Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/xSqB9rkJAH0ySL5XNtwTyAa_tC8.roa
File: xSqB9rkJAH0ySL5XNtwTyAa_tC8.roa (raw, json)
Hash identifier: meZXcNNdhvzXFBP1bZ4ya9LdLzbK8O2xSVHiQLD7GmU=
Subject key identifier: C5:2A:81:F6:B9:09:00:7D:32:48:BE:57:36:DC:13:C8:06:BF:B4:2F
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0186FE3CE517273A17D9D059493C42431165
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/xSqB9rkJAH0ySL5XNtwTyAa_tC8.roa
Signing time: Mon 20 Mar 2023 08:57:29 +0000
ROA not before: Mon 20 Mar 2023 08:57:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50576
IP address blocks: 146.120.185.0/24 maxlen: 24
31.148.175.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fe:3c:e5:17:27:3a:17:d9:d0:59:49:3c:42:43:11:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Mar 20 08:57:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c52a81f6b909007d3248be5736dc13c806bfb42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8d:a7:94:55:5f:f0:d0:8c:95:33:72:f1:c4:
b8:b5:35:ee:ff:92:c8:61:da:e8:c5:fd:06:7d:19:
ed:11:16:dd:c6:4e:fa:66:2a:fb:4d:d0:59:bb:91:
69:b9:cd:3a:6f:4a:d3:03:23:08:f3:e4:80:1d:b7:
57:ed:5c:dd:a3:b2:8a:d8:74:81:79:f6:3f:b1:cf:
dc:31:59:54:97:86:fb:19:f0:b0:4f:97:04:e0:80:
1e:fc:23:17:78:a0:19:04:11:58:7c:6d:1d:c8:1d:
5f:9f:27:ae:f2:13:1e:8d:24:5e:eb:e6:e1:99:c8:
61:30:76:1b:5a:24:f4:dc:b5:6c:1f:80:e2:88:74:
04:80:00:cb:e9:11:00:02:38:66:94:31:99:f4:af:
57:7a:c6:e7:e5:c1:6c:45:c2:a1:41:98:58:0f:55:
91:72:0c:76:60:b3:ba:a4:a0:f8:20:e4:87:c7:b3:
ed:df:1d:2d:06:cd:e7:02:5b:b0:39:8b:56:bd:a6:
a0:21:e5:d7:09:8d:4c:8e:42:4d:64:b2:fb:be:7d:
48:d5:fa:45:b4:1f:ec:4d:1e:3f:15:e6:aa:e3:44:
23:e9:4d:a8:fa:3a:dc:b3:0d:87:86:53:6a:d4:52:
28:98:98:a3:dd:25:9e:e9:e3:f9:96:bc:d7:de:a9:
c0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2A:81:F6:B9:09:00:7D:32:48:BE:57:36:DC:13:C8:06:BF:B4:2F
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/xSqB9rkJAH0ySL5XNtwTyAa_tC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.175.0/24
146.120.185.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:d4:5f:ab:93:a5:ad:d2:8b:59:60:ae:89:88:ae:13:f6:1a:
67:35:07:4d:ec:ba:35:74:78:6b:7b:3e:3a:8c:fd:a6:b9:33:
18:35:af:a8:25:bd:48:92:a8:5c:25:49:97:88:0c:70:f2:76:
b4:62:28:e8:46:58:f3:8d:4d:55:20:c8:79:da:71:de:a0:c5:
8c:e8:df:60:44:5c:2c:bd:d7:08:3a:94:85:9d:ab:98:97:a7:
72:c4:d2:e0:bd:0f:72:cf:a5:6b:7a:5e:c6:75:59:0f:e0:45:
bc:e7:64:30:06:2b:df:01:77:d5:ea:1a:85:8d:c8:12:fe:71:
39:d7:59:83:b8:19:13:35:41:c0:b5:48:d3:96:7b:93:d4:bb:
9b:b6:cf:19:e1:94:ee:4e:1e:11:67:a9:8e:62:90:0b:02:d9:
f8:22:ec:dd:59:b4:c3:fd:e8:61:3d:5d:a1:f9:cb:fe:b6:4b:
11:a4:4c:d4:16:47:03:f6:02:f5:b2:40:c2:66:8b:6d:ec:3a:
22:f5:ff:d6:b8:5c:07:d2:45:ca:46:bb:ea:2c:32:f9:37:71:
61:07:ee:4b:ba:01:ec:70:69:05:61:31:da:a4:46:6b:ff:91:
01:dc:47:de:7c:3b:a4:14:1d:02:19:a5:7b:ef:e4:92:72:1d:
07:11:03:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:23 2025 by rpki-client