Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/3TGAUy3DWINXCmc-XOStxPXjHeE.roa
File: 3TGAUy3DWINXCmc-XOStxPXjHeE.roa (raw, json)
Hash identifier: A+V3GSp9JJQ47mv3tLNkMC77e9v2HLZAWH4SKi3e97Q=
Subject key identifier: DD:31:80:53:2D:C3:58:83:57:0A:67:3E:5C:E4:AD:C4:F5:E3:1D:E1
Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial: 158FBBE9
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/3TGAUy3DWINXCmc-XOStxPXjHeE.roa
Signing time: Sat 01 Jan 2022 06:54:46 +0000
ROA not before: Sat 01 Jan 2022 06:54:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210599
IP address blocks: 95.130.172.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361741289 (0x158fbbe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Validity
Not Before: Jan 1 06:54:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd3180532dc35883570a673e5ce4adc4f5e31de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f7:82:87:78:f6:38:ce:34:8c:e8:81:9f:e1:
f8:66:0e:02:e8:63:09:0d:25:e1:52:5e:86:50:1a:
79:f2:03:8c:ad:66:fa:0c:e4:92:2e:cf:92:ba:1c:
04:3e:09:c1:e7:00:6f:5f:3b:01:16:15:ce:04:35:
70:13:05:dd:96:2b:08:99:2a:7f:3a:06:9e:ac:16:
df:e8:4b:bb:ae:d9:1c:b8:7b:94:6a:5d:3b:54:56:
24:4c:09:6d:c4:7e:31:fc:48:8a:bc:75:10:8b:a6:
4a:0c:3c:b8:e3:7c:2b:0f:d9:20:0d:12:38:fd:05:
31:bf:89:64:c5:64:df:a7:7a:46:6a:3b:7e:2f:9d:
16:02:f2:72:f1:67:a7:03:08:0b:bb:c1:61:48:81:
d5:2c:0e:80:00:d5:aa:53:32:c3:48:47:76:cb:b4:
e1:b5:7d:82:b6:ee:48:95:16:da:4b:a5:57:5c:a5:
78:6b:19:c3:ef:f1:4b:c3:6d:ee:c8:e2:6f:c4:12:
cb:bd:c5:2e:2b:cb:34:fd:47:b4:b7:ec:26:fc:e1:
57:b1:67:b2:50:c0:bf:9f:47:a2:c0:9e:d3:8e:d5:
3e:f3:05:1b:63:f2:b2:b8:4b:39:1d:ad:64:d2:e5:
47:e8:24:e7:6a:0f:46:8e:e6:d1:97:1f:87:7f:ee:
13:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:31:80:53:2D:C3:58:83:57:0A:67:3E:5C:E4:AD:C4:F5:E3:1D:E1
X509v3 Authority Key Identifier:
keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/3TGAUy3DWINXCmc-XOStxPXjHeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.130.172.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:ec:b4:d0:9c:30:38:0f:53:76:79:22:0b:6b:59:99:3c:84:
c8:bc:c4:63:1e:e0:ad:e8:e5:cb:22:5b:01:ae:30:7e:d4:06:
4a:9b:f2:ab:a8:e4:b3:01:ac:a8:56:1a:33:5a:d9:0c:98:c6:
c1:c2:9a:fe:d6:ca:e7:4e:c1:11:b7:ca:ab:ae:9b:ac:fe:61:
57:de:7b:5e:73:40:e2:14:68:0b:5d:6e:96:e5:a0:fa:e4:98:
66:a2:65:0d:4c:21:7a:96:96:0a:1f:8c:5e:b5:9a:94:54:b9:
df:a2:d3:df:80:ff:bb:09:76:c5:40:cd:43:1b:41:24:44:6e:
43:d8:62:87:c1:3f:c2:44:db:7d:bc:29:61:dc:af:76:83:21:
48:72:76:d3:10:e4:31:f5:78:7c:a3:0d:55:67:79:68:70:1b:
d3:85:75:77:c0:36:af:28:ed:b1:99:87:8d:e6:83:08:d8:0d:
61:2d:4a:db:0d:b5:9d:72:cd:df:89:ed:9d:5c:95:5d:e2:f6:
2b:09:5f:87:ef:3c:15:60:e6:a0:a8:e8:88:94:5d:2a:fe:90:
2f:ab:b3:92:cc:18:08:93:84:a2:db:0d:1b:0d:30:71:37:4e:
ec:fd:10:00:bc:52:c7:33:c6:03:07:c5:13:cf:40:7f:0f:27:
bb:0a:a6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:21:06 2025 by rpki-client