Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/h2gty3SgL7PqnCCsVWCIKDHAB7M.roa
File: h2gty3SgL7PqnCCsVWCIKDHAB7M.roa (raw, json)
Hash identifier: +KOg+BdgQsbf0qjtnv3E8rk4pNx7W/Kkx5AS2aVx+QM=
Subject key identifier: 87:68:2D:CB:74:A0:2F:B3:EA:9C:20:AC:55:60:88:28:31:C0:07:B3
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570953422988185DE8CA61260C1EA158D
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/h2gty3SgL7PqnCCsVWCIKDHAB7M.roa
Signing time: Mon 02 Jan 2023 03:45:04 +0000
ROA not before: Mon 02 Jan 2023 03:45:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47441
IP address blocks: 31.148.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:34:22:98:81:85:de:8c:a6:12:60:c1:ea:15:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87682dcb74a02fb3ea9c20ac5560882831c007b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:93:82:42:da:85:5c:36:15:34:bd:66:df:70:
3d:22:0b:6a:4a:03:d2:ec:4f:d8:b4:2d:b7:27:a3:
54:b1:d7:2d:bc:09:7a:98:9b:8c:ca:36:58:56:e4:
ec:09:f3:33:f5:d7:ce:e5:06:14:aa:a9:25:ed:7c:
26:e8:3d:ab:88:98:d6:03:bc:44:8e:19:d5:a0:d0:
4e:e5:0b:a0:cf:f5:58:15:9b:b0:69:60:93:4f:4d:
b6:c2:8f:cb:05:61:ac:3d:9e:7c:88:8c:37:5d:e5:
d0:a4:81:b6:6e:f0:0a:15:49:3a:30:3f:6d:30:cf:
1c:d9:d1:65:28:1f:05:a6:0c:80:68:fe:b2:2f:8c:
c3:a0:2b:cf:97:64:51:ea:eb:2d:86:e3:6d:a2:56:
cc:8c:3e:74:7e:55:e3:8b:cf:4a:88:a4:d3:9e:2d:
12:1b:fb:2b:a7:c7:f4:c5:ba:29:aa:2a:9f:74:77:
83:6e:35:8d:84:26:c7:2b:43:1e:60:e7:04:89:61:
1a:9e:e6:4a:03:c3:3e:cb:d1:1b:ad:01:3e:51:d8:
a3:1b:01:1c:37:39:b2:4b:bf:87:9c:ac:af:9f:5d:
c1:98:6a:7a:28:61:c6:d4:89:3c:ce:15:d1:a8:03:
30:7a:79:c3:77:cc:cc:d1:6a:17:32:36:c8:e7:bd:
bc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:68:2D:CB:74:A0:2F:B3:EA:9C:20:AC:55:60:88:28:31:C0:07:B3
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/h2gty3SgL7PqnCCsVWCIKDHAB7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.0.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:fc:77:75:a4:74:49:03:27:97:8f:7c:dc:77:48:df:10:b7:
29:f8:f5:2c:3b:aa:8e:90:8f:62:83:5d:17:2d:5f:8c:a5:59:
34:53:6e:b2:05:d9:91:74:96:49:d5:22:89:24:67:d6:47:e6:
56:dd:5b:b1:e5:42:1b:5a:1d:02:96:b3:ed:cb:cd:bf:d0:e7:
42:97:ca:41:99:0d:86:98:b5:2f:43:67:a3:77:44:76:9e:2d:
cc:74:2b:6c:59:e5:6e:47:0b:7d:b3:4c:66:f2:89:62:50:4a:
99:ce:9a:15:9a:7e:4f:65:54:f3:ce:73:39:8f:2a:ac:15:94:
d2:88:5e:af:9f:78:4d:2a:5f:f1:2b:dc:f7:34:20:7e:1d:37:
3e:76:62:b1:4e:e0:c9:e5:5b:de:db:ed:16:d6:b2:31:ee:50:
63:ac:7d:87:53:f8:29:fa:be:6a:1c:b2:17:7f:86:70:40:05:
0e:c7:2f:c5:84:ee:3e:b6:c3:e6:1e:bb:06:88:fa:b7:23:79:
6c:96:59:83:9c:81:c1:26:69:26:63:a1:00:64:42:a8:b8:3c:
9e:c9:bc:10:48:f0:29:36:c0:73:86:4f:4f:ad:ac:c1:2b:e1:
0f:6f:b4:dd:8a:2a:97:a4:b6:3d:68:c0:8c:54:73:1e:7c:1b:
34:38:f5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:36:43 2025 by rpki-client