Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8YVY3gbfQxovMXIm0NQFWfA9Yss.roa
File: 8YVY3gbfQxovMXIm0NQFWfA9Yss.roa (raw, json)
Hash identifier: 6W/41W/UzFkCSfOtSDAOU5YC+7LVXYz4zvtXX9TjgyM=
Subject key identifier: F1:85:58:DE:06:DF:43:1A:2F:31:72:26:D0:D4:05:59:F0:3D:62:CB
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018AA86FC04D32EABCB57425442D68CBE49A
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8YVY3gbfQxovMXIm0NQFWfA9Yss.roa
Signing time: Mon 18 Sep 2023 13:16:50 +0000
ROA not before: Mon 18 Sep 2023 13:16:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15428
IP address blocks: 31.148.112.0/21 maxlen: 24
146.158.80.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a8:6f:c0:4d:32:ea:bc:b5:74:25:44:2d:68:cb:e4:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Sep 18 13:16:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f18558de06df431a2f317226d0d40559f03d62cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:42:14:71:d0:b8:35:67:00:9f:65:05:66:24:
90:69:c4:aa:8c:2a:89:09:39:1f:4a:b8:ef:6e:80:
dd:b2:86:46:ed:e0:38:e6:31:03:db:b4:8b:cd:e1:
89:16:26:1d:46:e7:aa:e1:19:33:cf:7d:8d:4e:ce:
3e:a1:e9:ec:2e:70:b3:e8:50:31:96:3c:84:61:b5:
bf:db:07:40:6b:9c:cd:c1:76:9d:be:b7:24:58:1f:
5e:ee:72:f6:67:d3:0a:04:a1:12:44:99:71:75:70:
98:22:ad:fc:49:1a:78:dd:e9:71:d4:0d:74:df:c0:
2f:92:6e:fe:a1:94:0a:30:e0:f7:d4:0c:53:15:7a:
33:42:37:9e:1f:64:79:da:3d:2e:1f:c1:c0:91:cc:
de:a2:a3:58:cb:c3:70:4f:9a:4f:a9:8d:4a:1e:db:
63:4d:dd:03:93:8e:ec:bd:46:2c:18:25:17:a5:61:
e5:93:1c:0c:66:70:18:a8:7e:1a:9d:59:31:31:b6:
da:27:cd:c6:bf:91:90:9a:02:16:de:61:bf:4d:54:
26:9a:ab:7d:7d:c9:05:80:fe:c2:b9:64:5f:3b:dd:
0f:fb:72:9a:e5:80:00:0c:ce:53:05:e1:aa:d9:8e:
8a:d0:b6:d7:94:e0:e0:9b:f4:f3:7f:3c:e9:4f:03:
47:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:85:58:DE:06:DF:43:1A:2F:31:72:26:D0:D4:05:59:F0:3D:62:CB
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8YVY3gbfQxovMXIm0NQFWfA9Yss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.112.0/21
146.158.80.0/20
Signature Algorithm: sha256WithRSAEncryption
6d:b7:c5:9c:54:63:b7:57:c6:2c:fd:84:a0:9c:2e:a4:14:4d:
33:3f:38:62:a5:a3:8f:6a:df:85:f9:68:aa:f7:58:85:a4:a9:
4d:3f:4a:af:5d:fe:02:f1:2e:9d:2a:b8:ec:c4:9a:93:f6:a0:
65:e4:7c:c2:99:eb:4b:de:08:2c:4e:03:30:56:95:c7:4b:c7:
9d:ae:21:46:29:8e:6a:50:3d:3e:17:3b:ed:c8:fc:f5:d5:68:
87:3f:07:e3:c5:2e:7f:0a:c9:2c:c7:c3:06:29:ab:05:cf:8e:
8b:b3:47:b0:c5:fd:1d:29:13:2b:aa:cd:4d:8a:bb:f8:ca:41:
54:ff:0c:b9:62:f4:74:5f:d3:79:26:fd:aa:cd:3d:e4:1e:3d:
11:6e:43:78:c2:01:23:71:3f:5c:be:db:6a:2c:a1:c8:ac:3b:
41:6d:e4:34:54:4d:83:b7:55:77:8c:ca:ab:74:40:6b:1b:10:
a8:9e:e2:6a:97:57:75:00:50:f2:32:a1:dc:58:aa:dc:14:e9:
66:47:da:5f:3b:14:01:92:2d:53:bd:05:7d:8e:e9:31:7f:f7:
40:b5:62:50:a6:29:2f:65:2f:33:75:83:3b:bf:6f:53:6b:a2:
63:dd:a6:a0:f4:f6:48:85:67:94:be:ef:28:97:2f:24:18:c1:
82:e0:25:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:17:58 2025 by rpki-client