Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/mH-omPG6n_YF8ybeVHc77fUICBc.roa
File: mH-omPG6n_YF8ybeVHc77fUICBc.roa (raw, json)
Hash identifier: CGXvn4S9LN0P+b3mFbZ7VeDp+kH0GIYL6Asn08RSTHc=
Subject key identifier: 98:7F:A8:98:F1:BA:9F:F6:05:F3:26:DE:54:77:3B:ED:F5:08:08:17
Certificate issuer: /CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Certificate serial: 01856B8A0F9D7647DE33C54D9BC01CDAFF4A
Authority key identifier: AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/mH-omPG6n_YF8ybeVHc77fUICBc.roa
Signing time: Sun 01 Jan 2023 04:14:48 +0000
ROA not before: Sun 01 Jan 2023 04:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48299
IP address blocks: 31.25.144.0/21 maxlen: 21
31.25.151.0/24 maxlen: 24
94.126.160.0/21 maxlen: 21
185.36.97.0/24 maxlen: 24
185.36.99.0/24 maxlen: 24
2a02:2600::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:8a:0f:9d:76:47:de:33:c5:4d:9b:c0:1c:da:ff:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Validity
Not Before: Jan 1 04:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=987fa898f1ba9ff605f326de54773bedf5080817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ba:17:65:f0:4a:ff:27:74:92:db:b0:c4:26:
02:07:d5:db:6d:9d:3c:7c:25:6c:23:a8:e6:9b:ee:
92:2f:4e:15:8e:72:5c:ed:bb:cc:1c:af:47:e5:08:
07:f5:db:60:03:d2:07:84:97:af:b8:88:a1:c0:5b:
5e:a6:1b:b3:67:cb:a5:b8:78:54:2f:c5:c9:4d:45:
82:86:c0:0f:f6:24:f5:ac:5f:96:8d:c4:02:68:db:
68:2d:32:bf:16:cb:94:ad:31:c4:13:6a:4f:20:da:
79:ae:67:60:59:d9:4c:6d:f5:39:b4:cb:c5:3e:f7:
b3:58:05:8f:6f:70:63:02:89:3a:bb:84:80:3a:e1:
00:38:5e:a3:1b:5e:ae:5e:84:25:43:98:b6:db:36:
fe:a0:c8:2f:eb:e7:6a:80:e4:24:af:a4:60:89:03:
4a:3f:68:a7:00:44:f4:f5:0f:29:82:38:dd:c5:65:
12:41:a4:c8:00:54:a2:42:56:10:9a:6c:fd:e4:67:
72:c3:e4:cc:83:1c:83:84:cc:95:7b:be:d0:2e:19:
fc:91:57:ab:37:13:c1:64:e9:22:37:11:8a:4c:e1:
93:c9:aa:7c:e8:df:08:2a:ba:9a:19:3c:0a:c2:9a:
e6:a1:12:86:f1:c0:32:ee:10:8d:9a:ff:2a:70:86:
7a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7F:A8:98:F1:BA:9F:F6:05:F3:26:DE:54:77:3B:ED:F5:08:08:17
X509v3 Authority Key Identifier:
keyid:AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/mH-omPG6n_YF8ybeVHc77fUICBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.144.0/21
94.126.160.0/21
185.36.97.0/24
185.36.99.0/24
IPv6:
2a02:2600::/32
Signature Algorithm: sha256WithRSAEncryption
22:ac:1b:5a:ed:7e:1a:57:35:93:bf:18:49:e7:46:ad:33:ff:
41:5f:8b:67:42:ab:99:42:e8:83:39:dd:2e:83:bd:f2:26:dc:
41:d6:b4:9e:52:63:df:85:80:fe:41:a6:31:8c:c3:5b:ff:1b:
21:c5:93:0e:9e:59:f5:82:86:ee:5c:0d:36:f5:de:07:b7:fb:
2a:cd:f7:74:95:d9:81:0e:6e:53:ba:6c:d0:a8:34:ea:8c:4d:
d4:1e:11:b7:c7:c6:94:98:ed:0c:aa:2d:49:58:ad:01:6f:40:
6a:d8:0e:04:9c:c5:f8:03:b3:b1:d6:72:89:9d:ea:11:79:5c:
8b:92:de:dc:1f:97:99:ab:22:f4:b4:af:74:b6:f0:29:70:5b:
55:1f:b8:72:1a:a1:f7:45:ef:e2:3d:14:f3:13:4e:bb:9a:2c:
16:53:18:a1:ee:f0:9a:a3:be:61:82:9a:67:03:7f:01:3b:95:
1d:ce:a4:ff:8c:a5:6d:c6:e2:ec:e2:1b:c0:c3:f1:3d:03:c3:
7a:b1:ab:fd:9c:fb:43:9f:be:df:d5:15:35:be:2e:22:c2:40:
b3:22:15:4d:4d:f8:25:ab:f6:9b:bb:db:08:72:e5:3c:f2:35:
4d:14:b5:b1:78:ae:22:a6:ae:c1:16:02:4b:da:cf:90:da:9f:
32:1c:9f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:33:00 2025 by rpki-client