Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/VKJMLVdzUhkGx6pRM2UFAVtlO_E.roa
File: VKJMLVdzUhkGx6pRM2UFAVtlO_E.roa (raw, json)
Hash identifier: +WHq2lf316Si7fkQu6kyP0Z9RI8wsH9BzB0nA+W5SyU=
Subject key identifier: 54:A2:4C:2D:57:73:52:19:06:C7:AA:51:33:65:05:01:5B:65:3B:F1
Certificate issuer: /CN=4081f85602b1168925d83eb3ca61609f357956a6
Certificate serial: D8B577
Authority key identifier: 40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/VKJMLVdzUhkGx6pRM2UFAVtlO_E.roa
Signing time: Thu 24 Feb 2022 07:03:17 +0000
ROA not before: Thu 24 Feb 2022 07:03:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56749
IP address blocks: 31.130.180.0/24 maxlen: 24
31.130.183.0/24 maxlen: 24
31.130.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14202231 (0xd8b577)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4081f85602b1168925d83eb3ca61609f357956a6
Validity
Not Before: Feb 24 07:03:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=54a24c2d5773521906c7aa51336505015b653bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9e:8d:cd:1e:3a:5a:35:4b:60:59:ad:cf:f3:
19:c8:d1:a3:e0:be:7a:30:cf:a3:79:54:da:f7:40:
51:77:7f:ee:ed:ff:23:92:57:cc:7a:3d:06:29:a2:
02:13:b2:ad:36:6f:b1:f5:21:80:fb:b9:c9:d5:e1:
68:20:16:a0:1a:47:72:26:01:39:d8:1c:4f:1b:88:
a4:39:4c:77:3a:52:b8:ab:4c:75:26:72:8a:9b:5b:
71:28:1a:1a:23:9e:dc:e6:42:2b:e1:ab:20:b0:13:
2b:5f:46:50:3c:c3:39:4f:ff:d0:88:d3:be:e4:ee:
bf:13:ca:4a:13:fc:90:52:c8:45:ac:8c:05:79:e0:
5c:68:29:26:5d:59:8b:26:6d:ae:c3:d1:1e:d3:da:
24:ab:c8:b6:cd:05:ab:af:c8:7c:2e:6b:cd:52:9b:
b1:d2:46:d6:5e:8c:e9:56:e2:9e:3f:0b:00:8f:6c:
a2:85:b5:84:aa:fe:51:c0:a0:b0:ea:de:72:a3:44:
56:e0:e5:fd:fb:dc:9c:fb:89:53:ea:4f:a8:64:ea:
fa:8f:ac:81:00:9f:c4:82:ad:08:e7:bb:2d:b5:62:
29:ba:69:76:07:db:a2:21:3b:e2:04:8f:7d:9f:b7:
70:0e:89:37:f1:ad:39:f3:e0:c9:2a:8a:ce:9e:0f:
45:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A2:4C:2D:57:73:52:19:06:C7:AA:51:33:65:05:01:5B:65:3B:F1
X509v3 Authority Key Identifier:
keyid:40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/VKJMLVdzUhkGx6pRM2UFAVtlO_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.180.0/24
31.130.182.0/23
Signature Algorithm: sha256WithRSAEncryption
e3:e3:cb:34:57:00:19:0c:21:38:20:b5:87:14:fa:b5:e6:0c:
6c:72:ac:44:1c:13:55:cb:ee:d9:25:0a:f8:91:b5:f3:97:fc:
2c:0b:2f:76:b6:f8:79:d7:aa:c7:87:8d:c5:aa:23:0a:14:93:
