Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/3wuNq3WxkmONcNFBjCOnCOVXxc0.roa
File: 3wuNq3WxkmONcNFBjCOnCOVXxc0.roa (raw, json)
Hash identifier: oOfejxXfir2tpcEfcQRr2bXkuAKePoxyAcOBlr0TLrw=
Subject key identifier: DF:0B:8D:AB:75:B1:92:63:8D:70:D1:41:8C:23:A7:08:E5:57:C5:CD
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 278FB8E6
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/3wuNq3WxkmONcNFBjCOnCOVXxc0.roa
Signing time: Sat 01 Jan 2022 16:08:19 +0000
ROA not before: Sat 01 Jan 2022 16:08:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44031
IP address blocks: 31.148.198.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 663730406 (0x278fb8e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=df0b8dab75b192638d70d1418c23a708e557c5cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:97:6e:f9:4b:aa:2f:7f:4e:73:d0:a2:a5:b2:
6c:dc:81:7b:ec:9e:2c:ca:64:a8:7b:14:3c:a1:ff:
1a:9b:7a:77:86:54:41:69:33:24:30:01:40:ba:fc:
39:01:d7:53:63:0c:0c:82:bb:c6:9a:c5:34:32:78:
31:7c:2d:e9:86:0d:2d:59:d3:d8:fc:ee:f4:b6:cd:
1c:c1:d6:45:6f:b0:a1:35:e9:24:d1:81:e0:49:77:
98:00:0e:ec:a9:bf:22:8f:6a:40:39:8c:b3:0a:f8:
24:6d:8d:91:bc:54:18:bb:68:7f:fd:69:1c:00:18:
05:68:32:e4:64:3c:08:2a:64:60:9e:42:a4:e4:21:
f5:3b:4d:8b:89:e3:f0:16:f1:76:a8:f4:b3:36:25:
86:3a:26:f4:6c:0c:65:f5:65:24:ba:3c:34:3c:00:
5d:a9:a1:f8:0a:be:bc:b3:e4:fe:0e:50:0d:82:26:
07:fa:74:cc:59:87:52:8f:bb:15:4c:b2:31:6a:ce:
38:86:b4:05:bf:21:97:67:b7:ef:e6:f8:81:6d:57:
95:61:5a:fa:dc:ee:ca:9c:f5:73:7c:db:43:d3:86:
88:c1:af:38:22:f5:21:1b:31:d8:39:64:fb:b5:2c:
f0:1f:f0:06:dc:28:ae:77:75:b3:c3:ee:ad:3d:bf:
63:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0B:8D:AB:75:B1:92:63:8D:70:D1:41:8C:23:A7:08:E5:57:C5:CD
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/3wuNq3WxkmONcNFBjCOnCOVXxc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.198.0/23
Signature Algorithm: sha256WithRSAEncryption
42:4a:39:1a:0c:5a:4e:1e:82:80:67:2c:46:34:80:12:ee:33:
45:bf:89:c5:b4:68:b8:44:3d:d2:9d:5f:7b:6a:fe:25:25:66:
78:d9:4d:4e:f8:db:f4:93:5b:2d:7c:cb:8d:6a:0b:a5:39:64:
44:b5:24:81:43:06:9b:f7:f2:aa:7f:e4:65:1e:e7:bc:41:c2:
64:f3:04:dd:9d:10:58:97:4c:1e:06:87:b0:19:df:25:ed:f6:
28:da:91:ec:86:c1:a7:27:3e:fc:c3:e1:25:c6:70:99:97:1a:
9a:9d:dc:cb:4d:55:7c:cf:f0:3f:ec:19:bc:37:e2:d5:b9:8b:
7d:5c:8f:da:bb:22:fb:7a:f9:e5:80:1c:d2:1e:6c:ae:9a:a5:
48:9e:0f:c3:c8:98:42:59:2f:67:41:a3:50:f9:8b:7d:d0:47:
3a:74:6b:81:1c:bc:1a:bc:25:f9:c0:79:bc:25:fd:51:ed:95:
47:ea:a5:a3:41:44:65:bf:f9:16:0e:19:bd:4d:ed:c5:b6:42:
80:b1:b7:ca:86:a5:ba:cb:61:43:c7:b8:7d:56:30:ab:f6:0c:
2d:f9:a3:c0:d2:98:dd:69:0b:eb:d6:36:56:f8:00:10:4b:e0:
b4:24:91:ff:3f:c4:5c:26:8f:fd:5f:02:ec:0b:87:76:fe:10:
d8:f2:44:d7
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEJ4+45jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDkxMjJjMzU0MzhhNGViMjYyMzNmZGM2ZTRiYjFkZjJkYWFlZjQyMB4XDTIyMDEw
MTE2MDgxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGYwYjhkYWI3NWIx
OTI2MzhkNzBkMTQxOGMyM2E3MDhlNTU3YzVjZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJOXbvlLqi9/TnPQoqWybNyBe+yeLMpkqHsUPKH/Gpt6d4ZU
QWkzJDABQLr8OQHXU2MMDIK7xprFNDJ4MXwt6YYNLVnT2Pzu9LbNHMHWRW+woTXp
JNGB4El3mAAO7Km/Io9qQDmMswr4JG2NkbxUGLtof/1pHAAYBWgy5GQ8CCpkYJ5C
pOQh9TtNi4nj8Bbxdqj0szYlhjom9GwMZfVlJLo8NDwAXamh+Aq+vLPk/g5QDYIm
B/p0zFmHUo+7FUyyMWrOOIa0Bb8hl2e37+b4gW1XlWFa+tzuypz1c3zbQ9OGiMGv
OCL1IRsx2Dlk+7Us8B/wBtwornd1s8PurT2/YwsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTfC42rdbGSY41w0UGMI6cI5VfFzTAfBgNVHSMEGDAWgBR0kSLDVDik6yYj
P9xuS7HfLarvQjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8x
LzN3dU5xM1d4a21PTmNORkJqQ09uQ09WWHhjMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
MThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8xL2RKRWl3MVE0cE9z
bUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAR+UxjANBgkqhkiG9w0BAQsFAAOC
AQEAQko5GgxaTh6CgGcsRjSAEu4zRb+JxbRouEQ90p1fe2r+JSVmeNlNTvjb9JNb
LXzLjWoLpTlkRLUkgUMGm/fyqn/kZR7nvEHCZPME3Z0QWJdMHgaHsBnfJe32KNqR
7IbBpyc+/MPhJcZwmZcamp3cy01VfM/wP+wZvDfi1bmLfVyP2rsi+3r55YAc0h5s
rpqlSJ4Pw8iYQlkvZ0GjUPmLfdBHOnRrgRy8Grwl+cB5vCX9Ue2VR+qlo0FEZb/5
Fg4ZvU3txbZCgLG3yoalusthQ8e4fVYwq/YMLfmjwNKY3WkL69Y2VvgAEEvgtCSR
/z/EXCaP/V8C7AuHdv4Q2PJE1w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:36 2024 by rpki-client on console-fra.rpki-client.org