Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/RovWpng3WNSawpuT65KAlt4ajKg.roa
File: RovWpng3WNSawpuT65KAlt4ajKg.roa (raw, json)
Hash identifier: yQPXzMjBBkjEMhePimybOdszpUpeqt6nEUrHxbPe3dQ=
Subject key identifier: 46:8B:D6:A6:78:37:58:D4:9A:C2:9B:93:EB:92:80:96:DE:1A:8C:A8
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 175B3985
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/RovWpng3WNSawpuT65KAlt4ajKg.roa
Signing time: Sat 01 Jan 2022 16:03:59 +0000
ROA not before: Sat 01 Jan 2022 16:03:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208179
IP address blocks: 31.14.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391854469 (0x175b3985)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 16:03:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=468bd6a6783758d49ac29b93eb928096de1a8ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:62:e5:b6:3e:35:99:f3:23:90:86:ac:df:3e:
d5:c5:1a:5b:a5:3c:44:32:23:1c:89:57:c6:96:f0:
ae:bd:ab:bc:ab:6e:c1:62:b1:25:28:b2:62:a9:d3:
26:15:14:40:5d:50:ac:0c:26:be:f4:09:de:6b:4c:
ba:56:c8:9a:e2:b1:6f:ba:f8:b1:95:88:91:b1:ef:
f8:a8:4b:0a:15:b8:9c:ba:c1:e9:81:85:08:93:d0:
6f:17:75:47:bb:c7:6b:11:72:99:ec:f8:6c:fd:15:
8e:c3:ce:d2:0a:dd:e9:42:8a:02:d4:7d:0b:89:cd:
a5:7d:97:a8:ff:44:b9:02:b9:ba:80:49:38:fd:08:
c3:36:97:a6:5c:2b:14:f3:76:47:80:a8:3b:52:5a:
e4:f3:10:66:fc:ad:0a:a8:47:b0:50:a8:00:63:33:
3e:f1:97:f9:24:27:b7:97:dd:7b:10:2a:80:17:7c:
06:5d:19:36:b9:fa:90:f3:63:58:e2:97:23:cd:4e:
d4:e5:eb:26:31:c2:61:f4:fb:cd:8b:9c:8b:06:a6:
9e:da:9f:87:d3:b9:14:6f:60:07:dc:5f:d7:80:6f:
02:1d:72:c5:56:34:7c:f2:41:1a:73:81:e8:73:5c:
49:35:f0:e5:fd:02:7a:3f:93:b9:f4:f5:62:f4:1d:
f2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8B:D6:A6:78:37:58:D4:9A:C2:9B:93:EB:92:80:96:DE:1A:8C:A8
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/RovWpng3WNSawpuT65KAlt4ajKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.55.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:24:ae:0c:5f:86:22:11:d0:06:0c:3e:df:1c:75:4b:80:5c:
0a:69:57:2f:c7:3d:1c:d3:f9:12:13:15:43:c2:61:d9:81:48:
07:60:89:34:1d:66:6a:b6:5a:d4:a5:2b:2c:4b:35:b8:e3:18:
fb:dd:6c:d7:a7:fb:3b:b0:a4:e6:dc:7b:ce:25:41:84:a6:fa:
da:ab:53:bc:4a:fe:25:fc:7d:a4:2c:97:5f:1d:7f:ee:4c:74:
f0:98:8a:c6:6d:50:9c:ab:d3:52:00:35:b4:09:03:3e:78:87:
d2:41:e4:97:06:3e:35:df:3e:29:98:ef:a5:82:ad:5f:93:0d:
53:ce:ee:cd:9c:9e:ee:9f:a4:5e:95:86:f1:87:0d:1c:31:c5:
7c:e6:17:c2:66:a1:ec:10:4a:6e:3c:4d:0d:30:72:aa:0d:db:
b2:3b:ce:13:af:4e:08:72:3d:61:2c:ec:57:ff:44:2c:21:36:
f5:a5:bf:9c:65:7f:f5:e5:b7:36:23:31:f5:08:86:a9:e6:70:
d8:34:80:f1:10:23:ce:a9:1e:83:47:26:a6:f8:54:d7:d9:76:
ac:84:03:c2:4f:4a:ec:80:25:4a:ba:94:2a:fa:18:e4:fb:60:
c6:55:83:74:8f:a1:4c:9e:38:9e:75:b1:03:ee:1c:c8:6d:14:
a6:13:33:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:05:40 2025 by rpki-client