Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/RTkhKo7fl5LWDRIf0VhLavkxq6U.roa
File: RTkhKo7fl5LWDRIf0VhLavkxq6U.roa (raw, json)
Hash identifier: UykstcW4M7fq5hU87VfKbCrwsRup/onthUOfawJsmk4=
Subject key identifier: 45:39:21:2A:8E:DF:97:92:D6:0D:12:1F:D1:58:4B:6A:F9:31:AB:A5
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 275CF884
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/RTkhKo7fl5LWDRIf0VhLavkxq6U.roa
Signing time: Sat 01 Jan 2022 16:07:51 +0000
ROA not before: Sat 01 Jan 2022 16:07:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15428
IP address blocks: 31.148.112.0/21 maxlen: 24
146.158.32.0/20 maxlen: 24
146.158.80.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 660404356 (0x275cf884)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:07:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4539212a8edf9792d60d121fd1584b6af931aba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:29:5d:ad:fe:75:67:14:3c:21:49:b6:b7:6b:
a0:6a:b0:bd:8c:9d:d2:c7:c5:9b:f7:32:5d:e2:ab:
86:3d:6e:b4:5a:ea:63:9e:34:c0:20:62:65:b9:79:
1c:23:df:88:9c:65:f8:61:d2:a6:27:30:30:a6:8c:
cc:42:65:6b:e5:27:51:e8:08:e3:b5:a5:9f:0f:42:
f4:f1:20:d9:a2:52:39:fb:fc:ea:9f:a2:10:f8:4d:
5f:c4:a5:1e:3c:9a:e5:41:1f:15:bc:31:ce:07:74:
83:c3:6d:49:fe:46:16:b4:6b:8c:5f:b3:54:e6:64:
0e:33:f7:9e:ea:58:d7:71:b0:9a:1f:2a:dd:7b:aa:
54:c4:c2:ef:dc:46:c6:86:62:4a:bd:db:eb:e4:77:
cf:43:c5:1b:a8:26:85:12:fe:33:9f:5d:e3:87:63:
f5:0e:cf:0b:a0:f8:c4:94:eb:9c:79:05:d6:27:24:
e0:19:ae:c1:c8:66:3a:60:c1:95:f5:66:db:10:35:
df:81:d3:2e:6a:bc:d8:38:41:11:c7:5d:7e:ae:33:
55:23:93:32:c6:3d:67:20:73:56:00:4d:ec:84:3d:
8d:fa:48:02:9f:35:99:b1:3f:ef:c3:ee:bf:fb:fc:
3c:32:fe:60:2f:52:98:40:d6:61:64:92:75:18:f4:
18:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:39:21:2A:8E:DF:97:92:D6:0D:12:1F:D1:58:4B:6A:F9:31:AB:A5
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/RTkhKo7fl5LWDRIf0VhLavkxq6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.112.0/21
146.158.32.0/20
146.158.80.0/20
Signature Algorithm: sha256WithRSAEncryption
5c:3f:cc:af:22:b6:0e:22:96:ff:69:8f:12:5f:d8:84:38:e9:
2a:f0:a4:05:d1:85:04:11:36:44:c7:14:c0:1e:51:df:09:c3:
c7:aa:c7:fa:7b:f0:84:59:b6:e1:97:c4:2c:65:f3:70:24:7a:
39:9a:35:4c:be:6d:24:72:ba:6e:a0:78:bc:6a:0c:53:86:8e:
a9:9a:a1:a9:07:57:ea:78:66:90:dc:1f:1e:59:b3:3b:c4:b7:
28:12:db:ff:3f:41:bd:92:44:8e:35:ec:c1:c3:32:da:8b:76:
90:27:92:eb:dc:74:11:c5:3b:a6:31:6e:d0:c3:d1:cd:a3:b9:
9a:eb:c3:01:4b:62:6e:43:0e:16:7f:36:c3:26:4b:8a:33:e0:
64:e0:5b:b3:5b:c5:40:a0:13:39:a1:46:a9:1c:19:4d:c7:e6:
30:6f:f5:de:98:35:c6:00:19:7c:a9:fc:c3:2d:65:0f:fd:c2:
d5:c1:5e:65:78:c9:24:74:5a:f5:a6:12:70:cd:fb:85:b3:1e:
3b:37:ec:46:bd:57:80:95:7e:f4:51:86:19:ed:6e:44:1a:a1:
8e:11:00:38:2c:39:fd:c3:48:ba:eb:c6:7c:b8:dd:f6:d7:2a:
38:a7:c8:e5:de:84:df:62:38:2b:1a:2f:95:8a:83:40:59:c7:
87:f0:26:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:12:57 2025 by rpki-client