Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fy-wb2BM_KDvB4Dp-RqmXZvxd6o.roa
File: fy-wb2BM_KDvB4Dp-RqmXZvxd6o.roa (raw, json)
Hash identifier: 9+7LI5C45bq5+8JQcuGT3W3G2t1F2q37Q3AVdRksqUY=
Subject key identifier: 7F:2F:B0:6F:60:4C:FC:A0:EF:07:80:E9:F9:1A:A6:5D:9B:F1:77:AA
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27CF0368
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fy-wb2BM_KDvB4Dp-RqmXZvxd6o.roa
Signing time: Sat 01 Jan 2022 16:08:54 +0000
ROA not before: Sat 01 Jan 2022 16:08:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56965
IP address blocks: 31.148.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 667878248 (0x27cf0368)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f2fb06f604cfca0ef0780e9f91aa65d9bf177aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:28:bc:e0:59:fc:ab:54:17:aa:9e:a2:85:83:
ff:21:fd:12:ff:0d:e7:12:6f:77:d1:b7:75:8a:be:
e6:d7:b6:1d:ea:9c:b8:3d:84:50:ee:ac:2d:4a:79:
ef:1d:1d:3c:ab:58:6c:f0:a1:27:a7:21:bd:db:f8:
c4:f5:99:15:d8:d0:6f:0d:3d:e3:ac:15:bb:58:d7:
c0:cd:23:07:84:98:28:db:3d:bc:5c:3b:80:5f:0a:
cc:2d:d1:be:3b:fe:40:60:0c:96:f9:a2:0a:09:df:
09:20:b7:98:8c:99:c7:57:6c:8c:a6:8d:e4:52:1a:
d6:d9:42:3b:59:99:41:e3:cb:20:ef:9f:8e:3a:5e:
e9:f8:d2:2a:73:52:ff:b8:54:fd:0f:c5:ed:4c:2a:
bc:57:da:7f:7b:1b:a6:57:26:c2:33:25:24:75:6f:
c9:3b:8e:bd:5d:0f:4d:76:94:91:79:b3:3f:fd:56:
da:29:78:1c:3b:be:60:b3:26:83:d2:49:ce:7f:b1:
9e:7d:b7:48:11:3d:9c:60:7b:77:1d:04:19:90:17:
62:66:f8:16:cd:40:b9:08:fc:da:69:57:fc:1b:cb:
7f:ea:9c:f1:8d:fd:96:1a:ff:06:63:eb:f6:dd:7e:
57:70:e0:5a:69:fc:a2:16:cf:35:e3:5c:52:09:48:
c2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:2F:B0:6F:60:4C:FC:A0:EF:07:80:E9:F9:1A:A6:5D:9B:F1:77:AA
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fy-wb2BM_KDvB4Dp-RqmXZvxd6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.200.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:53:87:68:5c:fd:74:45:51:a3:79:64:52:09:af:bc:cc:a8:
4c:62:ac:90:aa:4a:e6:19:24:eb:1c:ae:09:89:1f:49:00:56:
23:7b:22:2a:28:fe:ce:89:1f:38:ba:25:3b:e9:d5:6b:6f:0b:
74:52:70:b8:14:b7:cc:eb:c9:bb:b9:34:fd:38:ac:2b:60:4c:
4d:bf:81:21:d9:82:3a:30:97:3b:6b:9b:ee:d9:67:a1:4b:dd:
2f:93:a8:ad:eb:f3:13:1e:5f:41:68:6a:0c:d1:dd:4b:07:81:
1f:44:66:02:b0:5e:f6:80:f7:57:4d:01:fc:14:ae:4a:c2:23:
a1:83:29:11:44:b3:fd:bf:00:80:5f:15:dd:9c:c2:9e:75:e1:
fd:d6:32:90:bb:ff:21:6f:01:54:38:f1:b9:10:af:39:37:93:
70:cb:d0:d1:cf:61:ea:c0:e8:da:5d:19:c3:47:7a:17:65:3d:
e1:c7:d5:2c:54:bf:48:8c:89:f1:f5:47:dd:24:14:71:5a:9e:
6a:7e:bc:d4:85:a6:fd:6a:d7:39:f3:2f:7b:89:64:e1:cc:12:
49:ee:ee:62:e6:e5:43:79:f5:35:6e:a5:71:82:f4:14:e9:83:
fd:cc:0f:39:23:d0:67:82:f4:db:f2:7b:43:97:4f:25:74:5a:
cf:eb:23:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:10:42 2025 by rpki-client