Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/rdc_Elcme9VUdabe_v8wKLv8AMs.roa
File: rdc_Elcme9VUdabe_v8wKLv8AMs.roa (raw, json)
Hash identifier: 7vGusCGdS2cJiWgekVn5PIuevZRPS98Z8VJrtbY+34o=
Subject key identifier: AD:D7:3F:12:57:26:7B:D5:54:75:A6:DE:FE:FF:30:28:BB:FC:00:CB
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 1748A13D
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/rdc_Elcme9VUdabe_v8wKLv8AMs.roa
Signing time: Sat 01 Jan 2022 16:03:49 +0000
ROA not before: Sat 01 Jan 2022 16:03:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43295
IP address blocks: 31.14.43.0/24 maxlen: 24
37.156.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 390635837 (0x1748a13d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 16:03:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=add73f1257267bd55475a6defeff3028bbfc00cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5a:19:7f:f5:b7:3d:cf:20:47:ff:26:31:73:
c6:92:c7:cf:fb:f8:e2:31:ca:cd:20:45:ca:54:4c:
eb:38:9d:43:bd:11:c8:62:71:18:61:d1:1b:ab:d9:
e9:64:cf:7e:3f:35:67:d3:db:4e:46:b1:ce:71:f8:
75:4d:33:25:8c:e7:09:1c:89:f4:14:70:e7:84:7a:
23:7f:c6:1b:de:f1:03:fc:77:1a:6d:60:ff:e7:84:
52:4d:0e:7f:eb:2a:50:41:fb:a7:cb:55:cc:d3:ab:
20:b0:42:f9:70:84:bf:ed:6e:d0:a3:75:47:df:4a:
fd:b1:08:af:f1:27:88:d1:7d:5e:4a:ee:7f:5c:c2:
6b:10:8f:74:c8:97:cf:fb:86:1b:7a:43:2b:11:41:
82:d7:a4:1a:b8:2d:04:21:1c:a2:e3:61:7e:cf:79:
44:d2:7b:ca:76:79:2c:68:14:ad:92:87:33:3e:f8:
d0:e9:07:82:73:e9:b9:b0:b9:78:d3:ee:d0:aa:48:
28:8b:2d:05:7b:4f:f0:a0:ea:0d:e4:64:8c:03:a2:
e6:9b:84:66:55:ab:ec:c5:f1:b5:18:cc:a7:39:3e:
30:55:1b:9a:9a:e9:7f:6e:07:0a:1b:50:bf:12:2c:
7e:2a:a7:d7:09:e3:c6:24:f8:80:c9:45:e1:ce:e7:
b4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D7:3F:12:57:26:7B:D5:54:75:A6:DE:FE:FF:30:28:BB:FC:00:CB
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/rdc_Elcme9VUdabe_v8wKLv8AMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.43.0/24
37.156.245.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:c5:63:76:d8:cf:f4:ad:8f:90:ca:bc:a6:76:78:72:1e:78:
26:50:b6:57:0f:d4:1b:2d:fb:62:a4:7d:8f:60:53:4e:54:b9:
06:57:f3:69:23:61:f6:c8:a8:4d:c0:e4:4d:59:b9:d9:82:34:
13:d1:85:2f:89:73:a3:b9:dc:5d:a2:c2:1a:eb:a7:57:5c:5e:
85:9f:d2:75:d9:07:ae:34:01:b6:87:d8:77:26:6f:4f:e6:cd:
ca:b6:80:86:80:5c:13:26:40:3f:fa:0e:49:ae:4f:9d:54:9e:
92:2a:0a:df:0e:bc:4d:78:ee:85:69:7d:22:9b:c8:c6:b5:ce:
17:67:69:a9:e0:1b:2f:e7:ea:65:9a:04:d1:07:15:57:f9:1d:
fe:63:5a:5e:71:2e:9f:8f:ed:ba:eb:54:5f:53:e0:82:ce:34:
a6:d7:1d:f5:dd:be:ef:65:3f:56:68:d2:bc:51:6f:80:b2:c5:
65:be:fe:35:0d:c1:6d:65:5c:c5:55:5f:8e:00:96:07:c4:ce:
32:3c:7c:2b:54:22:1b:d6:40:b3:d4:af:05:93:c4:e5:a1:63:
e3:a4:8d:e8:3c:94:8b:06:f4:a0:55:19:8e:04:c6:0a:c3:0a:
db:e7:dc:f5:f5:28:f2:9e:78:cd:0e:83:ed:43:a7:03:66:75:
dd:b8:f6:30
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEF0ihPTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZGYxMzJkZjEzZTRiZTUzZDgyNTBjOGM0ODQyMDI2NGVlZjZjMTRjMB4XDTIyMDEw
MTE2MDM0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWRkNzNmMTI1NzI2
N2JkNTU0NzVhNmRlZmVmZjMwMjhiYmZjMDBjYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMJaGX/1tz3PIEf/JjFzxpLHz/v44jHKzSBFylRM6zidQ70R
yGJxGGHRG6vZ6WTPfj81Z9PbTkaxznH4dU0zJYznCRyJ9BRw54R6I3/GG97xA/x3
Gm1g/+eEUk0Of+sqUEH7p8tVzNOrILBC+XCEv+1u0KN1R99K/bEIr/EniNF9Xkru
f1zCaxCPdMiXz/uGG3pDKxFBgtekGrgtBCEcouNhfs95RNJ7ynZ5LGgUrZKHMz74
0OkHgnPpubC5eNPu0KpIKIstBXtP8KDqDeRkjAOi5puEZlWr7MXxtRjMpzk+MFUb
mprpf24HChtQvxIsfiqn1wnjxiT4gMlF4c7ntIcCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSt1z8SVyZ71VR1pt7+/zAou/wAyzAfBgNVHSMEGDAWgBR98TLfE+S+U9gl
DIxIQgJk7vbBTDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZmRXkzeFBrdmxQWUpReU1TRUlDWk83MndVdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmUvYzM3NDk3LTYzNzYtNDYxZS05M2M2LTk3Nzg2NzRlZGM5Ny8x
L3JkY19FbGNtZTlWVWRhYmVfdjh3S0x2OEFNcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUv
YzM3NDk3LTYzNzYtNDYxZS05M2M2LTk3Nzg2NzRlZGM5Ny8xL2ZmRXkzeFBrdmxQ
WUpReU1TRUlDWk83MndVdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAB8OKwMEACWc9TANBgkqhkiG9w0B
AQsFAAOCAQEAHsVjdtjP9K2PkMq8pnZ4ch54JlC2Vw/UGy37YqR9j2BTTlS5Blfz
aSNh9sioTcDkTVm52YI0E9GFL4lzo7ncXaLCGuunV1xehZ/SddkHrjQBtofYdyZv
T+bNyraAhoBcEyZAP/oOSa5PnVSekioK3w68TXjuhWl9IpvIxrXOF2dpqeAbL+fq
ZZoE0QcVV/kd/mNaXnEun4/tuutUX1Pggs40ptcd9d2+72U/VmjSvFFvgLLFZb7+
NQ3BbWVcxVVfjgCWB8TOMjx8K1QiG9ZAs9SvBZPE5aFj46SN6DyUiwb0oFUZjgTG
CsMK2+fc9fUo8p54zQ6D7UOnA2Z13bj2MA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:36 2025 by rpki-client