Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/cF5i1-m_4qDKoeDs0DXMt5ykz-g.roa
File: cF5i1-m_4qDKoeDs0DXMt5ykz-g.roa (raw, json)
Hash identifier: qI9mhkrg+U0ElByBTz+9V6JZHUET8VWij/D7/ZgjmaA=
Subject key identifier: 70:5E:62:D7:E9:BF:E2:A0:CA:A1:E0:EC:D0:35:CC:B7:9C:A4:CF:E8
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27B2FD17
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/cF5i1-m_4qDKoeDs0DXMt5ykz-g.roa
Signing time: Sat 01 Jan 2022 16:08:38 +0000
ROA not before: Sat 01 Jan 2022 16:08:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50025
IP address blocks: 31.148.240.0/22 maxlen: 22
146.158.68.0/22 maxlen: 24
93.171.188.0/22 maxlen: 22
93.170.160.0/22 maxlen: 22
146.158.16.0/22 maxlen: 22
31.148.210.0/23 maxlen: 23
31.148.209.0/24 maxlen: 24
31.148.208.0/22 maxlen: 22
31.148.210.0/24 maxlen: 24
146.158.18.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 666041623 (0x27b2fd17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=705e62d7e9bfe2a0caa1e0ecd035ccb79ca4cfe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:75:52:bb:41:23:54:ac:13:ae:18:f3:33:f2:
f5:25:c7:34:89:dd:63:b1:d8:30:01:d2:89:ce:f2:
71:25:03:ba:74:42:bf:03:94:52:2b:61:cb:10:34:
ee:ab:4e:2a:64:4f:db:fb:c4:5a:3c:13:6c:6b:a5:
63:ef:50:c5:72:ad:eb:fe:6b:be:3f:67:fb:d9:e2:
0a:23:81:4a:6f:c7:0f:d3:f0:4a:e9:87:37:54:cc:
51:84:7b:03:99:ab:49:52:4c:6d:c7:cf:79:05:7d:
c4:d0:3f:4d:f2:71:39:0f:e4:ad:d0:b4:17:7e:d0:
5c:75:0d:b2:32:30:60:b2:b6:53:34:d7:a3:86:ef:
64:ab:c6:92:8c:ec:92:e9:75:14:5c:0c:82:45:2f:
f7:64:98:37:41:4b:a8:14:cb:a9:1c:e2:8c:02:09:
d7:2c:85:2c:77:ac:01:a0:57:ec:77:98:88:75:0c:
ad:64:91:4d:10:46:43:ff:53:5a:3b:9f:58:09:12:
b6:02:ab:1e:4c:54:46:2f:27:3f:12:65:22:06:23:
28:1d:47:91:f5:b6:aa:a8:4a:25:98:79:be:2c:a3:
e7:7f:95:86:2a:49:d8:cd:88:a9:33:c8:c4:6a:87:
e6:de:e9:db:8c:5f:50:29:96:ad:17:40:83:af:b3:
36:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:5E:62:D7:E9:BF:E2:A0:CA:A1:E0:EC:D0:35:CC:B7:9C:A4:CF:E8
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/cF5i1-m_4qDKoeDs0DXMt5ykz-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.208.0/22
31.148.240.0/22
93.170.160.0/22
93.171.188.0/22
146.158.16.0/22
146.158.68.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:ae:94:0f:0c:ff:28:89:1c:b9:5a:84:1c:77:e4:c1:ab:26:
36:e7:68:6f:0d:3a:80:35:11:c2:a7:5e:9a:84:0a:6a:ed:9a:
ca:ec:f1:74:65:bc:49:38:b4:06:b0:e5:74:7e:cb:bf:69:e5:
11:db:06:eb:ea:ad:4a:60:ab:96:7a:95:d6:8c:a5:5c:7b:99:
4c:b1:f8:fc:64:89:37:b0:f0:71:bd:d3:dc:20:74:86:a7:2b:
55:d4:03:f4:01:26:d3:dd:31:17:89:4f:4e:9f:f9:ed:a9:d9:
d5:f1:d9:fe:4a:42:7c:85:09:42:83:46:cf:25:6c:93:a2:42:
00:bb:cb:eb:b2:da:ba:97:57:1b:fd:38:0b:bf:00:fc:d0:81:
70:4c:52:4a:97:8c:5a:6d:2d:1d:d6:fe:1d:c9:c5:1d:c9:81:
c9:75:e5:e6:b0:2e:a9:fe:c5:4f:22:9c:b0:64:fe:a9:fc:c8:
6a:fa:7d:70:bc:90:25:67:fa:e9:a3:27:fe:59:1b:c6:ee:04:
9e:8b:d3:e3:8d:54:00:8d:98:5d:62:cb:04:9a:48:df:48:50:
f8:c2:fd:09:da:c7:8b:52:b3:8d:8b:37:53:4c:13:2d:14:58:
38:42:1d:90:af:81:20:09:45:ee:e7:cc:72:f6:ac:df:1a:23:
9c:49:73:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:44:02 2025 by rpki-client