40:
05:e1:82:a9:15:4a:da:fb:c7:7d:71:a8:a5:8b:34:67:4d:8e:
79:38:b7:3e:3a:3e:49:51:c2:2b:3d:9c:ce:76:bd:33:9f:82:
22:34:e4:4a:4b:60:85:92:55:ad:8b:db:cf:5f:31:0a:83:5f:
f6:be:ec:93:04:e1:82:f8:03:72:37:2f:4f:19:5a:01:67:67:
70:2c:2b:54:82:a4:09:62:22:f4:6c:f0:70:87:c6:74:df:4a:
b9:9a:28:86:92:0b:57:a4:f1:f4:e4:43:6d:fb:f5:f9:dc:59:
f2:0c:20:54:b8:e5:24:04:e8:f2:2e:41:11:34:eb:78:71:6d:
b5:5b:5a:1a:74:02:1f:cf:5e:32:7b:14:14:60:38:b6:6a:66:
d6:57:08:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:17:28 2025 by rpki-client