Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/e_V8xz6RVsmjEEE-oJgyrbUtOv8.roa
File: e_V8xz6RVsmjEEE-oJgyrbUtOv8.roa (raw, json)
Hash identifier: 7sGRkeo/9v6ByKDCfMousnwfMSX+mlzr6j7LL7D4//A=
Subject key identifier: 7B:F5:7C:C7:3E:91:56:C9:A3:10:41:3E:A0:98:32:AD:B5:2D:3A:FF
Certificate issuer: /CN=bdd244214d76468d3fb72abad1892ef23dede978
Certificate serial: 018A5F49C475D32AFDBA01EB77CBB17A2D83
Authority key identifier: BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/e_V8xz6RVsmjEEE-oJgyrbUtOv8.roa
Signing time: Mon 04 Sep 2023 08:23:04 +0000
ROA not before: Mon 04 Sep 2023 08:23:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6730
IP address blocks: 31.10.192.0/18 maxlen: 18
178.82.0.0/16 maxlen: 16
31.10.128.0/18 maxlen: 18
31.10.128.0/17 maxlen: 17
46.126.0.0/15 maxlen: 15
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5f:49:c4:75:d3:2a:fd:ba:01:eb:77:cb:b1:7a:2d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd244214d76468d3fb72abad1892ef23dede978
Validity
Not Before: Sep 4 08:23:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bf57cc73e9156c9a310413ea09832adb52d3aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0f:23:c1:2d:a5:fd:6b:4f:bf:69:1a:bd:b0:
96:97:b5:a3:32:d6:82:b3:83:23:7b:8a:b3:15:16:
be:87:50:f0:f4:a7:f2:a5:e0:51:99:20:61:93:d4:
0d:9d:b0:1d:84:5b:6d:56:4c:e0:9e:89:57:a8:c2:
81:3e:9b:db:32:a2:7b:b1:75:76:7d:7d:c4:01:89:
6f:c6:81:ba:21:9b:4f:12:59:dd:28:99:6a:cb:6b:
70:1d:9d:bd:41:c3:d1:59:48:f6:48:80:17:41:9f:
72:88:ba:90:3b:1c:9a:ec:d9:0e:08:5d:6e:93:3d:
7b:73:51:3b:e4:a4:ab:f2:5e:70:b5:54:2d:9b:24:
f8:5e:73:e7:4d:c1:a3:c7:0d:c0:89:ca:65:a7:73:
95:8b:8b:d0:7f:27:d0:1d:17:98:ee:d6:5c:aa:13:
ae:af:63:30:d5:5e:4d:68:bb:f6:ab:f0:c3:87:fc:
85:aa:fd:4d:df:7d:b5:24:12:8b:11:e7:ba:e5:f5:
1d:ae:00:d5:57:15:ed:95:2c:ac:36:03:ab:b7:ac:
78:82:ed:d5:3e:f5:cb:d1:e7:e9:2e:95:5e:3d:5d:
8b:9f:91:77:ba:00:49:60:b7:c7:7b:e3:6f:3d:ad:
16:aa:d2:ea:d3:43:43:fb:50:60:5f:ae:90:ec:be:
44:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F5:7C:C7:3E:91:56:C9:A3:10:41:3E:A0:98:32:AD:B5:2D:3A:FF
X509v3 Authority Key Identifier:
keyid:BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/e_V8xz6RVsmjEEE-oJgyrbUtOv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.10.128.0/17
46.126.0.0/15
178.82.0.0/16
Signature Algorithm: sha256WithRSAEncryption
04:52:e6:c1:2d:9c:25:54:71:db:f5:7f:32:5b:12:db:e6:fd:
3d:28:e1:ea:d2:84:9e:b1:d4:19:86:93:eb:cf:b2:72:63:fd:
f0:be:7d:e7:3e:ad:3f:4a:ec:5c:65:46:b1:fd:c1:23:60:f9:
aa:8e:6f:e7:d4:79:1e:76:65:08:a1:24:95:c9:ad:b4:db:94:
e9:07:3b:e0:8a:77:79:28:d1:8a:cf:41:f7:ff:71:14:bd:99:
8f:ee:34:d6:89:85:15:ed:49:d1:f4:fd:04:15:d9:8c:bd:66:
ed:e7:25:8d:96:6b:b7:91:97:04:ae:e4:e6:c6:44:be:f2:cd:
e8:40:7c:7a:a1:ec:8c:62:0b:d3:1a:b6:4b:b1:2a:ec:8e:48:
47:88:bb:82:e1:f2:23:b4:4c:17:a3:cf:de:40:3b:62:20:01:
26:b8:b8:1b:97:73:e4:59:62:ac:f6:a9:02:cf:dd:e4:0a:ff:
c4:cd:09:64:2b:4a:f7:c3:25:c4:93:82:a0:aa:17:1a:1b:a3:
cb:06:dd:eb:93:b6:60:b0:02:30:e7:fe:6c:ed:f9:a2:d0:17:
48:35:a9:06:6f:46:f0:f3:04:fc:76:0d:a1:5d:dd:0d:db:e9:
21:5f:24:21:7b:b2:6b:a7:80:2c:bd:60:1f:58:fa:43:0b:2e:
81:a5:f9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 16:00:29 2025 by rpki-client