Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/4mjI9zcev1i6dU7jxBa2Wg57qNw.roa
File: 4mjI9zcev1i6dU7jxBa2Wg57qNw.roa (raw, json)
Hash identifier: wLNuNK1uRShbzFPJ8J7DEAaRLiP6W04mbpmrQJH75ww=
Subject key identifier: E2:68:C8:F7:37:1E:BF:58:BA:75:4E:E3:C4:16:B6:5A:0E:7B:A8:DC
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0185709505D4F4EA232208F96BF99E0610E2
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/4mjI9zcev1i6dU7jxBa2Wg57qNw.roa
Signing time: Mon 02 Jan 2023 03:44:52 +0000
ROA not before: Mon 02 Jan 2023 03:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6876
IP address blocks: 95.46.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:05:d4:f4:ea:23:22:08:f9:6b:f9:9e:06:10:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e268c8f7371ebf58ba754ee3c416b65a0e7ba8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:66:a5:7e:c0:7b:6f:19:4d:a8:c9:0f:37:8c:
9a:c0:2c:c5:9f:07:f6:4e:90:91:32:6d:13:ed:a5:
d9:59:0b:7e:2b:a0:30:e2:14:19:7a:fc:6d:d9:bd:
88:a9:4a:41:d9:bc:e5:96:1c:df:e8:b2:e6:01:f4:
7e:55:23:d0:51:15:05:d7:0f:48:18:64:13:60:56:
50:b2:b5:29:d5:7a:80:68:17:6c:d1:4b:86:7e:45:
18:06:65:59:55:8a:db:ce:e8:f7:2a:bf:c6:a4:68:
b4:16:60:c2:58:0b:83:0e:a9:1d:24:bc:16:0b:cd:
9d:3e:57:a9:66:25:aa:7f:ed:11:22:7f:7f:be:0d:
3b:4b:44:ad:4e:84:55:29:f5:a3:5a:7e:f7:69:d7:
67:06:96:8d:d9:1e:c6:46:c4:cd:67:e2:d1:b5:c9:
18:21:7b:a0:ed:5c:89:f5:66:ee:31:99:9b:95:97:
df:0e:04:29:7d:5b:9e:3c:27:89:da:bb:b7:5e:49:
e5:f4:ed:1d:f5:d3:21:20:8b:a8:e6:f1:8b:cd:e6:
b3:d1:0a:41:6e:76:e2:da:26:5a:6a:93:7b:7b:08:
2d:1d:e8:34:e7:c4:68:91:73:df:25:e5:a8:d2:7e:
43:b1:91:44:8e:e6:71:48:32:d0:c9:9c:cc:45:e3:
ef:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:68:C8:F7:37:1E:BF:58:BA:75:4E:E3:C4:16:B6:5A:0E:7B:A8:DC
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/4mjI9zcev1i6dU7jxBa2Wg57qNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.107.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:7b:c0:3e:fa:2a:d7:ed:5d:d1:eb:7a:7c:08:a4:cd:61:fb:
8e:8b:d0:3d:91:f1:75:d7:85:6e:8f:ae:58:67:75:03:33:ee:
04:2c:c0:74:f6:4b:08:12:74:b7:f4:8c:a7:1f:1d:83:bb:a3:
26:d5:f9:61:16:c9:67:66:a7:46:0d:1c:1e:af:fa:45:cd:c4:
d0:27:24:5e:93:f8:48:11:71:0b:1d:9f:22:cc:70:de:c6:2d:
82:e3:a2:66:f0:29:6e:15:95:98:e2:02:7e:79:c8:31:db:06:
5c:89:93:22:f6:59:be:5f:8a:4d:4a:1e:4d:05:d1:61:b4:05:
72:3b:b9:1b:5b:17:9d:63:48:99:d3:65:5a:d5:40:df:7b:66:
b3:f4:0b:32:16:84:ec:8c:5d:fb:4a:23:eb:d1:b5:69:6c:88:
ff:a9:ff:e1:6e:32:99:0e:61:91:9a:40:b1:ec:1f:10:55:9a:
37:8b:cd:5b:8d:42:b0:54:b7:56:f5:aa:03:e7:b3:02:9a:41:
3a:0a:0a:fc:02:c1:88:65:5e:7c:25:21:96:ac:fd:ce:1c:22:
23:3e:fa:3a:18:be:dc:cb:9c:26:51:17:05:9e:e9:05:fb:1b:
19:97:02:0a:d2:9f:b0:29:19:75:45:55:72:a1:5d:34:13:11:
c1:fe:ef:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:08:10 2025 by rpki-client