Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/7rJq8vH0LjuIgWlCm0Rn_En1Npg.roa
File: 7rJq8vH0LjuIgWlCm0Rn_En1Npg.roa (raw, json)
Hash identifier: Av1wajJgNcqI51A5cyFW3F8B3uQk5rGVgblRXTxvQbc=
Subject key identifier: EE:B2:6A:F2:F1:F4:2E:3B:88:81:69:42:9B:44:67:FC:49:F5:36:98
Certificate issuer: /CN=465c62c6bcd4cfb8933bcb6a61cf7b3dad2fb118
Certificate serial: 018571D7930B470949EAED3AA365B9D5A56F
Authority key identifier: 46:5C:62:C6:BC:D4:CF:B8:93:3B:CB:6A:61:CF:7B:3D:AD:2F:B1:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/7rJq8vH0LjuIgWlCm0Rn_En1Npg.roa
Signing time: Mon 02 Jan 2023 09:37:11 +0000
ROA not before: Mon 02 Jan 2023 09:37:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50078
IP address blocks: 77.95.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:93:0b:47:09:49:ea:ed:3a:a3:65:b9:d5:a5:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465c62c6bcd4cfb8933bcb6a61cf7b3dad2fb118
Validity
Not Before: Jan 2 09:37:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eeb26af2f1f42e3b888169429b4467fc49f53698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ba:97:51:6a:a7:66:09:f5:05:15:a2:69:a0:
d1:a8:a2:0f:d7:3c:7a:d9:57:e5:e7:85:3a:7a:b5:
e9:ca:df:7b:d8:7f:8f:7d:ee:4f:cd:91:27:00:56:
f4:72:39:b1:be:65:c1:64:7a:e5:dc:50:f4:52:67:
31:83:8b:c4:68:d2:3a:87:0f:df:b8:af:d3:85:29:
3b:d9:18:22:fd:f7:58:88:73:e5:e9:e5:ff:d7:df:
71:24:84:bd:22:d7:81:55:43:53:11:b5:67:a2:d1:
df:98:39:b1:75:a0:ab:da:bc:89:12:ee:28:db:fe:
90:55:95:cf:03:3a:86:37:15:8e:56:29:73:c8:c5:
5f:4d:de:07:14:c9:86:28:fd:0e:e1:bd:3d:9e:07:
3e:19:52:b9:25:e5:a0:dd:00:ac:31:e4:04:f5:3a:
c5:f9:ae:38:78:5d:8d:39:57:cd:8c:e5:37:3e:b7:
d0:1d:80:b4:fe:45:42:08:ed:74:c0:37:6a:63:c8:
c5:af:4e:2d:5a:7e:93:5a:8c:84:11:52:f9:91:03:
92:5b:18:bb:75:0a:bb:09:19:bf:91:0e:3c:94:e1:
bc:a4:4f:f1:90:db:12:26:3e:5b:2b:de:6c:be:8e:
78:f8:cd:b3:90:48:64:8e:c7:56:da:61:31:ae:86:
78:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B2:6A:F2:F1:F4:2E:3B:88:81:69:42:9B:44:67:FC:49:F5:36:98
X509v3 Authority Key Identifier:
keyid:46:5C:62:C6:BC:D4:CF:B8:93:3B:CB:6A:61:CF:7B:3D:AD:2F:B1:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/7rJq8vH0LjuIgWlCm0Rn_En1Npg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.112.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:46:81:23:90:40:18:b1:60:e9:09:5b:b2:9c:4f:3c:1a:5d:
ce:5a:94:93:38:0c:f3:27:a4:04:ac:73:ce:0a:fd:46:aa:fe:
a1:13:ec:df:10:19:d7:ff:2b:f7:23:3c:b3:31:e2:95:32:df:
61:eb:bb:b6:89:b0:14:8c:74:eb:b3:82:2e:1f:e4:44:e5:9d:
ac:9a:ca:cb:35:c0:5d:04:25:e5:c3:b5:33:ab:8f:15:c7:04:
5c:6b:bf:8a:86:86:23:08:13:54:78:0e:11:68:dc:14:69:35:
c1:66:1b:28:5a:3c:d3:4a:c4:80:93:84:e1:f1:43:4f:ef:5e:
1c:5d:7a:7a:13:3c:7a:62:67:f5:5e:43:51:4e:fc:90:a3:52:
35:ef:9e:f5:fe:53:0d:9a:91:e9:43:43:0b:df:c0:be:4f:d9:
b0:df:19:59:d7:e3:ef:65:11:9e:ae:85:37:cd:6b:d0:79:61:
68:05:2b:75:73:54:36:e9:9b:02:e4:e9:ab:e5:e2:62:40:5d:
59:68:da:54:75:1e:17:00:8d:2e:74:4d:5c:3c:b8:97:49:51:
cc:1e:19:4e:49:b9:82:41:8b:c3:10:f9:5c:60:68:2b:f7:ea:
6c:a6:78:44:2b:09:14:74:70:a9:db:3d:be:d5:8c:e1:6f:62:
30:24:9c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:38 2025 by rpki-client