Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/mDINcG_zFL6qNwtrO_vJkZ0xj6k.roa
File: mDINcG_zFL6qNwtrO_vJkZ0xj6k.roa (raw, json)
Hash identifier: 0SnUM1TrVrlRht2zhPD7uz60wIS2wrgn21i37GBDLxk=
Subject key identifier: 98:32:0D:70:6F:F3:14:BE:AA:37:0B:6B:3B:FB:C9:91:9D:31:8F:A9
Certificate issuer: /CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621
Certificate serial: 1BDEF288
Authority key identifier: 09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/mDINcG_zFL6qNwtrO_vJkZ0xj6k.roa
Signing time: Sat 01 Jan 2022 11:55:53 +0000
ROA not before: Sat 01 Jan 2022 11:55:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41628
IP address blocks: 31.15.24.0/21 maxlen: 24
89.31.144.0/21 maxlen: 24
193.38.128.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 467595912 (0x1bdef288)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621
Validity
Not Before: Jan 1 11:55:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98320d706ff314beaa370b6b3bfbc9919d318fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ee:fd:7f:af:60:29:f0:eb:96:66:11:1a:78:
c6:68:7d:e2:68:d2:d2:c2:be:39:39:44:f7:b4:53:
51:79:b7:94:ac:f3:92:95:d4:5c:c2:8f:26:1c:d9:
0d:6d:98:2c:dd:f4:96:7a:21:30:4c:4c:d5:51:e8:
17:26:9c:1e:7b:d2:7b:f7:44:9e:74:6c:6c:55:32:
96:de:11:38:f3:df:0e:63:9b:a8:9b:c1:51:ed:4d:
1f:8c:94:6e:e2:ee:6f:0a:c5:9e:69:26:3d:cf:0f:
de:e0:df:cf:a6:62:6b:c4:50:9f:8c:5c:e1:21:3b:
7c:1a:bf:77:eb:4e:25:f0:d5:2a:f2:f9:a5:32:f2:
f0:47:1e:62:e2:5b:9d:7f:4c:95:b6:fd:2e:dc:4f:
e7:b1:ab:0c:f9:02:ac:7d:bf:df:8a:a6:f3:5c:a1:
25:12:d4:fa:72:3c:a9:88:46:e3:c1:02:12:d2:29:
2a:d0:1c:53:fe:ab:b5:4c:f6:67:97:b4:f0:11:a6:
90:7e:98:13:09:4e:47:de:4c:9e:fc:1a:03:0a:4c:
41:56:23:98:90:cf:17:d2:4f:60:72:d5:86:77:ce:
bc:a7:ce:7a:fc:12:fb:84:f8:10:0e:11:e1:59:d6:
1a:53:10:c6:95:7b:55:e9:bd:f8:d7:8f:62:bd:e4:
12:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:32:0D:70:6F:F3:14:BE:AA:37:0B:6B:3B:FB:C9:91:9D:31:8F:A9
X509v3 Authority Key Identifier:
keyid:09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/mDINcG_zFL6qNwtrO_vJkZ0xj6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.24.0/21
89.31.144.0/21
193.38.128.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:3c:e9:00:bd:20:00:fc:84:67:5b:89:57:fb:49:26:ac:ec:
ef:f4:7d:ab:0b:f9:59:84:44:ae:ff:1c:0d:94:08:84:7d:c8:
7f:35:11:99:e2:ea:ff:aa:a3:44:da:1d:81:b4:da:99:95:df:
44:8b:3a:41:77:e6:d9:9a:20:05:16:91:72:d0:54:8d:f7:43:
2d:49:4c:bf:c8:8b:97:6b:c8:9e:70:1f:89:b9:de:29:26:3f:
4f:13:6a:5e:38:a0:fc:20:d3:a9:de:c7:f7:60:f9:66:59:a4:
dc:36:c5:3a:32:ce:27:41:6d:63:31:4c:6d:1b:71:82:95:a2:
e4:37:6f:53:20:c3:d9:8d:40:6e:1e:c3:84:76:6f:90:fd:01:
37:52:a9:51:cc:e4:15:87:96:ba:b7:ab:fc:7b:17:33:51:e4:
0f:22:55:c5:e2:31:98:1c:13:6a:20:9c:f3:1b:62:b7:d4:40:
f0:1f:88:27:80:93:88:f7:de:3b:b4:67:ab:16:72:88:e5:49:
8c:33:6e:b9:d1:c8:9c:8d:bb:30:a0:e9:90:4a:e9:f3:7c:13:
79:90:34:11:64:60:be:aa:82:dc:30:05:9a:26:04:90:d4:4f:
8f:4c:4f:14:9b:90:98:44:64:6b:7f:07:ac:1b:93:98:89:e1:
d4:c2:54:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:25 2025 by rpki-client