Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/Qbk2ZmgIofe6pwLlWa-ur5n1yNI.roa
File: Qbk2ZmgIofe6pwLlWa-ur5n1yNI.roa (raw, json)
Hash identifier: 7vz3S/jTn2/ecVKjtLNFm83xEkY/AddYsqrph46bOxc=
Subject key identifier: 41:B9:36:66:68:08:A1:F7:BA:A7:02:E5:59:AF:AE:AF:99:F5:C8:D2
Certificate issuer: /CN=a6f13d680ce480591bf8b37ddca0faeb3bbe744e
Certificate serial: 018B8B62982527894EF45511B23A60B5F856
Authority key identifier: A6:F1:3D:68:0C:E4:80:59:1B:F8:B3:7D:DC:A0:FA:EB:3B:BE:74:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/Qbk2ZmgIofe6pwLlWa-ur5n1yNI.roa
Signing time: Wed 01 Nov 2023 14:56:16 +0000
ROA not before: Wed 01 Nov 2023 14:56:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15480
IP address blocks: 109.32.0.0/13 maxlen: 13
31.136.0.0/14 maxlen: 14
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8b:62:98:25:27:89:4e:f4:55:11:b2:3a:60:b5:f8:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6f13d680ce480591bf8b37ddca0faeb3bbe744e
Validity
Not Before: Nov 1 14:56:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41b936666808a1f7baa702e559afaeaf99f5c8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e7:a3:31:f2:3c:43:d1:23:26:3a:22:0a:90:
3c:cb:b0:7b:3b:c9:33:ca:62:4f:e9:23:fc:8c:f5:
10:84:32:71:24:13:c6:28:ad:8b:42:53:06:b0:c0:
82:dd:ba:e3:10:56:a9:7d:2a:86:11:45:f8:f9:9b:
a2:6a:40:3e:93:bc:d9:12:85:e0:64:d1:73:7c:06:
6c:5a:f3:21:24:ee:f5:8c:00:68:ce:1a:9f:b8:54:
6b:53:4a:99:48:91:5f:e5:ca:63:2b:73:22:35:0c:
40:ab:4a:84:f7:eb:ec:55:45:33:a7:b9:38:28:e0:
7c:22:b0:c5:bf:74:a9:e3:26:d4:92:6a:f0:b3:3b:
44:8c:a9:ec:8c:9e:25:59:58:af:63:6c:db:e1:94:
b0:15:0a:03:0c:ce:ef:1e:4a:df:bb:40:50:c6:60:
17:c2:10:12:c0:65:8b:9a:e5:bd:b7:28:c0:ef:67:
43:79:9d:54:ea:11:f9:39:1d:ff:7d:31:fd:92:d9:
74:a0:cf:b5:bc:e8:08:28:fb:97:fd:4b:26:1c:d8:
3a:60:58:a8:2d:9a:17:35:8b:d2:37:a0:3d:d8:50:
e4:46:f7:4c:6b:8c:df:c0:cd:d4:d9:a5:f4:5f:fa:
8e:82:9d:4c:eb:7b:87:84:5f:c6:94:4c:b8:85:b3:
f3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B9:36:66:68:08:A1:F7:BA:A7:02:E5:59:AF:AE:AF:99:F5:C8:D2
X509v3 Authority Key Identifier:
keyid:A6:F1:3D:68:0C:E4:80:59:1B:F8:B3:7D:DC:A0:FA:EB:3B:BE:74:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/Qbk2ZmgIofe6pwLlWa-ur5n1yNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.136.0.0/14
109.32.0.0/13
Signature Algorithm: sha256WithRSAEncryption
0b:1e:bd:5b:a4:48:d0:8e:54:b1:91:05:6b:09:4d:56:ba:fd:
c9:df:b8:a7:65:15:5c:81:ef:16:88:9c:17:1b:54:6b:1e:b2:
07:e2:f4:68:e2:a0:b3:01:60:5f:f0:72:32:7f:4e:c9:46:2c:
6d:7e:c8:3a:3f:0e:a6:67:11:18:9e:f0:58:42:f7:6b:53:ff:
a0:dc:52:84:70:00:ba:33:e3:dd:34:ef:52:f5:40:ba:63:ce:
27:49:4f:79:1b:7b:49:70:c8:fc:fa:7f:9c:6f:ac:b2:28:20:
ee:7c:95:9c:a5:03:e2:a6:7a:3c:72:92:3c:aa:f5:3f:09:a8:
75:c4:19:74:48:24:95:f1:7b:c7:07:32:1f:a6:37:9b:54:f0:
24:17:2a:80:bf:02:4c:0f:c4:1e:c0:00:ee:71:94:ac:1e:18:
ad:7b:f1:8e:1d:05:35:72:a4:c0:0a:85:61:f6:c7:77:ee:c6:
65:fa:f0:d4:4d:24:7a:99:34:8d:d4:80:34:85:ff:f6:c0:d2:
27:61:55:ff:e3:38:d8:77:ad:52:e1:f6:b9:e6:39:7d:d4:db:
49:79:c5:06:52:66:04:06:49:6e:8f:e3:1e:7e:08:b3:b8:46:
a7:a1:c5:7b:4a:a9:78:69:34:d7:e7:d9:31:66:e4:63:1d:a1:
22:6c:e4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:19:30 2025 by rpki-client