Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/oFJkekjD-Mp3sSuRDUO0J1623Pc.roa
File: oFJkekjD-Mp3sSuRDUO0J1623Pc.roa (raw, json)
Hash identifier: ESRjkPXsjDVjBSj5tD+MY47utW+xeVBG/W0rcMtCiG4=
Subject key identifier: A0:52:64:7A:48:C3:F8:CA:77:B1:2B:91:0D:43:B4:27:5E:B6:DC:F7
Certificate issuer: /CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Certificate serial: 019B5310
Authority key identifier: 8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/oFJkekjD-Mp3sSuRDUO0J1623Pc.roa
Signing time: Thu 10 Feb 2022 00:06:52 +0000
ROA not before: Thu 10 Feb 2022 00:06:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60025
IP address blocks: 31.40.4.0/24 maxlen: 24
31.40.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26956560 (0x19b5310)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Validity
Not Before: Feb 10 00:06:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a052647a48c3f8ca77b12b910d43b4275eb6dcf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d8:d1:07:cb:28:d7:ce:ed:91:55:79:9b:d6:
10:1a:10:5d:5f:0f:ab:a1:14:77:2d:e2:e8:b9:98:
65:06:71:0f:a5:c0:a5:52:fb:46:d5:75:33:cc:3a:
a7:03:a1:26:e1:9e:6a:96:f7:2f:3b:51:93:a3:a2:
b9:57:f1:0c:c6:92:8b:7b:1d:ef:f3:f2:46:7c:b8:
b2:01:7e:cc:1a:f7:34:c1:00:84:16:5f:40:50:fc:
4b:31:2f:52:79:e9:c6:cd:32:dd:52:b8:73:10:be:
61:38:fb:60:02:a2:19:7b:99:77:c9:09:f5:be:9a:
e6:56:18:4f:73:b1:9c:70:1a:82:2b:fe:e9:dd:bd:
d8:2e:1b:b7:cc:00:07:ca:e8:3a:8c:c1:62:e2:15:
a8:f0:97:1b:b4:b5:ce:d9:53:8b:0d:67:7b:11:04:
66:45:bf:72:88:ff:37:7a:ea:22:72:53:6c:9c:a2:
04:03:79:f8:88:41:9e:88:38:9d:0d:d0:33:53:46:
d7:47:8b:4f:2c:53:de:37:44:e0:84:8d:cd:14:fb:
f6:2e:ed:e6:ed:ea:3b:36:ba:e3:9a:d5:1c:d7:fb:
d5:b6:fc:4c:13:83:16:2a:1a:14:5d:7a:2c:0b:64:
53:87:a9:df:da:ff:42:60:fa:e1:ef:d6:72:bc:8a:
12:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:52:64:7A:48:C3:F8:CA:77:B1:2B:91:0D:43:B4:27:5E:B6:DC:F7
X509v3 Authority Key Identifier:
keyid:8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/oFJkekjD-Mp3sSuRDUO0J1623Pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.4.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:b0:6b:3c:cd:eb:27:bf:a1:1f:6b:c9:19:34:dc:a4:a8:b4:
a6:cc:6b:1e:cb:d1:b0:0b:76:00:62:7b:18:9d:1e:5d:78:09:
dd:a7:b4:13:4d:1c:66:8f:56:5c:dc:bb:ad:0c:a3:b6:43:18:
ec:71:f6:61:4c:2c:5a:a6:2c:d9:6f:e5:77:e7:85:70:59:43:
51:da:91:eb:a8:78:49:96:8a:31:e5:6c:a4:bd:68:bf:4a:36:
51:4d:5c:48:6a:eb:fd:a5:43:09:fa:8b:74:80:fa:1b:bc:17:
fa:21:43:f6:21:96:92:a6:22:19:96:e9:e2:37:55:0f:83:88:
25:3d:00:ca:c4:de:e1:5f:62:ac:f3:05:89:9f:2b:f6:d3:72:
94:3d:06:1b:35:11:65:f8:54:40:f5:9a:3e:f5:99:a8:9d:01:
a9:17:ce:12:61:60:73:3e:aa:7b:fa:26:ac:d1:86:f6:b0:0e:
6f:ef:a3:8d:4d:46:a6:da:cf:ab:ec:19:b9:8b:3f:27:b1:70:
46:ed:7d:3e:6c:7c:88:60:82:d6:6f:3d:9d:f8:da:af:7e:e9:
c7:e0:b7:de:0f:52:db:51:52:fa:49:7b:69:3a:09:77:dc:d0:
40:4d:95:78:d6:f7:e4:a9:08:42:cd:30:ae:d7:06:42:4d:95:
46:89:85:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:18:17 2025 by rpki-client