Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/2hfAzixdsFbSg3g995pdSdPmrC8.roa
File: 2hfAzixdsFbSg3g995pdSdPmrC8.roa (raw, json)
Hash identifier: 03/Mjd0zK1NFeuNdqKgy4UB4KMf//e0qgSgr2nJvlW0=
Subject key identifier: DA:17:C0:CE:2C:5D:B0:56:D2:83:78:3D:F7:9A:5D:49:D3:E6:AC:2F
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01845BE63A301D0021C8EC59F476640A3F84
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/2hfAzixdsFbSg3g995pdSdPmrC8.roa
Signing time: Wed 09 Nov 2022 10:18:45 +0000
ROA not before: Wed 09 Nov 2022 10:18:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44321
IP address blocks: 146.120.56.0/21 maxlen: 24
146.120.97.0/24 maxlen: 24
146.120.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5b:e6:3a:30:1d:00:21:c8:ec:59:f4:76:64:0a:3f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Nov 9 10:18:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=da17c0ce2c5db056d283783df79a5d49d3e6ac2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:27:ea:46:59:bf:12:53:41:e9:f1:fe:61:27:
20:8a:19:3a:ff:1d:7a:3f:21:3d:93:b4:86:fa:07:
76:7a:00:30:9d:63:54:58:49:d0:81:5c:ce:ed:8b:
97:db:a6:b1:4e:9b:2f:8d:3a:85:6f:d0:f8:3c:02:
2a:87:7c:be:72:7d:8c:18:43:0c:50:89:5a:33:e3:
1b:df:cc:68:c9:44:93:6a:69:ee:2e:f6:25:37:d8:
14:dd:80:97:8f:12:6a:d5:ff:d5:5a:87:40:0c:78:
12:bf:2d:44:90:dc:55:d3:0a:67:0a:e3:f1:b5:95:
3d:6c:57:e4:58:83:35:64:2e:82:44:a5:de:4c:02:
c0:a1:72:4b:a8:18:c0:f7:a2:7a:f4:8f:11:07:98:
a2:57:06:5d:e4:65:bc:3a:07:2b:6c:8f:b1:68:49:
ea:a5:03:63:39:d5:d6:38:cf:e2:18:14:34:7c:cc:
ec:57:a7:de:cc:12:79:47:9e:d8:92:4b:70:41:12:
95:fc:2f:24:f2:9e:67:ff:1d:72:20:e6:65:25:e9:
eb:4e:86:e7:65:74:1f:d4:9b:85:05:eb:18:be:df:
ac:d2:3f:ca:26:f3:81:e6:50:d6:56:8f:ad:6e:2d:
02:ee:50:75:41:c3:df:ba:cc:40:e1:e4:60:c2:35:
a8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:17:C0:CE:2C:5D:B0:56:D2:83:78:3D:F7:9A:5D:49:D3:E6:AC:2F
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/2hfAzixdsFbSg3g995pdSdPmrC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.12.0/24
146.120.56.0/21
146.120.97.0/24
Signature Algorithm: sha256WithRSAEncryption
32:e5:09:f8:27:c1:cd:5c:ef:7f:81:80:87:ef:b9:53:cd:67:
6c:47:8f:36:85:a5:1f:97:e3:df:a6:01:25:c5:a1:7b:37:43:
49:52:1c:cf:dc:2f:92:42:3c:39:e6:5c:02:58:00:59:94:7f:
bb:22:70:c7:be:67:68:f0:32:10:3d:f2:b6:62:07:3e:3e:55:
7c:9a:36:02:32:19:05:9f:0f:c2:c8:46:58:80:b4:16:6f:ee:
e5:dd:0d:37:90:5c:f9:f6:39:bd:fe:a1:12:bf:82:30:a6:d7:
b8:ad:5e:e8:f7:9f:fa:ea:99:f8:cb:ee:51:7d:81:eb:92:6a:
a6:42:a6:a2:1e:08:69:6d:de:43:ed:d8:06:6b:92:31:96:a2:
25:61:db:29:2d:d2:68:b3:80:f3:bc:49:18:a1:89:a4:a2:31:
e5:38:d4:b2:73:9a:97:8b:2e:6f:61:a0:b7:5d:d5:ae:8d:52:
4e:76:15:87:91:1f:fb:b5:02:2c:80:da:23:b5:35:31:5e:0f:
01:40:d2:b8:3a:5c:4d:c3:a4:7a:7f:99:fb:0d:42:82:14:92:
5d:6e:ef:df:5a:0f:df:f9:fb:be:fb:49:49:92:d9:8f:0e:7d:
cb:9e:40:06:77:4f:c0:79:4a:76:df:9a:82:86:f4:3b:fd:77:
68:af:eb:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:39:09 2025 by rpki-client