Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/PgSsuizb4-Q3VPBEAjVs7OOMGoE.roa
File: PgSsuizb4-Q3VPBEAjVs7OOMGoE.roa (raw, json)
Hash identifier: ryYPhH5d0C6l6IWqTZk8llDuBM8pL8XdHkwl5AC7dKI=
Subject key identifier: 3E:04:AC:BA:2C:DB:E3:E4:37:54:F0:44:02:35:6C:EC:E3:8C:1A:81
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27C4EA0C
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/PgSsuizb4-Q3VPBEAjVs7OOMGoE.roa
Signing time: Sat 01 Jan 2022 16:08:49 +0000
ROA not before: Sat 01 Jan 2022 16:08:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51841
IP address blocks: 31.148.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 667216396 (0x27c4ea0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e04acba2cdbe3e43754f04402356cece38c1a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c4:f2:3c:9d:f3:00:19:35:f8:51:14:26:4a:
f6:44:f3:52:7e:c9:c1:c1:1e:eb:5e:71:f2:d7:2f:
48:1d:40:ac:fd:f8:f9:83:44:36:e2:46:76:91:a0:
53:45:12:14:41:a8:af:7d:8f:dc:02:4a:f3:39:c4:
80:6a:0d:6d:6e:42:29:8c:83:57:07:ca:37:c7:5d:
27:7a:b6:c0:3d:85:15:3f:4d:e9:53:ab:1a:df:7b:
71:35:c9:29:4a:ea:55:85:6f:db:d8:23:71:22:02:
1f:05:2f:69:46:81:8c:ad:c4:66:37:f5:8f:31:2c:
b8:18:1b:83:ee:95:b2:af:2a:9a:32:fb:e4:ba:eb:
00:50:b8:b4:58:a3:05:64:ee:10:8c:c9:9a:2a:05:
15:05:ba:31:ae:2a:66:f5:3f:ea:d4:0e:31:1c:1d:
b9:4f:65:43:41:a1:4c:1c:21:a8:41:47:35:2f:d4:
ed:8f:64:18:e2:f6:cc:cd:f2:28:19:08:78:81:ec:
d5:0d:3e:03:d1:d0:cc:07:89:c0:8b:f7:23:d8:ba:
0a:93:45:1c:20:b7:60:67:c2:6b:55:bb:0a:9c:14:
e0:4e:b9:9c:43:bf:34:27:91:39:76:cb:7b:ff:69:
0d:2a:8e:36:62:0f:57:bb:2c:0c:1d:d2:ba:c2:1a:
35:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:04:AC:BA:2C:DB:E3:E4:37:54:F0:44:02:35:6C:EC:E3:8C:1A:81
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/PgSsuizb4-Q3VPBEAjVs7OOMGoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.201.0/24
Signature Algorithm: sha256WithRSAEncryption
34:00:31:92:4a:40:6a:14:11:7e:58:e6:02:08:7c:12:a9:a3:
15:cf:65:88:57:f1:55:e9:da:2f:61:49:98:f1:8b:10:13:71:
66:5f:fb:98:42:d3:88:7b:df:ba:4b:91:a1:7b:02:f1:77:21:
4e:16:b9:b3:ca:b0:f5:28:06:28:b4:b8:e7:b6:40:4a:d0:da:
17:fd:b6:fe:cb:46:5c:21:6f:e6:d0:42:fe:82:9a:fe:a6:26:
5d:e5:42:03:e5:37:8e:5e:95:31:f3:94:ae:bc:16:df:4e:54:
cd:77:d2:42:5c:bb:97:a4:2e:c8:fe:59:a4:23:a5:fa:68:f6:
ff:7c:35:a1:37:cb:b9:47:61:3c:cf:ab:60:a7:29:95:f7:36:
83:8d:e9:36:1a:c5:64:39:fc:e6:a5:f7:3a:57:f9:02:34:6c:
a2:13:6c:69:c3:bd:9e:32:e7:a8:63:21:08:38:2d:c5:08:1e:
a2:c5:46:1b:1a:02:06:7f:c9:22:a9:06:68:3a:dd:31:b0:2a:
f4:b1:ad:76:ff:18:88:fd:6e:b7:36:4d:ae:45:09:8b:66:6b:
46:4d:4b:76:c6:02:8d:16:4f:f2:d4:78:40:bd:c3:ef:ab:82:
5b:36:a3:1a:db:d6:cc:11:3d:fc:e4:d9:e2:cb:b0:c4:9c:d5:
33:13:e0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:24 2023 by rpki-client on console-ams.rpki-client.org