Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/kGqBsnY_uUE0Bi_KswYIR_9EWqw.roa
File: kGqBsnY_uUE0Bi_KswYIR_9EWqw.roa (raw, json)
Hash identifier: oQ9fv+7Tpj4ak+bN7SzdrNjeoJ8uziBA7wWYeGfZoxM=
Subject key identifier: 90:6A:81:B2:76:3F:B9:41:34:06:2F:CA:B3:06:08:47:FF:44:5A:AC
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018944C7591D6598DCBD55E6E0A6FA319BDA
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/kGqBsnY_uUE0Bi_KswYIR_9EWqw.roa
Signing time: Tue 11 Jul 2023 11:47:42 +0000
ROA not before: Tue 11 Jul 2023 11:47:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51685
IP address blocks: 31.148.136.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:44:c7:59:1d:65:98:dc:bd:55:e6:e0:a6:fa:31:9b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jul 11 11:47:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=906a81b2763fb94134062fcab3060847ff445aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ee:f2:3a:0b:98:97:64:e2:36:00:ad:91:cd:
23:fb:8d:67:ea:06:37:2a:be:36:fc:00:de:fb:44:
83:58:6b:43:e4:19:84:bd:90:d9:65:3d:0b:45:81:
9e:e0:0e:b9:0e:c9:2c:59:14:65:73:c3:7b:b3:2c:
82:ce:5f:d0:68:85:5b:4b:bd:0c:45:52:7c:12:7c:
5b:3e:a5:a6:e9:6e:53:e3:7e:bc:82:21:16:b6:d2:
f6:38:4d:91:59:6a:84:2f:9e:38:7f:9d:16:e2:e4:
07:33:78:a2:d4:76:9c:22:73:ec:a1:eb:43:b8:06:
1f:4f:5a:07:78:d1:92:85:bf:e3:08:41:f1:b3:2b:
35:cf:1f:dc:bd:fd:a9:58:51:9c:ec:de:93:78:af:
8a:e9:7d:e8:b1:ee:ec:64:17:41:57:be:81:28:04:
ad:2e:1c:88:de:ee:1c:f0:a9:65:9e:36:99:ef:60:
35:4d:70:70:74:d2:4c:c0:53:b7:fa:fe:e0:85:6b:
38:a7:f4:dd:e8:aa:f3:01:39:15:b3:4e:9b:c5:02:
29:bf:d6:d0:45:4a:d5:3b:4e:f7:12:75:c7:55:1a:
5c:a7:f4:13:1c:ea:b8:74:20:1d:bb:1f:9b:c0:58:
03:d0:e6:a7:7a:05:29:2c:3c:1a:84:e7:f5:16:4a:
e4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:6A:81:B2:76:3F:B9:41:34:06:2F:CA:B3:06:08:47:FF:44:5A:AC
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/kGqBsnY_uUE0Bi_KswYIR_9EWqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.136.0/22
Signature Algorithm: sha256WithRSAEncryption
87:4f:36:e7:f2:fd:67:46:81:1f:9c:5c:3a:e6:2d:c4:cf:0b:
2f:58:73:db:c4:ba:8c:f8:d3:f0:8d:f4:10:ec:10:4d:e8:2f:
0d:24:c6:4d:8d:ae:bd:e1:13:e4:b0:6b:8a:71:21:5c:4b:7f:
a1:2a:8f:6a:51:40:8e:58:af:cf:77:f6:57:98:6a:fd:71:2e:
9b:a8:e4:2f:23:07:c2:47:a6:0f:df:ec:3c:b0:f9:1d:76:10:
a2:0a:7d:c6:e4:eb:42:df:35:72:c5:cd:90:0e:2d:04:36:e0:
1b:4e:f9:bf:cb:54:35:ab:02:41:e7:33:18:3f:d2:31:1f:4e:
ed:91:2d:2c:72:15:84:7b:0b:46:4a:64:eb:ce:29:73:4d:8e:
3b:5e:46:6e:06:28:dd:66:8e:d0:6c:c1:5b:02:7a:99:f6:4f:
ad:d0:29:1b:b4:97:fc:0e:96:70:cb:0d:2c:37:a5:a3:22:0a:
28:76:b5:9c:39:f4:d0:b5:2b:b5:3b:2d:ff:54:e7:c5:66:99:
15:9b:22:a8:e2:14:be:a7:14:fe:c6:a8:e3:e6:ae:2d:a6:76:
bc:30:70:25:80:b0:cc:47:ee:13:05:ab:35:65:00:9f:68:64:
aa:0f:83:f6:ed:97:c1:ae:ed:ee:ad:4c:ce:ff:b6:b0:70:fa:
a1:82:3d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:29:34 2025 by rpki-client