Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/fqH65a3HAQ2JTi8-K0a07a7gOAM.roa
File: fqH65a3HAQ2JTi8-K0a07a7gOAM.roa (raw, json)
Hash identifier: DnaYfcoenupOXiSYS/FV+i6C0OT1pdy1twQeIaXEl2c=
Subject key identifier: 7E:A1:FA:E5:AD:C7:01:0D:89:4E:2F:3E:2B:46:B4:ED:AE:E0:38:03
Certificate issuer: /CN=30747494ff4e26578d9deabe2ee6d004b3fe2d8c
Certificate serial: 0184BEEEEF7A4E90958551E84BEF00530285
Authority key identifier: 30:74:74:94:FF:4E:26:57:8D:9D:EA:BE:2E:E6:D0:04:B3:FE:2D:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/fqH65a3HAQ2JTi8-K0a07a7gOAM.roa
Signing time: Mon 28 Nov 2022 15:50:40 +0000
ROA not before: Mon 28 Nov 2022 15:50:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34636
IP address blocks: 194.31.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:be:ee:ef:7a:4e:90:95:85:51:e8:4b:ef:00:53:02:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30747494ff4e26578d9deabe2ee6d004b3fe2d8c
Validity
Not Before: Nov 28 15:50:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ea1fae5adc7010d894e2f3e2b46b4edaee03803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:90:c0:1f:76:7d:59:ed:b6:67:e6:97:a4:56:
d9:21:18:bb:69:ce:21:f5:f6:6b:be:64:bf:2e:28:
49:f7:c5:73:dd:d1:8f:45:0f:ef:9a:71:17:34:0a:
29:b5:87:6d:aa:5c:63:85:ae:d2:ca:a8:f7:0c:47:
b5:77:35:4f:1f:48:3f:98:f9:6c:a0:8e:98:37:94:
05:a0:c3:93:6d:ca:4e:50:be:d6:3e:bd:bf:09:f6:
61:d0:9b:a1:f9:4a:ea:d6:a8:85:c1:ff:c9:db:a4:
e2:a7:64:b2:a1:1e:85:b0:cc:76:7f:56:b5:f6:3d:
fb:03:18:0d:43:92:cf:70:27:39:02:ab:52:bb:3b:
c1:be:f3:12:f6:93:bc:65:3c:d0:a5:f2:1e:6d:02:
f4:b2:11:03:e9:22:b6:89:58:a8:5e:63:59:61:a8:
34:c4:7a:92:3b:84:39:33:29:19:e1:32:54:f8:74:
83:2c:a1:b5:1a:c0:f1:f9:21:88:0f:6a:e8:60:51:
8b:3e:fd:60:30:0d:35:92:19:8a:12:f3:83:90:06:
f6:90:0a:72:75:bd:9a:82:22:c8:b5:5b:7c:d8:4d:
3f:df:95:a1:f3:2b:f8:d4:46:41:94:e6:af:a3:b0:
26:a0:ae:f0:2c:ff:27:59:70:f2:8a:64:f0:88:4f:
2f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A1:FA:E5:AD:C7:01:0D:89:4E:2F:3E:2B:46:B4:ED:AE:E0:38:03
X509v3 Authority Key Identifier:
keyid:30:74:74:94:FF:4E:26:57:8D:9D:EA:BE:2E:E6:D0:04:B3:FE:2D:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/fqH65a3HAQ2JTi8-K0a07a7gOAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.108.0/24
Signature Algorithm: sha256WithRSAEncryption
33:85:c2:0e:6a:e7:e2:08:75:bf:55:d7:0a:ab:6c:6e:93:3b:
74:6a:33:e8:15:89:20:79:43:32:ae:29:5b:50:2b:7f:6e:f9:
