Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/5Hpnh_swI3mZR8wSTRKjNgMDP_A.roa
File: 5Hpnh_swI3mZR8wSTRKjNgMDP_A.roa (raw, json)
Hash identifier: KerPI3J+2U1m9tsIkz3k7D13sQREJp4PK9Kmc+XBaE4=
Subject key identifier: E4:7A:67:87:FB:30:23:79:99:47:CC:12:4D:12:A3:36:03:03:3F:F0
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570953C5E42303CA8E3C4F5023DED5892
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/5Hpnh_swI3mZR8wSTRKjNgMDP_A.roa
Signing time: Mon 02 Jan 2023 03:45:06 +0000
ROA not before: Mon 02 Jan 2023 03:45:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49038
IP address blocks: 31.148.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:3c:5e:42:30:3c:a8:e3:c4:f5:02:3d:ed:58:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e47a6787fb3023799947cc124d12a33603033ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:89:2d:92:7d:61:6e:c8:20:6c:ac:b0:df:d0:
5a:12:01:ae:7a:3b:79:58:d3:57:7a:34:1a:81:19:
a2:5e:b0:30:9f:3c:85:85:86:3e:3d:ac:50:2d:aa:
df:67:98:6b:09:4e:1a:f6:28:0a:b7:33:ae:80:42:
8a:b3:fb:f3:6f:d7:bf:a6:bb:35:53:23:e3:75:09:
7f:d7:b0:ef:db:45:20:f2:82:75:41:25:86:a1:eb:
21:e7:8e:fb:b2:85:c2:cd:43:76:dd:cc:ea:67:9e:
c3:11:d1:06:44:04:18:50:c4:b0:01:1f:02:53:5f:
97:3d:ee:25:bd:cd:d8:3e:15:f9:f8:68:d7:1b:79:
28:53:81:7d:d8:ea:8e:21:af:02:28:20:0f:e8:ff:
7f:21:51:53:e8:45:c4:4a:7e:92:68:58:4e:c4:66:
8a:18:f8:4f:e6:7f:dd:16:e8:c6:97:c1:71:ba:e3:
fe:58:27:f7:b5:76:81:52:2f:cb:d7:f3:5b:e4:f3:
b3:22:5d:46:24:3d:da:2b:66:cb:dc:d0:3e:3d:02:
2f:49:91:e3:27:e0:b1:9b:89:6d:5b:df:ac:76:a1:
61:a1:f9:b3:aa:5a:bf:9a:f4:f3:39:50:0b:22:7b:
f0:d4:b0:76:fc:3d:4f:48:83:84:f8:f7:1b:55:0a:
bc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7A:67:87:FB:30:23:79:99:47:CC:12:4D:12:A3:36:03:03:3F:F0
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/5Hpnh_swI3mZR8wSTRKjNgMDP_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.23.0/24
Signature Algorithm: sha256WithRSAEncryption
49:4f:28:49:f6:47:0e:3a:30:9d:6e:56:b5:60:8f:92:6c:bc:
66:75:1e:58:cb:d1:08:83:31:fd:6a:9c:cc:d7:5b:fe:82:19:
40:e3:e9:6f:85:c7:01:2b:a4:e8:b1:cb:53:da:08:3a:b5:7c:
c2:3c:98:c7:18:76:4e:ed:e6:b0:60:7a:de:21:e6:58:e1:30:
0b:5a:0f:68:68:ad:3f:e3:22:ae:0c:c0:d8:4e:a3:4f:c8:06:
c2:ba:b6:af:1a:50:d6:94:6a:77:bf:cc:22:e7:89:25:fe:f1:
b3:7b:cb:9a:d0:0c:17:30:ed:ab:85:8d:1c:d4:60:14:1d:5e:
bc:80:be:87:41:2c:a2:e5:26:e6:fe:9b:8e:35:e9:59:41:1c:
f5:f1:cd:45:ae:fc:6a:ac:c0:6f:fb:78:13:09:48:e6:1c:6c:
1a:d1:87:9a:02:e2:6e:9c:18:b4:f2:d4:95:f0:fc:cd:50:bc:
36:85:60:21:a4:04:83:29:41:9f:cd:21:5e:89:0f:ba:dd:93:
74:ee:3f:f0:67:47:e6:f1:8e:e7:4d:b6:9d:32:07:68:0e:51:
6b:53:17:91:a9:07:b5:72:10:71:98:b6:86:58:a1:b8:f5:9e:
c9:a3:d0:46:b3:f6:4f:7a:d1:10:30:b9:dd:f8:c2:b7:56:ec:
89:6d:32:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:42 2025 by rpki-client