Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/xp4X-5UoqdVZS88nU6O0FP-B1A0.roa
File: xp4X-5UoqdVZS88nU6O0FP-B1A0.roa (raw, json)
Hash identifier: o7q4hfIkFf9T7ltCEEWCxKia/stunTuTZ59Hc9DnLuU=
Subject key identifier: C6:9E:17:FB:95:28:A9:D5:59:4B:CF:27:53:A3:B4:14:FF:81:D4:0D
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 2A148426
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/xp4X-5UoqdVZS88nU6O0FP-B1A0.roa
Signing time: Wed 01 Jun 2022 09:32:23 +0000
ROA not before: Wed 01 Jun 2022 09:32:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51685
IP address blocks: 31.148.136.0/23 maxlen: 23
31.148.138.0/23 maxlen: 23
31.148.136.0/22 maxlen: 22
93.170.232.0/22 maxlen: 24
93.170.232.0/23 maxlen: 23
93.170.234.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 705987622 (0x2a148426)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jun 1 09:32:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c69e17fb9528a9d5594bcf2753a3b414ff81d40d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:09:b7:51:c9:db:db:d5:39:ac:f0:9a:19:78:
f2:c9:00:33:a3:57:7a:ec:71:1b:cc:c9:28:7a:c9:
31:bf:b2:2f:cc:0c:ea:99:38:fc:6a:fb:c5:ea:1e:
58:aa:a9:44:ae:51:8d:80:dc:57:c5:10:fa:ee:79:
52:9e:cd:59:3d:49:8b:11:af:de:d5:75:1e:c0:d1:
c1:7d:44:d8:61:50:14:a7:89:d9:c6:30:26:f4:3d:
d5:7b:23:9d:31:18:b2:25:cf:17:29:44:f1:45:e0:
6a:76:13:77:80:93:60:27:10:f2:48:e1:17:02:ec:
ea:11:de:13:86:fb:54:a5:cd:59:79:e6:5c:a2:f5:
96:ca:fb:f6:f7:35:16:c5:60:e2:57:85:80:d4:95:
ac:f8:98:d2:28:e7:14:21:47:fd:35:12:ca:ea:12:
05:28:80:4d:d4:c2:0a:2f:66:0b:d8:0a:30:df:9b:
f9:38:43:d7:a1:d3:1e:b7:d2:e0:d5:b0:48:cd:2e:
61:60:b2:69:39:33:a8:e0:97:9b:c1:65:8c:b7:7a:
49:59:34:81:d4:03:7b:9d:6b:50:6b:8a:e9:d9:d5:
1b:27:c6:40:2c:09:4b:d5:47:18:54:52:0e:14:1b:
d9:1f:46:c1:86:6d:e7:f9:e1:d8:47:ab:8f:95:9e:
9b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:9E:17:FB:95:28:A9:D5:59:4B:CF:27:53:A3:B4:14:FF:81:D4:0D
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/xp4X-5UoqdVZS88nU6O0FP-B1A0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.136.0/22
93.170.232.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:b8:13:9f:d6:dc:8a:51:20:28:fa:12:3e:13:38:fe:22:3d:
a9:d8:7a:ff:bd:f7:31:79:51:b9:83:e9:bd:26:62:15:7f:29:
2e:52:7e:b5:3e:28:2b:6f:66:d8:65:c9:e0:e9:82:57:39:5a:
94:99:e7:11:07:78:28:e1:54:fc:43:1f:75:f1:eb:a8:b1:98:
62:61:52:ce:18:2d:69:be:07:d1:66:75:7a:92:22:fc:6a:5b:
28:45:58:6f:b1:e5:f6:57:86:ca:3f:65:6a:65:b9:1a:26:5b:
3f:7e:e0:66:03:3f:31:40:39:ec:f2:e1:16:4c:14:0e:fa:95:
de:e2:3f:92:ae:0d:3f:8d:52:1f:c8:67:27:3b:f6:2d:65:2c:
11:16:b6:0a:1c:81:b1:3a:8e:f0:86:94:be:37:06:fc:8a:41:
b9:3f:fb:11:40:2c:25:50:bf:89:5b:bb:13:f6:52:a2:92:48:
5b:8e:11:71:8f:39:d7:33:ff:de:ba:d5:60:61:62:38:07:11:
57:46:24:ed:77:13:ca:2a:b6:52:ca:4d:7d:40:44:ca:f8:e7:
a4:20:6f:a8:26:61:29:4a:d5:dc:5b:9d:16:85:a0:4a:a1:48:
b2:26:ba:6b:58:b6:fa:64:62:0c:1f:93:f5:9b:f1:2d:75:79:
56:6f:15:6c
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEKhSEJjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDkxMjJjMzU0MzhhNGViMjYyMzNmZGM2ZTRiYjFkZjJkYWFlZjQyMB4XDTIyMDYw
MTA5MzIyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzY5ZTE3ZmI5NTI4
YTlkNTU5NGJjZjI3NTNhM2I0MTRmZjgxZDQwZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMYJt1HJ29vVOazwmhl48skAM6NXeuxxG8zJKHrJMb+yL8wM
6pk4/Gr7xeoeWKqpRK5RjYDcV8UQ+u55Up7NWT1JixGv3tV1HsDRwX1E2GFQFKeJ
2cYwJvQ91XsjnTEYsiXPFylE8UXganYTd4CTYCcQ8kjhFwLs6hHeE4b7VKXNWXnm
XKL1lsr79vc1FsVg4leFgNSVrPiY0ijnFCFH/TUSyuoSBSiATdTCCi9mC9gKMN+b
+ThD16HTHrfS4NWwSM0uYWCyaTkzqOCXm8FljLd6SVk0gdQDe51rUGuK6dnVGyfG
QCwJS9VHGFRSDhQb2R9GwYZt5/nh2Eerj5Wem9ECAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTGnhf7lSip1VlLzydTo7QU/4HUDTAfBgNVHSMEGDAWgBR0kSLDVDik6yYj
P9xuS7HfLarvQjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8x
L3hwNFgtNVVvcWRWWlM4OG5VNk8wRlAtQjFBMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
MThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8xL2RKRWl3MVE0cE9z
bUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAh+UiAMEAl2q6DANBgkqhkiG9w0B
AQsFAAOCAQEApbgTn9bcilEgKPoSPhM4/iI9qdh6/733MXlRuYPpvSZiFX8pLlJ+
tT4oK29m2GXJ4OmCVzlalJnnEQd4KOFU/EMfdfHrqLGYYmFSzhgtab4H0WZ1epIi
/GpbKEVYb7Hl9leGyj9lamW5GiZbP37gZgM/MUA57PLhFkwUDvqV3uI/kq4NP41S
H8hnJzv2LWUsERa2ChyBsTqO8IaUvjcG/IpBuT/7EUAsJVC/iVu7E/ZSopJIW44R
cY851zP/3rrVYGFiOAcRV0Yk7XcTyiq2UspNfUBEyvjnpCBvqCZhKUrV3FudFoWg
SqFIsia6a1i2+mRiDB+T9ZvxLXV5Vm8VbA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:52 2024 by rpki-client on console-ams.rpki-client.org