Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/SQgkOf7EJh9jDohV6HQGjMfOe-Q.roa
File: SQgkOf7EJh9jDohV6HQGjMfOe-Q.roa (raw, json)
Hash identifier: UCBKaRmGKJNNfzKWNGPWrXQue20Ndi40oYoTBbMpF0E=
Subject key identifier: 49:08:24:39:FE:C4:26:1F:63:0E:88:55:E8:74:06:8C:C7:CE:7B:E4
Certificate issuer: /CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Certificate serial: 0182F38A99D91062710601937368AD7D86F2
Authority key identifier: D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/SQgkOf7EJh9jDohV6HQGjMfOe-Q.roa
Signing time: Wed 31 Aug 2022 10:55:23 +0000
ROA not before: Wed 31 Aug 2022 10:55:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50616
IP address blocks: 185.156.12.0/22 maxlen: 23
31.22.48.0/22 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f3:8a:99:d9:10:62:71:06:01:93:73:68:ad:7d:86:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Validity
Not Before: Aug 31 10:55:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=49082439fec4261f630e8855e874068cc7ce7be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:16:c5:63:8f:74:e1:3c:e8:c3:e5:91:49:79:
0e:d2:c8:d2:80:44:b2:f0:13:4e:aa:5b:17:47:d3:
92:8a:2e:bd:8b:cc:f1:28:57:77:9e:8f:c1:70:7b:
ac:cb:e9:bf:69:ef:8e:cc:aa:f5:83:aa:a4:f8:94:
88:48:22:c7:ee:4a:3b:d0:86:84:c8:e7:d6:6d:cc:
aa:97:41:4d:f8:de:d5:9e:87:97:c5:b2:93:25:83:
c6:c1:70:5c:37:2a:c3:66:94:14:00:4f:e4:30:7c:
3f:a0:63:be:21:4b:d8:90:15:a3:52:68:8e:25:c9:
5f:21:86:b0:f2:f0:18:46:35:35:62:49:23:7e:de:
c0:9f:c8:53:33:08:4a:cc:f2:d1:df:0a:51:b9:f8:
f4:d1:23:f7:f4:d4:63:4c:bd:52:15:2c:9c:14:78:
e9:fe:c0:6f:0b:e7:7a:6a:17:da:2a:62:91:8d:f8:
68:12:f7:70:f9:d4:5b:db:85:7d:8c:18:17:b8:e8:
bb:0a:28:87:1e:19:24:03:12:59:ae:fb:44:11:81:
25:d0:17:ff:56:6a:b0:c5:de:01:c8:60:66:8f:89:
2e:71:7f:5c:15:e4:e4:82:7d:21:6f:aa:5a:06:05:
73:e6:58:bb:88:af:7a:3c:35:b6:91:d3:37:f5:10:
db:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:08:24:39:FE:C4:26:1F:63:0E:88:55:E8:74:06:8C:C7:CE:7B:E4
X509v3 Authority Key Identifier:
keyid:D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/SQgkOf7EJh9jDohV6HQGjMfOe-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.48.0/22
185.156.12.0/22
Signature Algorithm: sha256WithRSAEncryption
94:c8:88:3b:27:fb:e1:8a:70:09:c0:fd:2e:b8:1c:31:3c:66:
f3:1c:b6:22:03:a9:f5:fb:aa:83:e8:d7:05:a6:9b:f5:b1:6e:
b2:4e:aa:5c:a0:71:25:d7:65:9d:c0:76:eb:1b:f4:3b:39:a4:
30:c0:05:3b:3a:af:a6:52:c4:bf:c5:72:ec:1a:34:bc:9f:0b:
d0:b7:80:3f:73:af:6f:c8:31:94:b1:39:53:96:85:b9:19:e0:
ec:09:22:48:0f:8d:38:68:5a:76:4a:00:38:ea:1d:f5:86:c4:
1e:3c:f2:d0:a0:b9:9f:fe:48:36:af:31:73:53:22:f2:96:78:
97:64:f3:ec:2d:7c:8b:02:66:ab:35:e0:c8:9a:b4:a0:a3:9c:
07:74:15:b4:4c:63:03:51:2b:50:81:6c:4c:f5:97:79:ec:97:
9c:1e:ec:e5:58:11:83:80:63:fb:2a:d7:41:c2:c6:b6:e1:9b:
c9:c2:f7:2a:bf:0d:02:c8:f6:79:f8:98:fb:05:21:4a:31:54:
88:4a:58:06:96:00:c0:5a:8a:40:d8:12:5f:73:73:a2:6c:c2:
6d:05:5e:92:b2:57:c3:3c:9a:38:cc:29:2b:d3:fa:80:45:db:
ef:e7:61:6c:45:31:87:63:76:3f:4f:a6:19:ae:9b:df:2d:e1:
e3:4a:99:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:46 2023 by rpki-client on console-fra.rpki-client.org