Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/0xf7CDJ5fJvOFxkts4nYyB-zRqw.roa
File: 0xf7CDJ5fJvOFxkts4nYyB-zRqw.roa (raw, json)
Hash identifier: KJ9zNVlK6ymulUawwHi+6DCgABHEQ3XWgTwpmtcfl30=
Subject key identifier: D3:17:FB:08:32:79:7C:9B:CE:17:19:2D:B3:89:D8:C8:1F:B3:46:AC
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 2986C592
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/0xf7CDJ5fJvOFxkts4nYyB-zRqw.roa
Signing time: Wed 20 Apr 2022 09:32:59 +0000
ROA not before: Wed 20 Apr 2022 09:32:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60165
IP address blocks: 31.148.120.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 696698258 (0x2986c592)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Apr 20 09:32:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d317fb0832797c9bce17192db389d8c81fb346ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:61:42:92:50:e9:5c:4a:55:37:49:b0:ed:d4:
89:8d:d8:a8:b2:30:36:73:c9:33:93:77:51:88:cb:
f9:0a:e2:15:b0:cd:e9:eb:92:0f:40:94:0f:8a:46:
32:04:82:14:42:58:12:c9:02:f4:22:1f:49:c6:c6:
06:7c:21:a0:d7:49:10:83:ad:5f:9f:1c:df:7a:65:
e5:38:48:60:87:f7:3c:fc:e2:5d:54:96:e6:c9:5a:
b3:b0:12:9e:ee:67:71:72:31:94:24:c9:a9:4a:18:
d2:27:5b:6c:8e:65:21:bf:f2:b2:d8:d7:64:55:f8:
e2:7e:22:5a:d3:b4:65:11:82:a9:5e:b3:8b:4a:c3:
ce:b1:a0:55:5a:a3:2a:ab:6d:3c:aa:d4:6f:18:7b:
63:58:7f:bb:a2:6f:ba:0d:3f:f1:65:e3:56:e2:e8:
69:12:e3:01:39:a3:28:f0:ca:c9:5b:1f:15:5b:a0:
07:1c:69:09:ac:ea:72:da:83:7e:9a:1b:9d:df:7b:
e0:4d:d3:9a:e0:cb:c4:0a:38:f5:08:95:a4:96:4b:
f1:05:f6:9f:c8:b3:b8:d7:7e:e5:63:23:a8:87:1b:
7f:75:98:5e:85:bd:c0:b9:dd:e7:a9:06:50:9a:6e:
a7:42:17:ae:e6:d4:23:91:de:f9:57:24:ee:2d:10:
3c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:17:FB:08:32:79:7C:9B:CE:17:19:2D:B3:89:D8:C8:1F:B3:46:AC
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/0xf7CDJ5fJvOFxkts4nYyB-zRqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.120.0/21
Signature Algorithm: sha256WithRSAEncryption
83:6c:fc:c1:56:e6:ea:01:9d:ce:64:76:33:ca:25:87:22:e2:
d1:a4:1e:5b:25:ac:ec:16:f6:a7:0a:6b:18:46:2d:74:72:ed:
8e:14:18:18:b6:f8:e0:eb:98:2c:ef:fe:f0:d4:6a:d8:88:66:
63:a0:ab:10:29:73:b8:c2:74:b6:59:d0:94:90:4b:d3:9b:c4:
f3:61:56:84:d1:e6:73:a2:ed:4c:c3:e6:e5:30:b5:40:6c:94:
11:4f:a7:54:44:8a:cc:aa:18:e6:42:82:27:ab:13:97:f3:e5:
7f:28:16:e3:f2:45:a3:98:b8:1b:1e:45:5e:e8:99:46:d2:d7:
a0:2d:50:c6:92:e8:09:97:b7:4d:81:34:c6:31:42:07:0c:e9:
cb:d5:1f:ed:c9:ad:d1:e1:2c:37:53:65:b3:74:a0:57:58:9d:
9f:da:42:a0:77:00:11:7c:eb:ce:b3:10:de:f9:fa:f8:5d:da:
cc:9e:9a:50:02:bf:f2:69:22:b7:aa:1b:34:c8:78:9c:85:11:
82:d6:2e:88:3f:0c:c8:23:37:a6:85:a7:f1:44:4e:24:2b:69:
d2:ba:60:59:ed:72:fd:ee:8b:94:fa:4c:72:ec:e2:11:87:5a:
74:d2:fc:a8:fb:6a:85:49:e4:6a:97:c5:76:c5:e1:78:39:d1:
34:41:b8:a8
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEKYbFkjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDkxMjJjMzU0MzhhNGViMjYyMzNmZGM2ZTRiYjFkZjJkYWFlZjQyMB4XDTIyMDQy
MDA5MzI1OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDMxN2ZiMDgzMjc5
N2M5YmNlMTcxOTJkYjM4OWQ4YzgxZmIzNDZhYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMFhQpJQ6VxKVTdJsO3UiY3YqLIwNnPJM5N3UYjL+QriFbDN
6euSD0CUD4pGMgSCFEJYEskC9CIfScbGBnwhoNdJEIOtX58c33pl5ThIYIf3PPzi
XVSW5slas7ASnu5ncXIxlCTJqUoY0idbbI5lIb/ystjXZFX44n4iWtO0ZRGCqV6z
i0rDzrGgVVqjKqttPKrUbxh7Y1h/u6Jvug0/8WXjVuLoaRLjATmjKPDKyVsfFVug
BxxpCazqctqDfpobnd974E3TmuDLxAo49QiVpJZL8QX2n8izuNd+5WMjqIcbf3WY
XoW9wLnd56kGUJpup0IXrubUI5He+Vck7i0QPHcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTTF/sIMnl8m84XGS2zidjIH7NGrDAfBgNVHSMEGDAWgBR0kSLDVDik6yYj
P9xuS7HfLarvQjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8x
LzB4ZjdDREo1Zkp2T0Z4a3RzNG5ZeUItelJxdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
MThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8xL2RKRWl3MVE0cE9z
bUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAx+UeDANBgkqhkiG9w0BAQsFAAOC
AQEAg2z8wVbm6gGdzmR2M8olhyLi0aQeWyWs7Bb2pwprGEYtdHLtjhQYGLb44OuY
LO/+8NRq2IhmY6CrEClzuMJ0tlnQlJBL05vE82FWhNHmc6LtTMPm5TC1QGyUEU+n
VESKzKoY5kKCJ6sTl/PlfygW4/JFo5i4Gx5FXuiZRtLXoC1QxpLoCZe3TYE0xjFC
Bwzpy9Uf7cmt0eEsN1Nls3SgV1idn9pCoHcAEXzrzrMQ3vn6+F3azJ6aUAK/8mki
t6obNMh4nIURgtYuiD8MyCM3poWn8UROJCtp0rpgWe1y/e6LlPpMcuziEYdadNL8
qPtqhUnkapfFdsXheDnRNEG4qA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:32:24 2025 by rpki-client