Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/kyzzZe3LnRNwEGKCvT7ivEV1nsw.roa
File: kyzzZe3LnRNwEGKCvT7ivEV1nsw.roa (raw, json)
Hash identifier: 6tfhhf3SOMoSYRuflLpB8l/Vtw5C/wflWvhhWndFhck=
Subject key identifier: 93:2C:F3:65:ED:CB:9D:13:70:10:62:82:BD:3E:E2:BC:45:75:9E:CC
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 292BDD2C
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/kyzzZe3LnRNwEGKCvT7ivEV1nsw.roa
Signing time: Mon 14 Mar 2022 14:55:44 +0000
ROA not before: Mon 14 Mar 2022 14:55:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210519
IP address blocks: 31.148.196.0/24 maxlen: 24
31.148.197.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 690740524 (0x292bdd2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Mar 14 14:55:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=932cf365edcb9d1370106282bd3ee2bc45759ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:14:0f:c1:45:a4:3b:b1:bd:f2:4f:f1:d1:f4:
88:8d:5e:af:93:0b:36:ae:7f:e3:24:cd:58:3f:a2:
ab:56:a5:d4:8e:9f:a0:f6:b4:89:47:cd:8b:fa:20:
56:bd:37:7e:37:3a:07:63:3b:f1:cd:77:d4:f8:a6:
be:b5:1b:53:2e:16:6e:00:4e:ff:4f:12:80:1b:7a:
bb:a9:79:83:12:4c:17:da:a0:90:40:88:3b:c7:b6:
ea:5b:28:09:38:59:13:9f:92:ca:6b:30:41:07:34:
99:df:71:3c:8c:6f:d0:ad:5c:99:3e:26:35:26:dd:
33:a8:2b:c1:83:d0:8f:a5:89:b1:22:2b:09:9a:e1:
fe:f1:40:45:1b:04:be:c1:ae:c1:f2:21:4d:29:85:
ea:e4:a8:8f:06:fb:1e:ff:3a:39:79:15:66:3c:77:
d0:9b:6b:cb:b2:1a:32:d2:32:03:05:e6:ac:ff:75:
f3:25:bf:41:3c:5a:b9:67:b2:29:55:b3:e6:2f:4c:
2c:8b:0d:95:9e:94:aa:71:c3:04:90:28:f1:4f:25:
f4:79:80:6a:fc:18:c2:d2:5a:c5:e6:96:82:d3:b9:
54:e4:31:5e:cb:c4:09:de:fd:e7:64:cc:6b:f6:ff:
5b:3f:8d:7e:8f:d3:eb:81:db:d1:f5:fa:80:00:c3:
f7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2C:F3:65:ED:CB:9D:13:70:10:62:82:BD:3E:E2:BC:45:75:9E:CC
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/kyzzZe3LnRNwEGKCvT7ivEV1nsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.196.0/23
Signature Algorithm: sha256WithRSAEncryption
67:f9:f3:8f:34:6c:08:f9:c6:e7:fe:7b:a1:73:a5:e8:49:4e:
c5:29:bf:76:57:69:b3:28:fd:8e:13:dc:04:72:a6:7d:05:9b:
dc:5e:84:17:9f:70:15:ef:91:15:9e:d3:52:2b:66:39:85:85:
19:1e:e9:d4:47:fe:e9:01:b2:49:eb:27:40:a8:cb:02:91:66:
50:2a:af:e0:d0:54:2b:8e:b7:39:f2:a3:38:ac:b4:bc:e2:96:
f9:c6:bb:fd:4a:a1:f2:45:cf:2c:18:8e:28:9a:d3:8d:b5:95:
fc:97:cd:8e:f0:30:97:8c:b7:5e:31:5e:19:cb:c7:7b:90:d1:
d6:79:92:78:54:e3:e5:0c:c3:21:c3:97:38:e5:38:f1:b2:13:
b3:76:7b:ee:9d:b3:eb:96:1f:cb:e6:35:fa:7d:3f:62:91:72:
bb:f9:68:1b:fc:36:e4:14:c3:2c:7f:88:30:a5:54:c6:eb:dd:
19:89:ff:36:6f:8d:6e:de:b0:8c:70:34:8c:1b:d7:f6:59:24:
5e:90:29:97:74:97:ed:5e:48:46:74:06:2a:85:8c:3b:90:6a:
c3:04:5e:10:85:5b:31:40:48:99:0c:9d:9c:ff:15:92:fc:54:
9f:1f:e0:c5:b4:da:e9:0e:59:11:5f:29:9e:2d:e9:d5:44:68:
dd:2b:3c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:42 2023 by rpki-client on console-fra.rpki-client.org