Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/qI3YgaC12NHHtUr1ilKo9ZnTpe4.roa
File: qI3YgaC12NHHtUr1ilKo9ZnTpe4.roa (raw, json)
Hash identifier: 9SPOgEbIsyMlyKFlfP3dDGqUhU9QooGT3y5ZGVizitE=
Subject key identifier: A8:8D:D8:81:A0:B5:D8:D1:C7:B5:4A:F5:8A:52:A8:F5:99:D3:A5:EE
Certificate issuer: /CN=e87ce7df23140c0005125a61aad721531e681f0e
Certificate serial: 018B82EC739E7FB2AD8B47D00980A3A1A8CF
Authority key identifier: E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/qI3YgaC12NHHtUr1ilKo9ZnTpe4.roa
Signing time: Mon 30 Oct 2023 23:30:16 +0000
ROA not before: Mon 30 Oct 2023 23:30:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47160
IP address blocks: 31.14.68.0/22 maxlen: 24
45.112.120.0/22 maxlen: 24
185.126.228.0/22 maxlen: 24
2a06:c480::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:82:ec:73:9e:7f:b2:ad:8b:47:d0:09:80:a3:a1:a8:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e87ce7df23140c0005125a61aad721531e681f0e
Validity
Not Before: Oct 30 23:30:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a88dd881a0b5d8d1c7b54af58a52a8f599d3a5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:12:00:85:0d:32:a5:39:2c:41:02:14:6c:bf:
34:f6:50:7a:b9:2d:62:78:24:9e:41:3c:0c:7c:fd:
eb:c2:e6:56:b7:db:87:53:fe:dc:23:a9:7d:2d:1f:
b9:ad:e4:75:1e:fe:05:d9:3b:14:43:21:76:60:15:
7c:c5:62:35:82:34:f8:9e:22:04:b8:09:9a:22:dd:
c3:08:32:56:d9:cd:5c:00:55:8b:0f:3a:7b:c8:9a:
55:60:a7:c0:46:0a:62:57:fd:6d:92:13:63:d2:31:
e1:39:44:45:c9:e0:ec:45:4b:d0:1b:c4:10:ec:6d:
6e:cd:2d:6f:64:cc:64:01:ac:8c:5c:89:8c:ad:4c:
40:70:89:83:9a:88:1c:9c:4c:7c:1c:a3:61:61:f6:
15:b7:17:88:56:40:37:d2:2a:bf:26:71:46:24:0a:
3b:a0:9d:2f:8c:e7:6e:50:5c:1e:60:90:b0:32:0e:
20:93:7c:42:0e:a8:7b:be:58:a8:17:7a:f6:c5:56:
1f:2e:1e:c0:32:ce:bf:28:43:fc:e8:ae:90:4c:73:
80:94:24:cb:b6:22:bc:2e:28:ba:0a:3d:cc:73:f5:
57:41:f7:29:e9:1b:5f:02:a7:fa:71:bb:b1:0e:79:
89:82:c9:8c:35:d2:99:a2:3d:a7:8c:66:f0:ea:45:
22:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:8D:D8:81:A0:B5:D8:D1:C7:B5:4A:F5:8A:52:A8:F5:99:D3:A5:EE
X509v3 Authority Key Identifier:
keyid:E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/qI3YgaC12NHHtUr1ilKo9ZnTpe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.68.0/22
45.112.120.0/22
185.126.228.0/22
IPv6:
2a06:c480::/29
Signature Algorithm: sha256WithRSAEncryption
8a:99:e3:96:a4:58:82:91:c0:9b:7d:ab:ad:13:c9:ad:05:e9:
4c:5b:b6:92:73:db:ed:93:bb:57:75:52:71:6b:95:32:dc:1d:
