Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Dyt14k4pGAmAHgJhniSwaDeYaQw.roa
File: Dyt14k4pGAmAHgJhniSwaDeYaQw.roa (raw, json)
Hash identifier: 8tvNkUNL+LQXvQH33lRTrVu6O9D89us0w/vbjA20TrM=
Subject key identifier: 0F:2B:75:E2:4E:29:18:09:80:1E:02:61:9E:24:B0:68:37:98:69:0C
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27B17086
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Dyt14k4pGAmAHgJhniSwaDeYaQw.roa
Signing time: Sat 01 Jan 2022 16:08:37 +0000
ROA not before: Sat 01 Jan 2022 16:08:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49811
IP address blocks: 31.148.16.0/22 maxlen: 24
31.148.244.0/24 maxlen: 24
93.171.236.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 665940102 (0x27b17086)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f2b75e24e291809801e02619e24b0683798690c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:74:e9:1b:dd:22:57:1c:2d:55:40:bb:68:0c:
59:cf:60:c9:f1:34:5d:2a:b7:1b:dd:32:2a:28:c1:
d5:ee:5d:a7:79:50:9c:a8:10:ab:ab:d8:a4:6d:c5:
37:cf:f8:1d:5c:25:62:f2:2e:a6:58:3e:7f:60:2c:
fa:b4:bf:a9:7c:17:47:26:d9:61:19:45:97:f6:d2:
fd:cc:76:09:0c:de:a6:41:01:be:71:a3:63:36:99:
72:39:c0:cf:6a:60:76:98:36:59:4b:15:84:28:ee:
a7:41:36:0b:c8:c7:fc:26:3e:6c:d8:dd:08:d2:04:
69:19:97:54:34:d2:8c:c6:51:b8:62:b8:7d:70:d8:
1c:2c:c7:55:c3:48:05:f1:55:7f:ec:3d:27:10:95:
6e:37:07:d5:35:1f:96:2d:d4:cb:49:b7:ff:c4:85:
6f:c8:8b:04:69:06:1d:23:f9:dd:7c:13:f2:7d:40:
21:4c:80:a8:27:2a:ce:81:6f:f7:d9:91:5e:14:0f:
73:b6:ee:34:e8:77:03:9b:82:9a:4c:2e:7b:e7:81:
60:95:05:00:c1:15:a2:5f:9c:bf:51:c7:f7:58:19:
70:9d:68:fa:64:57:3f:f2:97:3c:00:11:73:61:81:
3d:63:df:89:75:b9:09:73:20:38:0c:a9:79:8e:52:
c1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2B:75:E2:4E:29:18:09:80:1E:02:61:9E:24:B0:68:37:98:69:0C
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Dyt14k4pGAmAHgJhniSwaDeYaQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.16.0/22
31.148.244.0/24
93.171.236.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:25:28:4f:2d:b6:6e:00:c6:de:b5:81:e3:11:2a:04:0d:90:
c1:3b:dd:5c:b2:76:35:16:dc:51:44:5c:1b:98:6e:de:89:56:
2a:c1:d3:34:84:a8:e1:9f:e9:52:b5:f8:4a:1d:80:89:95:c4:
99:14:4f:ca:4d:ec:8e:94:07:73:32:50:a8:ae:52:78:59:30:
59:42:c6:00:28:5d:aa:44:07:88:75:56:4c:50:55:30:f1:6c:
6e:f7:fd:7e:0d:18:78:da:2b:de:8c:0f:e6:23:07:25:62:54:
d7:f8:4e:74:f4:bd:ad:9c:82:44:ec:2e:d0:34:7a:5f:67:ef:
0f:cb:17:ff:84:03:c7:92:45:b6:d9:63:27:df:5f:9c:a3:26:
0d:6e:2f:d7:65:2e:4f:06:24:d3:6e:6f:68:7a:aa:a1:60:ba:
79:03:77:20:51:7a:0e:94:55:61:c1:4a:ef:ff:6a:13:d7:af:
0c:ac:1c:0f:cb:c8:59:04:12:a7:93:c0:dd:9f:48:e7:ce:e9:
94:c9:82:9e:92:22:ad:e0:14:e8:19:70:eb:9c:a3:65:2c:30:
c4:db:96:c9:24:4d:6d:99:bc:38:c0:d7:4d:31:ed:27:35:0f:
1e:3c:01:4a:ea:24:ab:c9:08:5c:80:20:22:f3:8b:4e:5a:4f:
93:78:88:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:24 2023 by rpki-client on console-ams.rpki-client.org