e8:5f:d4:6d:17:9e:4a:f1:a9:73:1f:ef:4f:a1:e8:02:84:3a:
b8:5b:8b:23:76:11:b2:e4:87:18:a3:84:c8:80:e8:a3:92:6c:
9e:1c:48:ca:21:4b:75:2e:74:ad:e9:08:30:4c:25:60:dc:14:
70:66:60:b7:81:7d:50:d9:8b:64:5a:94:00:5b:2a:68:86:ce:
54:a0:c6:01:03:c4:20:15:d7:b9:8b:c0:4f:e5:72:e4:d5:ae:
10:b3:8c:be:a5:a0:48:bc:1e:ac:0d:12:f1:e5:1a:35:4a:5e:
1b:d8:61:62:14:db:74:34:98:e8:64:d3:94:d2:42:f7:ba:9f:
92:1d:9b:9a:8f:08:c1:49:a0:47:97:6d:3f:93:1c:81:a9:07:
08:f8:67:cc:0b:b3:b7:51:ac:12:e8:7f:2f:5c:bd:7a:4b:e7:
9a:f7:b4:c1:68:55:bc:07:76:04:85:3f:52:bd:83:e8:8b:83:
e4:14:ee:17:97:6e:c4:c7:87:9b:3a:5f:7a:b3:f1:4a:97:a1:
f9:27:cb:42
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEANi1dzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
MDgxZjg1NjAyYjExNjg5MjVkODNlYjNjYTYxNjA5ZjM1Nzk1NmE2MB4XDTIyMDIy
NDA3MDMxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTRhMjRjMmQ1Nzcz
NTIxOTA2YzdhYTUxMzM2NTA1MDE1YjY1M2JmMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJSejc0eOlo1S2BZrc/zGcjRo+C+ejDPo3lU2vdAUXd/7u3/
I5JXzHo9BimiAhOyrTZvsfUhgPu5ydXhaCAWoBpHciYBOdgcTxuIpDlMdzpSuKtM
dSZyiptbcSgaGiOe3OZCK+GrILATK19GUDzDOU//0IjTvuTuvxPKShP8kFLIRayM
BXngXGgpJl1ZiyZtrsPRHtPaJKvIts0Fq6/IfC5rzVKbsdJG1l6M6Vbinj8LAI9s
ooW1hKr+UcCgsOrecqNEVuDl/fvcnPuJU+pPqGTq+o+sgQCfxIKtCOe7LbViKbpp
dgfboiE74gSPfZ+3cA6JN/GtOfPgySqKzp4PRYMCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRUokwtV3NSGQbHqlEzZQUBW2U78TAfBgNVHSMEGDAWgBRAgfhWArEWiSXY
PrPKYWCfNXlWpjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1FJSDRWZ0t4Rm9rbDJENnp5bUZnbnpWNVZxWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGMvMjJjOTNjLTkwMDAtNGU3My1hMWM1LWMwM2YzZmRkZDRhYy8x
L1ZLSk1MVmR6VWhrR3g2cFJNMlVGQVZ0bE9fRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMv
MjJjOTNjLTkwMDAtNGU3My1hMWM1LWMwM2YzZmRkZDRhYy8xL1FJSDRWZ0t4Rm9r
bDJENnp5bUZnbnpWNVZxWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAB+CtAMEAR+CtjANBgkqhkiG9w0B
AQsFAAOCAQEA4+PLNFcAGQwhOCC1hxT6teYMbHKsRBwTVcvu2SUK+JG185f8LAsv
drb4edeqx4eNxaojChST6F/UbReeSvGpcx/vT6HoAoQ6uFuLI3YRsuSHGKOEyIDo
o5JsnhxIyiFLdS50rekIMEwlYNwUcGZgt4F9UNmLZFqUAFsqaIbOVKDGAQPEIBXX
uYvAT+Vy5NWuELOMvqWgSLwerA0S8eUaNUpeG9hhYhTbdDSY6GTTlNJC97qfkh2b
mo8IwUmgR5dtP5McgakHCPhnzAuzt1GsEuh/L1y9ekvnmve0wWhVvAd2BIU/Ur2D
6IuD5BTuF5duxMeHmzpferPxSpeh+SfLQg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:27:30 2025 by rpki-client