62:b4:54:0d:75:23:21:37:bb:d0:d2:50:e4:62:3a:d2:fb:62:
0f:6b:df:0f:fc:ba:e6:70:1d:2b:b4:c3:0a:97:4d:17:d8:19:
10:06:f8:cb:10:4a:f9:cb:89:f9:c1:ed:ad:cc:ec:9b:98:b6:
ca:ca:07:f3:3a:99:63:ac:85:cd:28:47:c4:0a:45:2f:ee:e7:
b6:16:57:26:31:45:f4:ac:2c:5e:3f:34:df:a7:f2:ec:2f:9b:
56:26:b8:c1:6f:9c:97:8b:b3:b2:ad:6d:2f:04:00:93:6e:bb:
ce:d7:b1:38:6f:ef:9c:22:26:30:c9:22:37:5c:c1:26:50:88:
9d:68:9e:02:15:0b:33:e6:ab:a7:c1:76:8d:80:e5:23:48:33:
8e:4e:c5:ec:e3:05:3e:3d:25:6c:a9:80:3f:9c:89:80:4d:98:
f0:75:21:ad:30:65:55:7a:f4:66:47:71:7e:5d:ec:75:cb:b4:
1f:02:02:ed:38:01:78:20:95:f6:18:b2:78:5d:5b:b4:62:cd:
32:f6:6a:82:fb:05:13:9f:ee:3b:7a:d8:f1:4b:73:2a:ec:37:
e5:bb:b0:36
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYuC7HOef7Kti0fQCYCjoajPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4N2NlN2RmMjMxNDBjMDAwNTEyNWE2MWFhZDcyMTUzMWU2
ODFmMGUwHhcNMjMxMDMwMjMzMDE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODhkZDg4MWEwYjVkOGQxYzdiNTRhZjU4YTUyYThmNTk5ZDNhNWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhIAhQ0ypTksQQIUbL809lB6uS1i
eCSeQTwMfP3rwuZWt9uHU/7cI6l9LR+5reR1Hv4F2TsUQyF2YBV8xWI1gjT4niIE
uAmaIt3DCDJW2c1cAFWLDzp7yJpVYKfARgpiV/1tkhNj0jHhOURFyeDsRUvQG8QQ
7G1uzS1vZMxkAayMXImMrUxAcImDmogcnEx8HKNhYfYVtxeIVkA30iq/JnFGJAo7
oJ0vjOduUFweYJCwMg4gk3xCDqh7vlioF3r2xVYfLh7AMs6/KEP86K6QTHOAlCTL
tiK8Lii6Cj3Mc/VXQfcp6RtfAqf6cbuxDnmJgsmMNdKZoj2njGbw6kUiTwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFKiN2IGgtdjRx7VK9YpSqPWZ06XuMB8GA1UdIwQY
MBaAFOh8598jFAwABRJaYarXIVMeaB8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkh6bjN5TVVEQUFGRWxwaHF0Y2hVeDVvSHc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC83NzY3NDctNjI0YS00OTRlLTk0YjIt
MzIzZDM0ZGVmYzhhLzEvcUkzWWdhQzEyTkhIdFVyMWlsS285Wm5UcGU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC83NzY3NDctNjI0YS00OTRlLTk0YjItMzIzZDM0ZGVmYzhh
LzEvNkh6bjN5TVVEQUFGRWxwaHF0Y2hVeDVvSHc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCHw5EAwQC
LXB4AwQCuX7kMA0EAgACMAcDBQMqBsSAMA0GCSqGSIb3DQEBCwUAA4IBAQCKmeOW
pFiCkcCbfautE8mtBelMW7aSc9vtk7tXdVJxa5Uy3B1itFQNdSMhN7vQ0lDkYjrS
+2IPa98P/LrmcB0rtMMKl00X2BkQBvjLEEr5y4n5we2tzOybmLbKygfzOpljrIXN
KEfECkUv7ue2FlcmMUX0rCxePzTfp/LsL5tWJrjBb5yXi7OyrW0vBACTbrvO17E4
b++cIiYwySI3XMEmUIidaJ4CFQsz5qunwXaNgOUjSDOOTsXs4wU+PSVsqYA/nImA
TZjwdSGtMGVVevRmR3F+Xex1y7QfAgLtOAF4IJX2GLJ4XVu0Ys0y9mqC+wUTn+47
etjxS3Mq7Dflu7A2
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:50:00 2025 by rpki-client