Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-eFOm1mLogK_d-d7888ZJPz6T44.roa
File: 1-eFOm1mLogK_d-d7888ZJPz6T44.roa (raw, json)
Hash identifier: VWsf98kBB8h71EfEDP3ln5clZCeSCed1184hZjwObmw=
Subject key identifier: F9:E1:4E:9B:59:8B:A2:02:BF:77:E7:7B:F3:CF:19:24:FC:FA:4F:8E
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 276D29D2
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-eFOm1mLogK_d-d7888ZJPz6T44.roa
Signing time: Sat 01 Jan 2022 16:08:00 +0000
ROA not before: Sat 01 Jan 2022 16:08:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39623
IP address blocks: 95.46.168.0/22 maxlen: 24
95.46.172.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 661465554 (0x276d29d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9e14e9b598ba202bf77e77bf3cf1924fcfa4f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c7:d0:3b:af:d3:6f:e0:67:b7:fe:aa:36:a9:
5d:a2:38:f9:27:ef:9e:03:8e:bc:2e:3f:2d:dd:6a:
65:c3:44:04:22:a9:28:52:03:51:f2:14:4c:da:3b:
84:ab:02:32:97:f1:bc:19:d4:b6:15:4c:ac:de:06:
09:88:53:3d:00:6b:8d:98:dd:5c:33:1a:2e:fe:26:
e1:aa:89:15:6f:46:7b:75:12:76:96:8e:b1:38:4b:
2a:a3:bd:61:d2:07:9d:18:1f:6e:99:b7:a9:78:f0:
cf:9d:6f:25:8c:9f:e5:ff:59:48:89:8c:12:86:53:
56:4f:bc:8a:b1:93:1c:e4:aa:bb:f2:5b:ac:af:87:
27:a8:d0:9e:92:55:83:eb:03:19:c6:ab:4b:90:02:
af:a0:41:51:f6:6d:86:cc:6f:ec:75:81:a7:1b:88:
35:e1:d0:cb:50:a1:2a:70:52:01:9a:0a:2c:d9:9b:
06:2b:7e:e8:dd:0f:02:0b:8a:37:7a:7d:02:39:be:
ae:14:33:ee:34:f2:70:1b:03:1f:c0:3f:55:20:c4:
88:21:98:08:6d:51:7a:f7:6a:fb:7d:ae:e7:f6:81:
f4:df:fb:0d:01:cc:6d:79:03:07:0a:da:2c:d5:1a:
73:b5:2a:ce:7f:b5:ac:26:36:1c:ea:65:c7:1a:db:
52:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E1:4E:9B:59:8B:A2:02:BF:77:E7:7B:F3:CF:19:24:FC:FA:4F:8E
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-eFOm1mLogK_d-d7888ZJPz6T44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.168.0-95.46.173.255
Signature Algorithm: sha256WithRSAEncryption
8c:a1:b0:9b:4e:df:5f:68:71:e6:4a:66:35:a5:5b:e2:28:f1:
12:26:d8:8d:65:be:aa:61:58:78:97:5a:b8:fc:17:e1:50:90:
32:81:c8:7f:a8:65:f6:52:51:8b:e8:1f:7d:8d:0a:9e:67:bb:
e6:f4:30:a8:5b:2a:6d:89:ec:18:80:40:7e:60:4f:31:19:2c:
21:13:96:71:2f:b5:25:a5:c2:bb:df:39:b6:90:20:59:dd:60:
40:e0:2a:56:72:e8:0d:30:d8:53:27:9c:cc:3a:0c:6d:a7:57:
d3:e5:2d:0f:6f:3b:eb:a1:4e:8d:d0:06:74:ae:7c:21:8b:73:
59:c2:c5:c5:75:fd:0f:ff:be:e5:f3:2f:72:3d:4b:f2:c2:f6:
1d:5a:39:38:7b:e7:b0:1e:df:f5:f0:21:7d:1d:d2:30:43:eb:
f7:b4:d6:44:df:32:49:7f:1f:0c:71:71:a5:e1:9e:b7:ed:0d:
86:df:24:cd:87:07:09:c7:c1:f0:11:b6:9e:6a:bb:4e:35:b1:
25:e6:13:91:56:2a:39:c4:aa:03:87:9b:d7:9d:6e:d4:30:dc:
35:97:ea:01:95:a6:f3:97:be:4d:61:cb:41:ba:39:82:e8:56:
2d:55:f2:0e:84:36:9a:b0:eb:9e:56:e1:e4:93:a9:85:b9:aa:
da:e4:70:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:38:57 2025 by rpki-client