Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ArbUV6t_gia0GqT60IIT1h9jAgw.roa
File: ArbUV6t_gia0GqT60IIT1h9jAgw.roa (raw, json)
Hash identifier: H1KPQiPvGPn5X1DP0bXSsr6aAL6mnJvL+4dom54oNRQ=
Subject key identifier: 02:B6:D4:57:AB:7F:82:26:B4:1A:A4:FA:D0:82:13:D6:1F:63:02:0C
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 28175C20
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ArbUV6t_gia0GqT60IIT1h9jAgw.roa
Signing time: Sat 01 Jan 2022 16:09:36 +0000
ROA not before: Sat 01 Jan 2022 16:09:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64423
IP address blocks: 95.46.40.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 672619552 (0x28175c20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02b6d457ab7f8226b41aa4fad08213d61f63020c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:56:9c:e0:67:ea:41:40:1d:bd:d3:d1:90:05:
58:e8:88:0a:b4:e2:ea:3e:62:62:94:5f:e0:d4:5a:
af:b7:fd:63:59:08:43:d1:6b:b1:85:02:c1:8c:4b:
ed:4a:79:ef:16:c8:1b:02:44:1e:cd:87:0e:44:0b:
8f:5d:3f:1d:05:c6:dc:7d:f3:b7:bd:2d:0b:92:c1:
50:34:e8:e5:e9:11:a9:14:c7:b1:79:fb:af:2f:82:
71:b9:10:37:9b:72:00:60:9f:59:78:22:be:ce:cf:
37:9e:0a:44:ff:72:00:67:55:c6:0d:ba:29:36:90:
f8:92:48:dd:eb:e3:70:d4:1d:70:2a:60:da:0c:79:
55:a1:3a:58:e3:9f:2f:f4:a7:79:ee:18:3d:95:43:
d9:f4:05:98:74:db:58:d1:ab:a6:3a:10:36:a0:31:
cd:74:ea:9e:40:e9:b5:06:9d:b0:14:ea:ec:86:e8:
25:e9:5d:e2:13:34:f9:62:d8:1d:82:6e:00:4b:a8:
a8:08:bd:68:6b:f9:66:34:0e:67:bf:45:70:fe:fe:
4f:88:86:e7:2d:3d:40:58:cf:47:dc:d0:2c:e7:ce:
1e:48:a4:64:26:e3:8f:a8:21:79:e1:6e:f5:f3:7c:
5b:81:fc:0b:83:76:a4:5a:10:21:3a:3e:a5:78:3d:
25:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B6:D4:57:AB:7F:82:26:B4:1A:A4:FA:D0:82:13:D6:1F:63:02:0C
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ArbUV6t_gia0GqT60IIT1h9jAgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.40.0/22
Signature Algorithm: sha256WithRSAEncryption
32:74:e4:1e:f6:05:e9:b8:70:4a:7c:e4:4a:4f:85:bb:a9:2a:
e1:bc:a6:ed:63:d0:23:35:36:99:44:e7:bc:ce:d7:ff:b4:ca:
f8:f7:9d:eb:47:84:70:2b:b2:ed:69:cc:6c:1c:b4:7c:91:c7:
64:74:56:6f:80:a8:b3:fc:fc:b7:1d:36:21:75:ce:8a:65:49:
98:2f:0f:ba:87:80:66:d8:6d:1c:3b:96:0b:b4:e0:d0:5f:c4:
0a:ff:5a:c3:43:f9:ed:a8:17:f7:24:70:7a:b2:6d:0c:4c:86:
f4:97:a1:e2:85:46:d0:84:c3:98:30:b7:30:22:a2:3a:02:8a:
25:69:fb:f5:dd:40:22:69:f2:f3:25:bd:e1:52:bf:df:11:c4:
f1:de:3e:cf:b5:12:73:4b:6d:62:a9:e3:c3:e8:5f:74:be:1e:
88:b3:df:68:21:17:0d:ca:2b:5f:95:01:55:06:d0:10:84:9b:
da:10:1c:e8:79:7f:98:c1:d9:84:29:1b:4e:9f:84:f5:18:be:
a2:81:83:16:fc:07:c6:6a:5d:11:2e:19:47:f9:d8:41:1d:ab:
9b:e3:04:6b:72:b3:c3:58:28:53:32:69:d7:84:17:fa:a0:01:
06:ba:cb:47:c8:06:e2:01:6a:96:06:4c:e5:63:14:94:32:c6:
bf:60:59:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:29 2025 by rpki-client