Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/PpfpV0sbh9ftjo2BQ7hsiLVVC0M.roa
File: PpfpV0sbh9ftjo2BQ7hsiLVVC0M.roa (raw, json)
Hash identifier: gX63DDrdJ8hUblC6mySgK9Oyxk/v8Hh823Qa6HPx72s=
Subject key identifier: 3E:97:E9:57:4B:1B:87:D7:ED:8E:8D:81:43:B8:6C:88:B5:55:0B:43
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570955AA8F02C86F494C488DD10E35CFE
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/PpfpV0sbh9ftjo2BQ7hsiLVVC0M.roa
Signing time: Mon 02 Jan 2023 03:45:14 +0000
ROA not before: Mon 02 Jan 2023 03:45:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56965
IP address blocks: 31.148.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:5a:a8:f0:2c:86:f4:94:c4:88:dd:10:e3:5c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e97e9574b1b87d7ed8e8d8143b86c88b5550b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:45:08:78:56:59:4e:93:39:5b:82:29:fe:ad:
a8:a9:e2:39:e0:b7:e5:80:bd:ec:5d:fe:c0:1e:05:
58:eb:b3:08:8d:4a:01:77:10:dd:54:5c:86:93:32:
33:5f:e4:84:94:0a:64:24:6a:20:25:38:6d:81:70:
20:00:17:56:32:cb:93:9a:c6:56:02:56:c2:3d:33:
c6:96:fc:7d:d5:e5:da:68:c4:fe:05:e1:51:50:d9:
ca:b2:f0:68:40:bf:ac:ff:11:56:9a:5c:2b:29:9c:
3e:99:6e:ca:76:0a:8f:5c:d1:44:bf:d7:6e:67:8e:
68:20:bc:8d:ac:c8:fc:94:9f:48:cf:e8:7a:ba:71:
00:d2:65:2a:e1:b7:db:7d:38:4c:f8:4e:67:1e:68:
60:fa:94:44:ee:b6:c6:59:48:33:24:c7:07:97:5f:
ec:76:b8:2b:5e:cb:fd:21:54:69:2a:7f:05:c5:75:
6e:29:9c:b2:c4:b5:71:e4:99:c1:f3:da:5f:e1:a5:
cd:a8:c6:9b:05:09:32:8d:3b:a0:af:f7:5e:9d:e3:
e9:0d:77:95:a2:05:79:fd:3a:5c:b0:1d:c8:38:e7:
8d:11:15:91:cf:64:a2:c4:94:25:51:6f:59:81:a4:
e5:9d:8a:8b:3c:50:ff:69:84:27:f5:fc:dd:87:7f:
ef:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:97:E9:57:4B:1B:87:D7:ED:8E:8D:81:43:B8:6C:88:B5:55:0B:43
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/PpfpV0sbh9ftjo2BQ7hsiLVVC0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.200.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:8d:44:72:12:df:7d:5c:d5:1b:36:9b:23:cb:dc:c9:ea:b0:
33:e5:74:96:af:7c:11:e5:0a:3a:32:57:5f:7f:e0:5c:d7:8f:
93:bf:c2:04:2d:21:a2:5e:00:f8:d7:c9:32:1c:16:e0:62:b2:
90:91:bf:e8:9d:9c:83:b7:5e:c8:a5:45:11:9a:7b:4b:3b:c1:
91:24:09:20:fc:5a:05:25:3a:2e:91:2b:51:32:aa:37:d1:03:
b8:fd:66:18:98:5d:ab:1a:a3:61:14:23:17:43:30:a1:6b:36:
a7:36:3c:7a:0f:f8:29:e8:5f:a1:b0:dc:da:b4:d7:b2:33:d6:
c8:4e:11:c3:03:20:3d:1d:76:d3:bd:d4:9d:3d:2f:ad:ac:f8:
91:8e:32:a5:ee:4b:99:44:b5:3d:5a:54:7b:32:38:03:d3:0a:
35:45:ce:ce:00:89:7b:d4:9c:e9:a2:00:58:aa:ba:66:2e:fe:
98:69:51:74:d2:89:17:6f:6a:d3:1a:2a:90:b2:7c:13:3b:48:
8e:6b:db:f4:b8:4c:d2:49:b1:61:79:28:52:a6:59:ad:8f:9e:
59:14:10:7d:1a:fb:1a:05:01:b7:d7:39:5c:68:c8:7d:d2:12:
eb:ee:7d:a1:be:00:a5:dd:09:e9:1b:0f:3d:41:6f:a9:87:63:
9b:aa:ae:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:29:33 2025 by rpki-client