Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/qv4itts1t2buP9TgRXvnkDXL7Ss.roa
File: qv4itts1t2buP9TgRXvnkDXL7Ss.roa (raw, json)
Hash identifier: sRWdrAmfmPVJFYfmnEFjqmvhAb/KL2XxqQX492b5Wlc=
Subject key identifier: AA:FE:22:B6:DB:35:B7:66:EE:3F:D4:E0:45:7B:E7:90:35:CB:ED:2B
Certificate issuer: /CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Certificate serial: 0185855FBB2989481A5FBB54D3937C16C1B3
Authority key identifier: 8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/qv4itts1t2buP9TgRXvnkDXL7Ss.roa
Signing time: Fri 06 Jan 2023 04:38:41 +0000
ROA not before: Fri 06 Jan 2023 04:38:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58262
IP address blocks: 31.40.4.0/24 maxlen: 24
31.40.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:85:5f:bb:29:89:48:1a:5f:bb:54:d3:93:7c:16:c1:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Validity
Not Before: Jan 6 04:38:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aafe22b6db35b766ee3fd4e0457be79035cbed2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:63:03:e6:f1:fd:89:52:68:82:21:e7:b8:15:
dd:96:2d:43:ce:dc:78:64:f2:d2:cd:8a:c2:d6:28:
eb:d3:f1:97:8b:9d:31:8e:33:3f:52:9c:43:52:51:
18:76:43:33:e2:5d:72:15:50:30:de:dd:cf:46:70:
dd:fd:ee:f4:51:40:40:35:3e:4b:5b:fd:c1:2b:05:
c9:e6:e0:bc:aa:37:bc:68:6f:86:2b:8a:f8:02:5e:
34:f3:09:6a:39:b2:5a:e3:e6:aa:69:10:7f:81:d8:
5e:b5:e9:43:65:09:05:4b:f0:ff:11:df:4b:b4:3c:
23:b6:bd:0c:d0:f9:03:30:f1:a5:d9:30:a0:8b:64:
f5:12:52:c4:c1:91:d3:2c:4a:43:b2:88:7c:55:45:
1a:f1:c5:9f:39:da:8a:29:d8:76:5b:d6:18:7c:4b:
a1:76:9a:ec:7b:d2:59:9f:fd:a2:a0:42:82:0a:fa:
55:26:74:79:9b:9f:c5:c6:da:34:a6:92:6e:f1:f8:
73:0e:2f:2b:59:e7:92:74:d4:7b:6b:f3:7f:58:45:
df:49:2c:44:06:a8:35:88:5e:e3:2e:51:00:37:c8:
c5:86:ad:7c:54:4e:f5:3d:85:c2:58:66:ab:3f:2c:
40:ef:73:9d:ad:bf:95:12:92:e5:30:52:ed:c4:94:
55:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FE:22:B6:DB:35:B7:66:EE:3F:D4:E0:45:7B:E7:90:35:CB:ED:2B
X509v3 Authority Key Identifier:
keyid:8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/qv4itts1t2buP9TgRXvnkDXL7Ss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.2.0/24
31.40.4.0/24
Signature Algorithm: sha256WithRSAEncryption
25:86:4c:a8:38:26:3f:a9:39:c6:c7:f7:0c:2a:a4:7c:22:96:
a8:fa:77:27:76:74:8c:7c:73:2f:06:d6:30:f9:79:ae:f1:43:
c4:ed:17:e4:3f:6a:26:05:61:ad:56:bc:aa:b8:86:2b:54:ec:
91:01:fd:df:0a:5f:7c:5e:a5:c4:fc:e4:ce:72:4d:56:12:36:
0e:75:15:2a:71:73:44:c4:5b:ee:a4:6e:87:26:9b:2d:3c:01:
e9:c8:e4:2d:f4:ac:f0:44:14:23:c0:3b:bd:5a:62:4b:6b:c8:
a8:72:69:a4:2e:72:b2:2b:00:f8:da:46:0f:12:f9:f5:89:4f:
d3:c9:f8:1b:3d:d6:d8:3f:aa:71:c8:dd:b1:ed:65:12:de:32:
b4:f6:86:ec:3e:73:63:62:f0:b8:a9:9c:79:f8:17:52:8a:f8:
b3:2b:88:44:23:22:b3:a2:89:82:c7:1b:c5:26:29:fa:93:48:
8b:32:32:d9:b2:38:ee:f7:4b:24:80:fa:35:b7:0c:ba:66:c7:
8e:a0:fa:70:f2:35:ca:be:a9:5f:f0:1c:2d:06:01:0e:39:9d:
61:11:62:2c:8b:b9:36:2d:43:be:13:cd:ce:16:23:b7:38:84:
a1:33:83:a3:8c:6b:c9:87:66:a7:d2:aa:04:eb:ee:f3:64:d8:
3b:f9:99:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:12:56 2025 by rpki-client