Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-2NKF4cpQPfjfWwSPj5PwNIiEvc.roa
File: 1-2NKF4cpQPfjfWwSPj5PwNIiEvc.roa (raw, json)
Hash identifier: hqYrdsxkXa7lgN6IbLrAnyEuFxDkUa75AZdpKvdM8aY=
Subject key identifier: FB:63:4A:17:87:29:40:F7:E3:7D:6C:12:3E:3E:4F:C0:D2:22:12:F7
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27EB6B0E
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-2NKF4cpQPfjfWwSPj5PwNIiEvc.roa
Signing time: Sat 01 Jan 2022 16:09:08 +0000
ROA not before: Sat 01 Jan 2022 16:09:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60081
IP address blocks: 146.120.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 669739790 (0x27eb6b0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb634a17872940f7e37d6c123e3e4fc0d22212f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a9:77:ae:6b:78:93:ac:a1:b0:ea:9e:fd:a9:
9b:53:b3:57:4b:1c:74:eb:3f:b3:35:4a:d0:15:a7:
78:24:4f:6e:9a:8c:4e:12:5a:bc:e0:16:10:68:49:
4b:15:a1:69:48:c3:77:48:ff:1f:5f:f1:5c:d7:0c:
13:cb:41:6e:60:c0:ec:8a:35:9e:1f:d2:70:f8:ad:
89:96:67:05:2f:af:32:f7:87:09:93:17:4c:76:9c:
7f:a0:43:40:2a:f2:e9:a5:30:cf:88:3a:e0:9d:31:
57:3f:09:8a:78:ca:25:e5:e2:72:86:ce:99:e7:0d:
66:df:b5:c3:06:38:4e:89:df:e1:a7:5a:b1:ae:c4:
1c:b7:e4:c3:2b:f7:78:68:2b:d7:93:8d:0d:9a:22:
d7:86:63:96:0d:e9:c4:70:37:13:d9:a2:df:ae:c9:
44:36:5e:f2:bd:50:6b:6b:13:70:c0:2b:ed:f1:f0:
db:75:d1:4a:53:1d:ad:84:0a:dd:6f:43:14:c9:77:
a0:df:c4:29:0d:8a:56:17:4c:a1:41:26:18:9f:19:
f4:6d:0f:92:c0:05:e5:12:64:1d:76:05:e6:b5:15:
51:c7:64:f0:37:90:68:7f:db:84:d5:f4:8a:80:3a:
2f:f1:a2:7b:1b:ca:05:7b:25:09:3d:51:ce:30:e2:
00:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:63:4A:17:87:29:40:F7:E3:7D:6C:12:3E:3E:4F:C0:D2:22:12:F7
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-2NKF4cpQPfjfWwSPj5PwNIiEvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.108.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:91:f4:e0:1d:52:9f:37:e6:ed:37:cd:9e:39:24:d4:80:cc:
b4:81:10:0f:31:dd:1d:18:ee:a5:cf:d5:e3:cc:4f:8b:d3:3f:
db:53:b5:98:33:17:46:89:0d:e1:98:c9:c8:c3:f4:01:e6:2b:
9b:8c:8c:51:fe:77:b2:45:67:d7:28:35:82:89:65:35:71:67:
a2:53:06:67:c6:0f:c2:12:33:d2:25:1e:eb:9c:da:bf:23:f1:
ae:68:49:b8:d6:bf:5e:3c:60:7b:0c:72:b2:15:7d:68:60:4a:
4e:4c:c1:01:5d:1e:ea:53:00:f9:f5:d8:ad:7c:a8:4f:e7:c9:
cf:90:03:a9:c2:e0:44:ec:41:e3:29:27:52:77:b0:2e:dd:3e:
78:0e:f8:54:5c:2d:1e:9b:51:03:f1:b5:9c:43:1a:69:1a:d8:
18:aa:49:0d:44:30:3a:13:c0:e3:9b:6a:ee:7d:79:76:f7:ab:
11:0c:e9:48:41:20:01:74:c3:24:08:3a:36:e3:9f:ce:94:9d:
fb:89:37:1f:9f:d5:27:d8:8c:c0:dc:83:3d:0b:c7:90:73:95:
5d:2f:fb:4e:9c:75:29:dc:ca:60:1d:44:91:e3:e8:9e:4c:90:
12:55:46:56:c6:58:69:b8:2b:bc:7b:ea:d0:8f:1c:e8:9a:54:
c0:0f:b0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:26 2025 by rpki-client