Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8BIZE-VvhQcw0YqpHUMYhAgIl60.roa
File: 8BIZE-VvhQcw0YqpHUMYhAgIl60.roa (raw, json)
Hash identifier: Tq3rXCpeJiv8jS2z3uuK/bdmzEhmaYi2fcWibAQwwaU=
Subject key identifier: F0:12:19:13:E5:6F:85:07:30:D1:8A:A9:1D:43:18:84:08:08:97:AD
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27AB118F
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8BIZE-VvhQcw0YqpHUMYhAgIl60.roa
Signing time: Sat 01 Jan 2022 16:08:33 +0000
ROA not before: Sat 01 Jan 2022 16:08:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49442
IP address blocks: 95.47.120.0/23 maxlen: 23
93.171.0.0/23 maxlen: 24
95.46.100.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 665522575 (0x27ab118f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0121913e56f850730d18aa91d431884080897ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e0:ad:b4:e8:5a:99:f7:b9:11:54:f5:a6:75:
4b:36:5b:e5:25:61:ed:a8:2c:b0:8a:6c:15:73:f1:
08:7a:f5:70:f7:1e:1f:1a:e9:5c:67:c5:3f:8a:23:
35:9f:31:fe:26:d5:64:17:48:d1:8a:f2:9a:c2:28:
89:4f:03:2b:61:bd:cf:9c:e7:73:b9:35:c4:0c:10:
a6:b9:18:65:59:e7:9b:56:8e:a9:8d:c6:0e:45:c9:
77:ab:28:a0:de:c7:c4:b7:b3:cd:20:a5:15:82:83:
4f:7a:17:bd:e5:6e:ed:1c:48:29:0e:64:da:15:45:
ea:5f:dc:a4:fc:07:5d:a7:cf:48:0a:14:3f:5f:33:
b4:4b:dc:49:46:4b:44:26:96:6a:86:65:50:b4:9d:
e9:a6:d4:8b:9c:f5:ed:c3:0e:33:03:22:1e:45:31:
ce:a9:ab:bd:ec:c2:4c:4d:9e:d2:f9:9e:05:a8:51:
38:4f:ca:fa:d4:78:dd:7f:f4:de:24:9e:3f:df:cf:
d6:7a:bb:f6:3d:7e:67:3e:af:10:47:a8:2d:e8:d4:
e1:2a:6e:92:e2:17:27:e9:72:27:1a:dc:81:8e:61:
c1:6f:1e:37:07:6f:c8:8c:1b:de:86:f8:0b:4e:4e:
ad:12:b0:42:83:54:17:5a:6f:a0:59:76:54:fe:93:
58:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:12:19:13:E5:6F:85:07:30:D1:8A:A9:1D:43:18:84:08:08:97:AD
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8BIZE-VvhQcw0YqpHUMYhAgIl60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.0.0/23
95.46.100.0/22
95.47.120.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:58:f7:32:c1:9b:f3:ab:0a:a2:0c:87:d4:e2:c9:d3:02:54:
ca:99:59:cc:63:24:c1:8b:b4:7a:99:b2:3b:7a:cb:dd:48:e5:
66:9c:16:63:81:8c:cc:03:42:00:5a:7e:4b:51:4c:00:68:bc:
ee:c5:da:1a:6a:a9:e0:ca:9d:80:c8:16:cc:81:f3:29:e6:09:
a0:67:7e:1e:db:d1:f5:b5:4f:6f:25:8b:b1:04:bd:f5:7e:bf:
ac:14:8a:66:df:07:f6:dc:fa:ca:54:da:36:13:2b:56:4b:5a:
a7:cd:9a:d4:ac:04:fb:9e:8e:44:d7:b9:3e:ef:64:ef:ed:36:
43:a8:ef:b1:0c:f8:69:92:09:3a:25:51:42:17:90:32:b2:90:
96:d8:26:b1:54:81:79:52:e4:3b:7b:e2:8c:b2:54:cd:8a:a8:
0e:aa:08:f0:a6:93:41:82:f5:7e:15:82:d0:a6:37:41:b5:48:
54:93:83:4a:c8:22:e0:c5:3e:5e:1f:0d:3b:77:56:ca:a7:f3:
c1:b2:a0:a7:1b:74:3e:2a:d8:96:6a:56:d2:7a:88:9b:d0:0a:
8b:5b:a1:9f:bb:b1:46:6f:70:de:99:84:37:25:2c:6a:5c:17:
e4:22:c2:7a:07:bf:28:59:bd:0c:11:7b:18:40:06:29:c2:fe:
8d:80:b4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:17:43 2025 by rpki-client