Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/ONCM19RYocB-95KQGteYJ1dZpfM.roa
File: ONCM19RYocB-95KQGteYJ1dZpfM.roa (raw, json)
Hash identifier: xen81u7KV1O4Ny3LUClG9XhVLog7nmZMnchJZyO6pcc=
Subject key identifier: 38:D0:8C:D7:D4:58:A1:C0:7E:F7:92:90:1A:D7:98:27:57:59:A5:F3
Certificate issuer: /CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
Certificate serial: 018CB4B82D787F354D5CC16B98AE76893528
Authority key identifier: E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/ONCM19RYocB-95KQGteYJ1dZpfM.roa
Signing time: Fri 29 Dec 2023 08:36:58 +0000
ROA not before: Fri 29 Dec 2023 08:36:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210611
IP address blocks: 46.31.183.0/24 maxlen: 24
2a00:df80:ffff::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b4:b8:2d:78:7f:35:4d:5c:c1:6b:98:ae:76:89:35:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
Validity
Not Before: Dec 29 08:36:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38d08cd7d458a1c07ef792901ad798275759a5f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:65:9f:57:3c:4d:bb:32:54:85:35:a7:dc:76:
12:41:b2:54:15:21:4c:95:b6:23:e4:03:7e:2c:c0:
d4:82:ad:f0:c4:b9:15:c0:6f:09:18:35:ad:81:45:
bf:b9:fa:17:3f:f7:1b:63:c9:06:74:6d:2a:52:68:
f7:d9:a9:14:47:c8:89:97:79:ef:63:b1:0b:6a:c6:
0f:8b:49:d5:26:3e:15:ff:0b:f7:b3:84:46:bf:9a:
9a:be:09:73:77:83:b6:54:04:ba:a9:5f:38:6d:e0:
af:94:bf:5d:1f:a3:b5:cb:c0:83:7c:3b:a2:95:aa:
c1:6c:fc:30:a7:bd:2e:a6:44:a1:13:fa:61:58:ad:
88:bd:6b:51:21:df:c8:f8:43:70:59:33:5f:40:ac:
62:84:02:c4:e7:a6:6d:cd:d6:49:ba:50:65:61:6f:
ea:6c:56:3c:71:ea:28:34:16:e9:ca:60:f3:50:10:
72:25:8b:a7:9d:0b:1a:6f:24:92:08:2b:1c:8f:b4:
f4:c3:3e:d9:50:ef:25:4d:03:fb:75:05:b0:de:aa:
bc:ba:ba:31:fc:01:7d:0d:33:2d:38:0a:f8:44:52:
f9:46:9d:f3:b7:b5:d1:ef:82:bb:5a:c1:13:fd:85:
7f:12:53:69:79:37:7d:9c:18:56:40:18:28:2a:76:
ed:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D0:8C:D7:D4:58:A1:C0:7E:F7:92:90:1A:D7:98:27:57:59:A5:F3
X509v3 Authority Key Identifier:
keyid:E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/ONCM19RYocB-95KQGteYJ1dZpfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.183.0/24
IPv6:
2a00:df80:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
23:4f:bd:8c:4d:50:5d:bf:98:1a:ac:5e:b3:f3:71:36:78:92:
7e:9e:f3:33:ea:4a:0b:c3:6b:51:c9:1c:ef:54:74:63:c4:65:
53:8b:7f:51:bc:dc:19:a2:3f:c0:da:7e:bc:8b:b9:aa:55:d6:
4c:4f:e9:bc:51:cc:9f:57:1b:a5:e1:41:ef:50:d3:85:37:43:
89:64:41:76:c1:7b:94:3f:f1:46:e2:a9:7b:a3:a2:87:a8:2a:
91:40:7c:f0:e9:62:fa:be:a4:06:95:a3:16:63:29:58:0a:1c:
d2:de:d4:9d:d2:f3:a2:54:88:d7:8d:dc:46:6e:af:ca:bd:69:
c5:c7:cb:c1:2c:79:21:41:99:f1:41:68:0b:76:44:1a:74:9d:
4a:01:21:72:50:3b:c7:6d:d1:c3:f0:84:b4:4e:ff:47:2c:07:
2c:82:aa:69:c6:f9:f3:ee:c3:6b:30:05:3c:2f:a8:9b:56:c1:
c3:26:aa:19:82:b0:47:1f:a9:bf:42:3e:99:d8:5c:49:38:5b:
d1:c2:ec:b8:d8:28:63:10:56:fa:60:18:4d:f1:fe:da:5e:57:
4b:70:4e:4f:b6:74:61:06:73:20:64:48:eb:e8:81:0e:ff:94:
33:4b:0f:02:15:eb:e3:de:09:c8:70:42:89:a8:1a:2e:3e:96:
71:9b:e0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 00:52:00 2025 by rpki-client