Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/72OFHfpk6QM2ytyxyUYg0Z-ygTQ.roa
File: 72OFHfpk6QM2ytyxyUYg0Z-ygTQ.roa (raw, json)
Hash identifier: MUsyH6tQ8oRh2jmlaUF46nAGxMJGU+upAo76efVFI5U=
Subject key identifier: EF:63:85:1D:FA:64:E9:03:36:CA:DC:B1:C9:46:20:D1:9F:B2:81:34
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570959B42119E46DD5CAE52D4E69AAB03
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/72OFHfpk6QM2ytyxyUYg0Z-ygTQ.roa
Signing time: Mon 02 Jan 2023 03:45:30 +0000
ROA not before: Mon 02 Jan 2023 03:45:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204674
IP address blocks: 95.47.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:9b:42:11:9e:46:dd:5c:ae:52:d4:e6:9a:ab:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef63851dfa64e90336cadcb1c94620d19fb28134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e4:ff:31:8e:71:f5:7e:4f:9a:17:a3:2e:26:
2f:ce:4d:e8:d1:70:d7:10:0b:f6:fc:85:cb:dc:e6:
62:24:a2:a5:53:0f:2d:a5:25:79:53:21:cb:96:d5:
9d:dc:0d:f5:70:ec:67:0b:d1:e8:23:e8:e9:e1:99:
dc:03:84:58:ea:93:1c:be:bd:53:86:5a:cd:d5:f4:
a6:00:48:cb:22:f8:bc:78:24:2d:f0:de:4b:ae:f9:
67:0f:09:8c:1a:67:e6:6c:e1:1e:0d:55:83:ba:00:
1b:e5:85:ac:8e:2e:74:28:a5:30:96:7a:98:91:f6:
87:64:5c:37:dc:54:1c:e0:f1:11:6c:d2:28:2b:e1:
11:3d:bc:ad:72:a2:65:08:54:b1:07:81:12:d2:2d:
f7:7e:e5:57:57:3a:e5:7a:9e:5c:a7:2c:31:b0:d7:
34:ba:6d:88:c1:96:80:2f:57:c3:ad:1f:ea:29:4e:
07:2f:4a:f0:5e:5f:ab:43:1e:7c:cd:4a:4e:26:74:
18:41:d3:45:66:ad:e6:c2:70:06:f8:32:a8:94:ea:
0c:83:04:21:3e:77:c0:4e:ee:bd:ca:a8:88:fe:c2:
ad:b9:a9:d0:2b:64:67:03:ca:c2:60:5c:42:f3:ac:
51:be:9d:c6:b1:5a:3d:84:7e:e6:42:62:08:45:06:
f6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:63:85:1D:FA:64:E9:03:36:CA:DC:B1:C9:46:20:D1:9F:B2:81:34
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/72OFHfpk6QM2ytyxyUYg0Z-ygTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.154.0/24
Signature Algorithm: sha256WithRSAEncryption
86:d3:cb:c3:dd:57:93:ff:12:33:60:84:e0:0e:0b:e1:30:eb:
ec:d7:46:14:8f:f5:07:98:66:16:cf:63:e1:b5:e1:42:c9:f0:
a4:9b:d4:cf:f9:1a:f9:3c:57:7b:5e:b1:48:16:06:83:09:29:
ed:04:9f:0a:af:c4:15:3d:84:36:ce:49:a5:01:3d:f7:b3:fd:
a6:84:a3:00:18:bd:bf:16:b6:6e:04:4c:d1:01:3c:71:94:23:
ae:d5:c9:02:86:40:d8:9a:b6:37:1b:97:bc:2e:5c:7c:8e:03:
fa:82:9d:0d:1f:a8:1a:87:e8:87:6a:66:54:df:68:54:a5:1e:
26:e3:81:ba:15:bb:f2:37:cb:41:1d:44:97:0a:8a:23:88:ab:
72:ec:db:25:71:09:8d:03:e9:51:98:05:44:e8:87:c4:e9:97:
0b:bc:43:9a:08:7f:62:b8:0e:51:7d:ba:34:97:b0:41:60:33:
45:8e:eb:74:2f:92:de:40:36:2d:eb:db:6a:e9:b9:12:8b:a4:
34:ef:1e:56:e5:57:42:f9:99:2a:a7:be:15:1a:ac:ff:3e:bf:
cf:12:10:8e:31:e1:85:62:92:68:eb:29:1c:ab:68:70:6b:69:
4b:40:8e:6f:83:f3:fc:e4:6a:d8:56:fe:b8:60:67:0c:2a:94:
a0:ea:21:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:29:50 2025 by rpki-client