Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7tWx8IookD0oiPoONs8b65MHT70.roa
File: 7tWx8IookD0oiPoONs8b65MHT70.roa (raw, json)
Hash identifier: Nw14imXhyXgD28WB25T8MmuYYvPw5TZUX2ZcFcGQiUE=
Subject key identifier: EE:D5:B1:F0:8A:28:90:3D:28:88:FA:0E:36:CF:1B:EB:93:07:4F:BD
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27663732
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7tWx8IookD0oiPoONs8b65MHT70.roa
Signing time: Sat 01 Jan 2022 16:07:56 +0000
ROA not before: Sat 01 Jan 2022 16:07:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29256
IP address blocks: 31.148.152.0/21 maxlen: 21
92.253.224.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 661010226 (0x27663732)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:07:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eed5b1f08a28903d2888fa0e36cf1beb93074fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:95:50:31:bf:74:ad:c5:e8:d6:b4:59:30:fe:
65:e4:ce:f3:f8:97:6d:c4:33:b5:ed:74:be:a4:b3:
9d:76:26:30:3d:49:f2:ca:98:c6:80:f5:d3:ce:d4:
d2:6b:17:62:67:dc:b1:99:cf:17:ca:97:91:72:6d:
76:78:0c:1c:3e:d7:d5:e6:35:cd:f9:67:f0:8b:77:
dd:6a:96:49:d9:aa:31:08:ac:db:45:b8:62:36:d1:
6d:78:d5:20:ae:33:3e:d5:9b:79:b3:21:18:3b:76:
c7:bb:c9:24:4f:9b:c5:4d:a6:82:16:4e:e6:41:f8:
50:b4:f3:4f:aa:43:62:c7:cd:a5:ca:3d:46:37:fc:
23:69:1a:25:1b:99:b7:8b:79:10:79:42:58:52:e4:
98:1c:82:17:2b:94:20:ef:cf:18:a1:a3:f6:3e:43:
56:82:ab:89:c2:6b:d4:c7:22:f0:45:52:0a:81:41:
b4:c6:e3:d0:95:91:2d:6a:00:cb:f5:ac:cb:ab:df:
58:94:0f:8b:55:48:7b:6e:52:50:b6:fe:c1:fa:2c:
19:55:5e:04:41:c8:0a:5b:f7:4f:d0:9d:39:32:72:
3b:f7:5f:d6:d1:14:54:5f:3b:68:35:96:e3:90:af:
d1:7c:b4:c0:38:3e:57:d1:e3:93:8e:7b:ef:2a:00:
9b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D5:B1:F0:8A:28:90:3D:28:88:FA:0E:36:CF:1B:EB:93:07:4F:BD
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7tWx8IookD0oiPoONs8b65MHT70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.152.0/21
92.253.224.0/21
Signature Algorithm: sha256WithRSAEncryption
51:6b:3e:d8:ec:42:3c:08:16:13:c4:44:18:ab:77:78:09:12:
7e:57:a4:9e:93:8f:62:d5:46:3e:4c:23:44:74:04:42:f3:17:
c6:ec:ae:50:1c:de:d3:94:28:51:c8:d7:66:e0:a7:c0:95:2c:
28:b7:41:2c:bc:6a:1b:35:77:74:86:dc:bf:bf:db:d1:54:50:
9c:16:5f:e5:cd:e9:17:27:4a:63:3a:20:09:b6:32:b7:f5:62:
38:82:f4:ac:a7:49:34:02:5a:35:49:79:f5:3c:db:49:4d:41:
74:3f:9f:4e:71:c9:fe:70:88:1e:7b:95:2d:d8:01:44:4f:ea:
05:52:18:94:c0:50:99:84:40:8a:66:b5:35:c4:be:40:db:4b:
de:bd:05:ba:85:e0:df:1e:6a:e8:25:c1:84:31:a7:85:cd:41:
8e:0d:82:fb:4f:83:7c:92:e2:54:9b:52:0b:bb:90:c9:26:e8:
0d:46:ea:a8:5d:a7:48:e5:71:14:68:b5:b0:f4:b1:b3:3d:d7:
23:87:0f:b6:2d:8e:30:3e:1b:63:c1:2b:c8:2d:af:b9:b0:6f:
23:2b:ca:c6:23:5c:01:e8:46:a9:f0:22:f6:2d:b1:1e:1a:4b:
7f:82:19:0e:61:a1:91:c5:4b:0d:47:55:d5:e5:2e:e2:d7:4c:
6d:85:79:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:41 2023 by rpki-client on console-fra.rpki-client.org