Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/r-iB8fC9rtssJNrsKe7h8fZ-reg.roa
File: r-iB8fC9rtssJNrsKe7h8fZ-reg.roa (raw, json)
Hash identifier: G+Z9aZussft3oF0fmxVGrb6vwkz+HtcENds2TRzCTwc=
Subject key identifier: AF:E8:81:F1:F0:BD:AE:DB:2C:24:DA:EC:29:EE:E1:F1:F6:7E:AD:E8
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0185709589368740E6F89F4F7E09E567E93E
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/r-iB8fC9rtssJNrsKe7h8fZ-reg.roa
Signing time: Mon 02 Jan 2023 03:45:25 +0000
ROA not before: Mon 02 Jan 2023 03:45:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64490
IP address blocks: 31.148.50.0/24 maxlen: 24
31.148.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:89:36:87:40:e6:f8:9f:4f:7e:09:e5:67:e9:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afe881f1f0bdaedb2c24daec29eee1f1f67eade8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:08:ba:41:3a:5f:79:cb:15:db:78:71:95:7d:
1f:85:db:2a:65:61:b1:3a:1d:f9:f7:22:34:01:00:
c7:ab:c1:fa:17:48:77:92:ef:fd:49:6f:ed:c9:61:
37:1d:e0:59:f3:cd:8d:23:e4:61:6e:7e:4c:24:53:
1c:0a:a1:12:1c:57:fd:d7:10:74:24:b1:ee:53:6d:
e0:fd:33:24:5f:c0:c8:74:d2:67:b0:d5:63:c1:ba:
50:2f:ed:e9:b9:75:36:7e:54:47:60:77:9c:3f:cc:
72:8a:f5:a2:23:85:62:d1:93:6d:37:17:33:76:dd:
b9:6f:24:47:5b:3e:08:c2:5c:8d:f0:34:75:d6:21:
63:35:a8:06:8f:3b:90:2a:91:42:4b:72:84:94:98:
c4:ef:ac:98:45:fb:e1:d9:de:13:8c:ad:16:d9:67:
b6:e6:2a:5e:95:02:5c:56:d3:38:6b:22:2b:cc:fa:
d6:cd:17:2b:df:8d:20:d0:74:b9:f2:86:39:3c:90:
af:d3:56:53:a8:1e:4b:f6:74:06:ea:b8:0b:a5:5b:
b6:98:ad:80:f5:68:71:2a:d2:82:4f:21:2c:6b:a1:
03:33:2b:eb:18:95:6d:d1:3a:93:25:2d:64:d0:a9:
46:f1:7d:d0:37:85:4d:d3:81:3d:cb:9c:a4:65:83:
c2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E8:81:F1:F0:BD:AE:DB:2C:24:DA:EC:29:EE:E1:F1:F6:7E:AD:E8
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/r-iB8fC9rtssJNrsKe7h8fZ-reg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.50.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:0f:88:f1:72:35:06:d3:5a:f9:39:a6:d9:a1:60:f1:51:04:
4f:10:d5:e9:15:e5:75:16:79:21:9b:fa:da:3f:2b:88:8d:e6:
e2:62:89:02:6e:f3:93:74:64:33:15:10:f6:50:cb:a1:3a:36:
7d:59:e8:70:d1:ff:28:ec:52:9e:9b:50:85:2b:11:7b:2d:bd:
74:ed:1f:f8:29:30:8f:12:84:2a:f3:25:20:d5:c4:88:2d:f7:
74:af:4d:a4:b6:2b:41:a3:8b:57:56:a6:cf:f6:1b:9f:76:b5:
f4:8e:1e:e3:84:e1:dc:07:61:fe:4e:e5:a3:22:ac:6f:ac:b2:
9f:5d:65:68:c7:f5:4f:1e:3e:1a:96:9c:63:18:c4:f6:bc:55:
76:e9:b0:51:81:78:b0:c5:fd:76:c3:c1:5e:f8:1b:f2:f5:0d:
20:d2:7e:aa:6c:63:7d:c4:8b:5a:5c:09:07:fa:49:79:b5:70:
64:a7:54:ab:4d:66:99:26:35:aa:fc:08:f7:b4:b4:0f:78:7e:
d2:32:cf:94:70:06:97:63:b9:84:b2:dc:6c:66:d2:e8:0e:a2:
08:30:6f:e3:af:19:54:7c:97:bc:46:bf:05:52:a0:30:a9:70:
53:ba:7f:69:af:83:d7:e5:64:26:8e:63:ed:61:58:b6:ab:32:
23:60:e8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:39:13 2025 by rpki-client