a6:cc:6e:c8:82:26:25:e7:43:8f:78:9b:31:d5:91:49:ca:0d:
06:be:e0:7c:16:6c:ba:37:37:25:d2:94:d6:77:73:9c:a4:73:
21:57:9b:2c:7a:de:43:b9:ab:0b:96:a2:c0:75:32:0e:00:1c:
e8:72:ae:ed:4d:71:6e:b7:4b:a7:41:16:03:7c:bc:a1:ad:2d:
38:fb:8d:45:c6:82:37:ab:cd:29:4e:b8:15:3a:55:58:75:99:
58:9a:aa:aa:8c:29:54:9b:ab:2c:60:8b:26:20:46:22:1b:c6:
50:47:29:8f:2e:7a:8f:24:37:13:a8:41:8e:54:e3:b9:06:6d:
4a:93:fa:f0:d9:9a:db:1e:b9:89:94:ca:69:d3:3e:0c:6a:af:
64:bb:70:1f:78:3a:7d:c1:23:45:72:59:80:82:2f:ff:f8:de:
69:94:5b:d3:70:7f:f1:25:00:b2:0e:64:93:8d:0c:e8:92:6f:
e5:c0:89:26:b7:bd:5f:cc:e9:26:bf:6d:e5:3d:37:ef:4e:62:
12:03:ea:6b:3f:ce:e0:47:32:f2:82:c0:5f:cc:63:58:ba:d9:
30:07:18:52
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYS+7u96TpCVhVHoS+8AUwKFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNzQ3NDk0ZmY0ZTI2NTc4ZDlkZWFiZTJlZTZkMDA0YjNm
ZTJkOGMwHhcNMjIxMTI4MTU1MDQwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZWExZmFlNWFkYzcwMTBkODk0ZTJmM2UyYjQ2YjRlZGFlZTAzODAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpDAH3Z9We22Z+aXpFbZIRi7ac4h
9fZrvmS/LihJ98Vz3dGPRQ/vmnEXNAoptYdtqlxjha7Syqj3DEe1dzVPH0g/mPls
oI6YN5QFoMOTbcpOUL7WPr2/CfZh0Juh+Urq1qiFwf/J26Tip2SyoR6FsMx2f1a1
9j37AxgNQ5LPcCc5AqtSuzvBvvMS9pO8ZTzQpfIebQL0shED6SK2iVioXmNZYag0
xHqSO4Q5MykZ4TJU+HSDLKG1GsDx+SGID2roYFGLPv1gMA01khmKEvODkAb2kApy
db2agiLItVt82E0/35Wh8yv41EZBlOavo7AmoK7wLP8nWXDyimTwiE8vhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH6h+uWtxwENiU4vPitGtO2u4DgDMB8GA1UdIwQY
MBaAFDB0dJT/TiZXjZ3qvi7m0ASz/i2MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUhSMGxQOU9KbGVObmVxLUx1YlFCTFAtTFl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9iY2Y5YTMtNjk2My00M2MzLWI4ZGQt
Mzg5YTMwOThlYzJhLzEvZnFINjVhM0hBUTJKVGk4LUswYTA3YTdnT0FNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9iY2Y5YTMtNjk2My00M2MzLWI4ZGQtMzg5YTMwOThlYzJh
LzEvTUhSMGxQOU9KbGVObmVxLUx1YlFCTFAtTFl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwh9sMA0G
CSqGSIb3DQEBCwUAA4IBAQAzhcIOaufiCHW/VdcKq2xukzt0ajPoFYkgeUMyrilb
UCt/bvmmzG7IgiYl50OPeJsx1ZFJyg0GvuB8Fmy6Nzcl0pTWd3OcpHMhV5sset5D
uasLlqLAdTIOABzocq7tTXFut0unQRYDfLyhrS04+41FxoI3q80pTrgVOlVYdZlY
mqqqjClUm6ssYIsmIEYiG8ZQRymPLnqPJDcTqEGOVOO5Bm1Kk/rw2ZrbHrmJlMpp
0z4Maq9ku3AfeDp9wSNFclmAgi//+N5plFvTcH/xJQCyDmSTjQzokm/lwIkmt71f
zOkmv23lPTfvTmISA+prP87gRzLygsBfzGNYutkwBxhS
-----END CERTIFICATE-----
Generated at Tue Apr 29 08:37:16 2025 by rpki-client