Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/xNMPpoguk8uzhlykolNlU-AW0xM.roa
File: xNMPpoguk8uzhlykolNlU-AW0xM.roa (raw, json)
Hash identifier: bGvop1aSr0KwNn8rP7kRGhEda65GJNByKfNjHeci+7c=
Subject key identifier: C4:D3:0F:A6:88:2E:93:CB:B3:86:5C:A4:A2:53:65:53:E0:16:D3:13
Certificate issuer: /CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Certificate serial: 041CAA8A
Authority key identifier: 86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/xNMPpoguk8uzhlykolNlU-AW0xM.roa
Signing time: Thu 23 Jun 2022 09:13:24 +0000
ROA not before: Thu 23 Jun 2022 09:13:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197720
IP address blocks: 31.186.28.0/24 maxlen: 24
31.186.29.0/24 maxlen: 24
31.186.2.0/24 maxlen: 24
31.186.4.0/24 maxlen: 24
31.186.3.0/24 maxlen: 24
31.186.7.0/24 maxlen: 24
31.186.9.0/24 maxlen: 24
31.186.11.0/24 maxlen: 24
31.186.10.0/24 maxlen: 24
31.186.5.0/24 maxlen: 24
31.186.13.0/24 maxlen: 24
31.186.12.0/24 maxlen: 24
31.186.15.0/24 maxlen: 24
31.186.14.0/24 maxlen: 24
31.186.16.0/24 maxlen: 24
31.186.17.0/24 maxlen: 24
31.186.21.0/24 maxlen: 24
31.186.23.0/24 maxlen: 24
31.186.18.0/24 maxlen: 24
31.186.20.0/24 maxlen: 24
31.186.19.0/24 maxlen: 24
2a0d:a000:0:1400::/56 maxlen: 56
2a0d:a000:0:f00::/56 maxlen: 56
2a0d:a000:0:1800::/56 maxlen: 56
2a0d:a000:0:b00::/56 maxlen: 56
2a0d:a000:0:1500::/56 maxlen: 56
2a0d:a000:0:1100::/56 maxlen: 56
2a0d:a000:0:1000::/56 maxlen: 56
2a0d:a000:0:1900::/56 maxlen: 56
2a0d:a000:0:c00::/56 maxlen: 56
2a0d:a000:0:1600::/56 maxlen: 56
2a0d:a000:0:1200::/56 maxlen: 56
2a0d:a000:0:1a00::/56 maxlen: 56
2a0d:a000:0:d00::/56 maxlen: 56
2a0d:a000:0:a00::/56 maxlen: 56
2a0d:a000:0:1300::/56 maxlen: 56
2a0d:a000:0:e00::/56 maxlen: 56
2a0d:a000:0:1700::/56 maxlen: 56
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68987530 (0x41caa8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Validity
Not Before: Jun 23 09:13:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4d30fa6882e93cbb3865ca4a2536553e016d313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cb:9a:d9:8a:9e:8b:f2:d6:e9:34:51:a5:5a:
f5:4f:58:3b:eb:95:a1:a1:91:5b:5d:a5:49:3e:e2:
ad:bf:1c:78:36:9a:b4:ed:0d:0b:cb:80:b0:52:21:
26:72:f7:ca:fb:d4:ba:ca:57:86:92:d1:94:f1:63:
a0:25:c3:69:8f:25:f3:d5:b3:ff:d8:0b:b6:f9:ca:
5f:1c:00:d1:82:d9:b0:ad:f8:0a:8d:22:a3:ad:c5:
8e:39:61:72:6d:ea:a6:c2:c0:fe:d9:6d:11:b9:4c:
d8:3e:aa:1b:ff:56:4e:ef:10:8f:ea:8c:6f:69:a2:
c3:c7:4e:96:60:7a:b1:26:6e:5a:5b:c6:89:1b:55:
f3:82:98:42:ba:83:aa:23:39:f3:74:23:2a:02:f2:
6c:47:5d:79:1e:e3:6a:82:ac:a3:11:29:c0:df:f7:
8f:72:86:ce:a2:21:ad:3f:9a:37:64:cb:ef:82:05:
43:1f:57:ae:1c:8d:8c:d4:1e:52:34:9e:3e:cb:91:
b4:10:c9:a4:ac:13:e3:3d:05:08:65:43:9f:24:a5:
84:e4:87:bf:3d:c0:3c:6f:52:6d:1f:17:8f:c1:a5:
34:37:a9:df:2e:70:41:9b:ee:f5:74:6f:68:f2:51:
3b:1a:09:0a:75:04:ab:ba:12:73:d6:ee:4b:60:83:
78:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D3:0F:A6:88:2E:93:CB:B3:86:5C:A4:A2:53:65:53:E0:16:D3:13
X509v3 Authority Key Identifier:
keyid:86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/xNMPpoguk8uzhlykolNlU-AW0xM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.2.0-31.186.5.255
31.186.7.0/24
31.186.9.0-31.186.21.255
31.186.23.0/24
31.186.28.0/23
IPv6:
2a0d:a000:0:a00::-2a0d:a000:0:1aff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
71:ec:a8:a7:b4:8f:c3:9f:1e:f1:69:6d:ab:ff:a4:d1:3a:4b:
b5:6b:9a:b5:c8:fb:d3:14:43:ca:42:bd:c7:af:e5:b6:89:79:
a5:16:a0:e8:a0:07:f2:f4:15:66:4c:96:88:d6:1a:e2:4e:7c:
ba:e8:66:96:80:36:ac:8d:c5:19:36:88:40:17:46:38:6d:b4:
3a:d4:c3:45:3a:39:a6:61:ec:4b:cd:5e:a4:52:d4:bc:e9:f2:
1e:72:a5:2b:a9:83:36:0b:7a:c4:d4:c1:3a:41:74:56:1e:b4:
6c:c2:98:ba:b2:36:bc:dc:95:7c:e0:83:a3:55:8d:47:31:53:
04:aa:fc:44:a5:14:98:2f:21:13:5e:fc:47:4b:d5:57:cd:9b:
43:a0:8a:82:94:6c:86:d0:82:09:14:ee:e1:f6:20:81:eb:f3:
f4:ce:12:5d:e7:ef:32:d8:3f:ed:21:b0:56:27:77:f4:68:75:
02:ec:2b:a3:e9:b6:b6:ea:24:92:c9:8c:de:e7:5d:8b:98:d7:
fa:f1:7c:21:35:36:97:b0:42:8c:f4:8f:a3:d4:92:30:d8:ce:
61:da:ed:74:09:f9:1b:1b:8d:a2:2b:97:c6:3e:48:42:c5:2b:
3b:36:56:87:a5:c8:28:03:41:f5:a0:4c:c2:25:b6:c4:39:ec:
42:3e:1b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:55 2025 by rpki-client