Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7tN-1A1uhHU7J2fpkmnIv06BBVg.roa
File: 7tN-1A1uhHU7J2fpkmnIv06BBVg.roa (raw, json)
Hash identifier: 6UMs/Z61UmkyV8725/dwnpKdUC9nt1NZQ+m09ncva3w=
Subject key identifier: EE:D3:7E:D4:0D:6E:84:75:3B:27:67:E9:92:69:C8:BF:4E:81:05:58
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 275A6103
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7tN-1A1uhHU7J2fpkmnIv06BBVg.roa
Signing time: Sat 01 Jan 2022 16:07:50 +0000
ROA not before: Sat 01 Jan 2022 16:07:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12365
IP address blocks: 92.38.96.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 660234499 (0x275a6103)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:07:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eed37ed40d6e84753b2767e99269c8bf4e810558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:60:45:36:8d:16:a4:4c:e2:89:94:41:4d:47:
d3:f7:e4:63:53:38:f6:54:3a:ae:60:59:58:01:02:
cc:32:b8:52:64:48:b6:53:8b:05:76:0d:48:f4:b1:
f5:70:cb:25:d9:51:ba:9d:2f:32:1a:4a:4f:91:33:
06:f5:e4:b1:4c:bf:69:73:90:80:25:45:d7:72:38:
81:81:ae:d2:5e:44:86:66:a3:4e:c5:86:2f:66:19:
61:bd:bf:4d:3c:ea:22:cc:6a:da:72:9d:53:2a:d8:
a4:47:1b:0b:3e:b7:77:9f:e9:34:b7:0f:bb:c3:d5:
39:cc:63:31:95:32:b6:b2:65:ac:2b:13:67:97:6c:
37:4b:f6:06:59:6d:2c:52:55:86:e7:66:94:87:66:
96:a9:82:f2:21:c2:49:38:26:f6:1c:ab:c7:65:48:
26:0c:c3:e4:0b:fa:4e:d2:ce:50:12:bb:f2:97:6d:
57:27:4a:d7:0c:dc:05:98:52:ef:60:da:49:02:24:
57:b9:1b:71:b0:ce:c8:9f:3c:14:d5:19:ce:2e:2f:
5e:30:ad:67:f0:ac:8e:2d:d9:43:22:a3:a9:a6:36:
3f:b5:d6:f0:f3:07:0f:91:d6:75:e9:24:12:c5:7a:
c1:15:17:75:37:b0:c3:3e:61:af:63:56:bc:13:a4:
1b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D3:7E:D4:0D:6E:84:75:3B:27:67:E9:92:69:C8:BF:4E:81:05:58
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7tN-1A1uhHU7J2fpkmnIv06BBVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.96.0/19
Signature Algorithm: sha256WithRSAEncryption
8d:aa:fa:7e:9d:f3:ac:b8:22:b5:4f:fd:09:a8:29:93:2c:be:
0c:07:60:7c:fd:b7:62:6d:34:11:4f:3c:83:b5:00:83:73:80:
6e:8c:3f:36:ec:ac:d5:84:7e:4a:04:4b:8d:b9:d5:57:b4:21:
ba:33:ee:73:be:0e:16:75:a4:01:11:17:5e:83:d0:1e:2e:e1:
2d:0d:77:11:ce:12:89:1f:39:3d:11:ab:d7:a5:23:b7:af:85:
2a:dc:a8:64:af:c8:d6:93:96:bb:15:2f:64:94:9e:17:f8:d3:
8f:af:59:05:57:8e:e4:ec:1f:c1:6e:b2:4f:27:b0:0a:43:e4:
2f:ba:d5:ee:73:1b:b3:bc:00:f2:b9:19:17:41:3b:78:70:de:
88:66:3d:6b:24:4e:10:2f:9d:21:de:4d:63:f4:4a:12:57:48:
c3:92:57:fc:42:5b:10:1f:0f:3c:27:6f:63:b6:e8:0c:0c:e7:
c3:1e:17:df:ff:3c:59:2f:15:4c:ee:a2:d9:9e:98:6a:dc:68:
1f:4f:2d:c5:ad:b3:b4:82:4d:8b:b9:6c:77:f7:62:89:eb:e8:
b3:14:8e:29:57:63:9c:26:79:d4:9a:e1:cb:1d:c3:f0:06:b3:
c9:28:47:34:a8:96:83:7e:a6:aa:61:5f:10:74:9d:b3:9f:51:
9c:e7:7e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:15:24 2025 by rpki-client