Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Vqy0xDVyNpF0wZFr2MgMFPA_fkg.roa
File: Vqy0xDVyNpF0wZFr2MgMFPA_fkg.roa (raw, json)
Hash identifier: GQ4h5eRa/fFOWEV22bflz/f0ejrvU7ZcRByAfLvuTqg=
Subject key identifier: 56:AC:B4:C4:35:72:36:91:74:C1:91:6B:D8:C8:0C:14:F0:3F:7E:48
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 29966111
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Vqy0xDVyNpF0wZFr2MgMFPA_fkg.roa
Signing time: Fri 22 Apr 2022 09:13:10 +0000
ROA not before: Fri 22 Apr 2022 09:13:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43060
IP address blocks: 92.38.28.0/22 maxlen: 24
31.148.220.0/24 maxlen: 24
95.47.108.0/22 maxlen: 24
93.171.72.0/22 maxlen: 24
31.148.192.0/22 maxlen: 24
93.171.128.0/22 maxlen: 24
95.47.192.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 697721105 (0x29966111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Apr 22 09:13:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56acb4c43572369174c1916bd8c80c14f03f7e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:71:f7:a1:e3:39:9f:36:e3:66:03:66:6f:48:
54:23:bc:1b:11:2a:a9:99:3b:af:de:73:ac:f1:f9:
70:fe:68:4b:d7:69:b9:3a:29:77:af:35:be:c5:c8:
33:05:58:93:f8:c3:64:ed:05:c4:7b:10:e5:9b:f4:
02:7b:14:06:b5:b1:bd:b7:ab:92:55:52:90:68:ee:
77:2f:b0:20:bb:f0:90:e5:21:42:04:ae:df:29:a2:
76:7e:5f:61:02:42:e4:2f:fa:92:88:1c:58:67:0b:
ea:df:e6:69:91:a4:e1:c8:41:a5:88:fb:a6:de:52:
d1:a4:ae:56:43:24:ab:07:bd:43:ac:e3:9f:ee:d4:
1d:01:79:10:ae:b7:66:39:07:20:eb:b2:bd:78:4e:
0b:42:18:78:7a:11:26:0f:63:9e:37:91:36:3c:1d:
eb:1c:50:a9:65:a1:22:83:1d:0c:27:41:a4:bb:88:
97:76:90:ed:e9:51:6f:27:7e:6e:75:11:ab:73:3e:
2f:42:f5:94:18:cc:d4:3d:8d:61:6b:94:53:71:c6:
36:82:fc:3f:99:b9:bd:85:d3:37:ac:38:42:cb:87:
4d:c5:12:4b:8f:3f:01:f2:7b:96:e3:38:4d:a2:d3:
46:5f:c2:19:6d:a9:37:06:1a:50:33:c0:c6:9a:ba:
3f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AC:B4:C4:35:72:36:91:74:C1:91:6B:D8:C8:0C:14:F0:3F:7E:48
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Vqy0xDVyNpF0wZFr2MgMFPA_fkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.192.0/22
31.148.220.0/24
92.38.28.0/22
93.171.72.0/22
93.171.128.0/22
95.47.108.0/22
95.47.192.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:0c:4d:56:d2:07:14:3c:7c:cd:15:9a:66:43:fe:e1:88:7e:
7d:13:bb:d0:b9:e8:ec:40:ed:94:44:2b:53:ea:6c:d8:99:4f:
96:12:ec:c8:17:78:bc:50:79:1a:7b:98:6b:c1:70:44:4e:d5:
f5:7b:e6:26:e6:b0:4f:f0:ac:05:38:40:c8:56:4b:49:a5:87:
b4:3c:4e:c3:f0:3d:f6:1f:61:12:2e:fb:0d:81:4a:7c:e3:33:
92:32:0b:8e:9d:59:e8:59:9c:f3:11:20:2f:3c:19:68:a7:de:
dd:35:2d:0b:e4:f2:95:8b:6c:4b:06:b9:17:8c:bf:f2:c9:f1:
4c:bf:d1:df:d6:e0:6b:f7:5a:13:fd:e0:48:7f:68:30:2e:e4:
0c:88:37:d7:60:46:0c:a6:87:ee:0e:78:d4:3f:14:1d:2a:e2:
bc:f1:fd:5e:72:a1:eb:96:55:06:56:f3:66:af:3f:cc:5a:73:
73:91:80:c2:4c:d4:4e:1a:7a:fb:50:04:4c:e8:99:6d:97:7d:
19:73:c4:7f:ad:ae:f0:14:55:a6:a1:fa:86:ca:1d:a1:07:f5:
3d:a6:d4:33:bc:13:b0:61:71:3d:c1:8c:fe:a8:04:4a:5f:77:
12:59:df:ff:7c:c3:b2:03:88:8e:65:d0:cc:0d:9f:e4:1f:01:
45:78:f4:a0
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIEKZZhETANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDkxMjJjMzU0MzhhNGViMjYyMzNmZGM2ZTRiYjFkZjJkYWFlZjQyMB4XDTIyMDQy
MjA5MTMxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTZhY2I0YzQzNTcy
MzY5MTc0YzE5MTZiZDhjODBjMTRmMDNmN2U0ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKxx96HjOZ8242YDZm9IVCO8GxEqqZk7r95zrPH5cP5oS9dp
uTopd681vsXIMwVYk/jDZO0FxHsQ5Zv0AnsUBrWxvberklVSkGjudy+wILvwkOUh
QgSu3ymidn5fYQJC5C/6kogcWGcL6t/maZGk4chBpYj7pt5S0aSuVkMkqwe9Q6zj
n+7UHQF5EK63ZjkHIOuyvXhOC0IYeHoRJg9jnjeRNjwd6xxQqWWhIoMdDCdBpLuI
l3aQ7elRbyd+bnURq3M+L0L1lBjM1D2NYWuUU3HGNoL8P5m5vYXTN6w4QsuHTcUS
S48/AfJ7luM4TaLTRl/CGW2pNwYaUDPAxpq6Pz8CAwEAAaOCAi0wggIpMB0GA1Ud
DgQWBBRWrLTENXI2kXTBkWvYyAwU8D9+SDAfBgNVHSMEGDAWgBR0kSLDVDik6yYj
P9xuS7HfLarvQjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8x
L1ZxeTB4RFZ5TnBGMHdaRnIyTWdNRlBBX2ZrZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
MThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8xL2RKRWl3MVE0cE9z
bUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBD
BggrBgEFBQcBBwEB/wQ0MDIwMAQCAAEwKgMEAh+UwAMEAB+U3AMEAlwmHAMEAl2r
SAMEAl2rgAMEAl8vbAMEAl8vwDANBgkqhkiG9w0BAQsFAAOCAQEAmgxNVtIHFDx8
zRWaZkP+4Yh+fRO70Lno7EDtlEQrU+ps2JlPlhLsyBd4vFB5GnuYa8FwRE7V9Xvm
JuawT/CsBThAyFZLSaWHtDxOw/A99h9hEi77DYFKfOMzkjILjp1Z6Fmc8xEgLzwZ
aKfe3TUtC+TylYtsSwa5F4y/8snxTL/R39bga/daE/3gSH9oMC7kDIg312BGDKaH
7g541D8UHSrivPH9XnKh65ZVBlbzZq8/zFpzc5GAwkzUThp6+1AETOiZbZd9GXPE
f62u8BRVpqH6hsodoQf1PabUM7wTsGFxPcGM/qgESl93Elnf/3zDsgOIjmXQzA2f
5B8BRXj0oA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:29:39 2025 by rpki-client