Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/LWbq9hO-GhAwkC_ZYyoxnV945Pw.roa
File: LWbq9hO-GhAwkC_ZYyoxnV945Pw.roa (raw, json)
Hash identifier: 8q7f5Mz9r0Cqlf+n7ms2ikEOW9n9ZYusogLDsI/7Epw=
Subject key identifier: 2D:66:EA:F6:13:BE:1A:10:30:90:2F:D9:63:2A:31:9D:5F:78:E4:FC
Certificate issuer: /CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08
Certificate serial: 018678E8F0DD463D7AEF600C7FE87EEEF3ED
Authority key identifier: 82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/LWbq9hO-GhAwkC_ZYyoxnV945Pw.roa
Signing time: Wed 22 Feb 2023 11:36:17 +0000
ROA not before: Wed 22 Feb 2023 11:36:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50290
IP address blocks: 31.15.124.0/22 maxlen: 22
185.74.174.0/24 maxlen: 24
185.74.174.0/23 maxlen: 23
46.30.132.0/22 maxlen: 22
46.30.130.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:78:e8:f0:dd:46:3d:7a:ef:60:0c:7f:e8:7e:ee:f3:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08
Validity
Not Before: Feb 22 11:36:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d66eaf613be1a1030902fd9632a319d5f78e4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0d:bb:41:ce:70:c5:97:d2:a1:06:44:53:a1:
bc:38:d3:b6:88:ae:a2:f6:c8:eb:45:f3:8b:67:fb:
74:fd:4a:49:80:79:d4:e2:e7:57:ee:00:d6:71:7e:
1e:42:9d:e4:f8:8b:16:70:d4:1b:62:34:8c:20:67:
ea:0f:45:91:0c:4c:58:cb:a9:1f:20:bc:ac:e9:87:
bd:e1:29:fe:e7:61:71:9a:22:db:6d:2e:e6:61:7f:
f1:38:99:6a:77:b4:44:55:20:7e:47:a8:fc:88:75:
40:ea:84:88:db:34:27:aa:4e:92:f2:f4:c8:9f:41:
9c:77:11:55:67:56:72:49:c9:8d:d5:05:a9:0f:02:
f2:8f:20:05:5f:c5:1a:a2:d0:96:8e:00:b9:90:48:
84:eb:f9:8f:ca:22:4b:25:1a:39:c7:9c:60:44:13:
a8:fa:97:75:78:4f:3e:98:3e:74:dd:51:22:ef:66:
b4:03:31:5d:50:30:7f:7f:84:cf:ef:1c:27:2c:b0:
3a:5f:21:d4:35:fc:b1:f6:9f:b6:2a:2d:78:e3:1e:
3b:60:ce:cc:5b:c2:91:09:bb:eb:4f:86:a0:49:bc:
ad:39:ef:c4:d8:08:70:3a:54:c7:fa:60:92:bf:89:
75:ca:51:75:df:37:d6:4c:96:c3:e4:2b:3c:2f:b9:
a2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:66:EA:F6:13:BE:1A:10:30:90:2F:D9:63:2A:31:9D:5F:78:E4:FC
X509v3 Authority Key Identifier:
keyid:82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/LWbq9hO-GhAwkC_ZYyoxnV945Pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.124.0/22
46.30.130.0-46.30.135.255
185.74.174.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:c3:e7:a6:1e:77:a3:79:77:8a:25:b5:73:ce:0c:92:b1:86:
9f:ce:45:3c:25:ee:4d:35:2e:73:c7:41:26:13:dd:10:3a:13:
bf:15:9e:32:37:a7:e2:35:52:a9:1c:2f:01:49:da:e4:62:33:
05:c3:b7:b5:5b:0c:46:f8:a6:d7:6b:ae:ca:c4:04:8c:1d:ed:
ba:10:8e:04:8c:8b:a8:c4:93:8d:8e:8b:e2:ea:b7:52:16:75:
1a:37:1d:06:7e:f7:b0:eb:3f:08:d2:18:87:06:ab:00:c4:d3:
71:4e:61:ae:a1:39:21:f1:e9:7d:91:0c:ce:90:f1:c2:4f:e0:
ca:1e:81:65:3e:2e:e4:9f:36:78:ef:01:58:aa:67:89:0f:d5:
91:c1:52:e9:2a:d2:d1:cc:18:f4:0a:81:a7:57:1c:98:62:44:
37:8f:8c:e5:e1:9d:ba:be:97:e6:4c:a0:43:98:de:39:c3:83:
88:f4:95:c0:fd:35:13:a8:03:c4:7a:5e:c6:70:fb:62:ce:f0:
c4:ce:9f:4b:05:a1:e7:6d:6c:d4:93:34:12:43:71:2a:94:2f:
08:28:a6:90:48:d7:3c:e1:ba:72:2a:72:79:09:88:81:df:b6:
f6:91:ce:89:fc:5b:13:ec:96:e5:2c:63:60:6b:d4:24:81:fc:
7a:02:77:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:46:40 2025 by rpki-client