Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/jcGALqQQQ5cJxv2YvwTXhbP5pQQ.roa
File: jcGALqQQQ5cJxv2YvwTXhbP5pQQ.roa (raw, json)
Hash identifier: kGmjq0OjmZMU11ZnHMrNMqGZynIm+JLRUTWlYmGKHRw=
Subject key identifier: 8D:C1:80:2E:A4:10:43:97:09:C6:FD:98:BF:04:D7:85:B3:F9:A5:04
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 01864FF0DE347A389C4DAD27CB16C3A399C9
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/jcGALqQQQ5cJxv2YvwTXhbP5pQQ.roa
Signing time: Tue 14 Feb 2023 12:40:30 +0000
ROA not before: Tue 14 Feb 2023 12:40:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202391
IP address blocks: 31.25.92.0/22 maxlen: 22
31.25.92.0/24 maxlen: 24
31.25.95.0/24 maxlen: 24
31.25.93.0/24 maxlen: 24
185.49.104.0/22 maxlen: 24
185.118.12.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4f:f0:de:34:7a:38:9c:4d:ad:27:cb:16:c3:a3:99:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Feb 14 12:40:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8dc1802ea410439709c6fd98bf04d785b3f9a504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:90:31:89:ba:4b:a9:0e:e9:4c:48:1c:99:5a:
f0:77:c3:92:0f:e4:3d:4c:48:07:fc:ed:14:a1:9a:
91:a4:f2:7d:68:f2:d2:1e:54:53:81:9e:36:bf:d3:
86:e4:bd:05:d6:64:1d:00:87:cc:fa:af:f0:bc:61:
2e:a8:b4:d4:fc:02:99:79:4a:4d:92:09:59:c9:da:
1f:0c:79:c6:48:84:f1:e1:e9:1c:ec:12:62:ed:59:
e5:44:0e:1e:f1:21:35:0b:67:14:54:55:8f:6e:b4:
22:81:f9:84:ec:87:0e:96:bb:82:7d:a4:67:7d:88:
a2:65:bb:ab:b9:bc:97:b4:55:5e:8a:8e:e7:7b:4d:
68:32:53:12:ab:58:9a:0f:7a:e6:ec:c2:ef:04:43:
b0:c4:3b:e3:d3:d5:ef:51:b4:bf:6e:49:59:de:d4:
a7:1c:ba:c2:8c:43:5d:36:7d:69:36:86:46:8a:6d:
28:a4:b4:70:58:86:36:d6:3f:6d:ec:02:ba:1e:e8:
ef:72:e8:b8:0d:f5:01:10:cc:d6:4a:07:82:49:f9:
40:27:a8:64:7d:4a:7c:67:65:2e:be:47:71:cb:e7:
a0:16:0c:e6:89:e7:04:75:95:88:f5:93:fd:30:db:
9b:e1:52:3c:da:bf:24:e3:5d:ea:34:29:e4:10:ae:
0a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C1:80:2E:A4:10:43:97:09:C6:FD:98:BF:04:D7:85:B3:F9:A5:04
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/jcGALqQQQ5cJxv2YvwTXhbP5pQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.92.0/22
185.49.104.0/22
185.118.12.0/22
Signature Algorithm: sha256WithRSAEncryption
25:65:dc:2b:59:68:e6:34:29:57:12:5e:a9:cc:a1:41:ad:a0:
e1:ca:8e:8c:32:06:3b:92:0e:ea:ce:42:ce:0e:22:a3:36:8e:
bf:85:09:eb:ae:59:47:72:97:9f:ed:c5:e7:f1:88:52:ba:e0:
fc:15:75:a0:a6:3e:d6:12:53:9f:f9:78:b8:37:e4:2a:66:2d:
6f:da:79:f7:b3:df:c4:09:ca:b7:80:7f:72:ce:93:1b:cc:07:
19:e0:bf:6e:3e:72:51:85:c9:1d:6b:8f:6c:73:b2:7c:a7:0d:
5d:e3:39:3a:1c:4f:23:40:09:5e:3b:45:c9:f0:da:67:f0:9c:
1b:1d:b4:18:6d:19:ed:58:83:6f:f0:87:a6:39:4d:13:24:c0:
6c:ec:f0:ac:3c:2c:9a:0a:9a:c1:b3:71:df:84:96:13:3b:bf:
92:6a:2d:d6:08:e3:da:a0:74:9d:6f:df:4a:d3:d1:05:2a:f8:
12:88:e2:b8:97:76:84:dd:e1:66:c2:32:87:78:fe:99:aa:a6:
d5:39:d7:69:97:11:4c:ef:7e:60:25:ec:fe:5a:b7:5e:7d:4f:
77:51:95:74:fb:b6:70:bb:1a:ef:cb:ae:86:fc:eb:c4:f5:d9:
8a:8b:90:cd:39:64:7a:01:d0:a4:65:af:7f:97:04:d7:95:2f:
ed:be:31:91
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 28 04:06:54 2025 by rpki-client