Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/B2aGUHf_Jz1r8lNF2MIiA-3GSe0.roa
File: B2aGUHf_Jz1r8lNF2MIiA-3GSe0.roa (raw, json)
Hash identifier: eJQQx7U2jSTiutI5PFkw/Cbin/f2LhXMY2kpZJCCs2M=
Subject key identifier: 07:66:86:50:77:FF:27:3D:6B:F2:53:45:D8:C2:22:03:ED:C6:49:ED
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570958BA1E5AB3CE9427B397FFB477A69
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/B2aGUHf_Jz1r8lNF2MIiA-3GSe0.roa
Signing time: Mon 02 Jan 2023 03:45:26 +0000
ROA not before: Mon 02 Jan 2023 03:45:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197901
IP address blocks: 95.46.74.0/23 maxlen: 24
146.120.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:8b:a1:e5:ab:3c:e9:42:7b:39:7f:fb:47:7a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0766865077ff273d6bf25345d8c22203edc649ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:93:77:25:3d:bf:a3:96:ed:dc:18:7a:f7:22:
77:45:9f:58:3e:aa:3c:04:3a:94:56:ca:c6:9a:91:
71:6b:c5:2e:b6:15:5a:d9:04:69:68:b0:2c:c3:cc:
99:3a:7f:39:f8:43:0d:3b:ec:b8:e0:70:93:bc:6f:
35:fd:58:46:5b:ff:9e:77:85:f7:39:53:00:ec:b1:
cf:89:ce:0d:33:ae:c7:37:f3:43:d6:bb:9b:bd:98:
49:72:04:c1:8c:ef:f6:4a:f2:9a:ea:0a:c5:d7:c2:
f5:eb:34:46:19:ce:9b:d1:89:f6:e4:27:34:9d:9f:
76:ed:9a:a0:f0:90:fc:eb:07:28:b4:fc:96:89:e8:
a7:9b:7b:c0:5b:29:20:76:bf:b9:12:5f:92:31:84:
30:be:2b:21:c2:44:c4:b0:e5:bd:59:3f:14:17:89:
c1:c3:a3:4c:b4:d3:47:b6:b0:b7:55:9b:ef:45:a6:
ab:8d:62:8c:4e:48:9f:56:6e:03:a0:4e:17:30:2e:
42:19:49:d6:27:be:30:08:7a:e1:6d:50:22:a4:d1:
75:35:51:42:73:8b:18:e5:9e:a5:be:c3:fd:8a:b2:
65:16:58:ce:46:0d:44:4f:42:93:b9:78:5c:e5:8a:
66:18:75:1a:53:b4:43:f8:4d:e5:e9:a8:e8:94:c3:
22:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:66:86:50:77:FF:27:3D:6B:F2:53:45:D8:C2:22:03:ED:C6:49:ED
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/B2aGUHf_Jz1r8lNF2MIiA-3GSe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.74.0/23
146.120.24.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:7d:b2:49:5b:73:7d:f5:0f:31:bd:93:4b:c0:8a:35:7a:79:
43:89:a7:35:c8:d5:68:14:1f:7b:e6:38:19:5b:14:51:d6:f2:
cc:58:53:89:71:46:b7:1e:b4:02:af:9f:81:9c:a7:2d:3f:90:
09:7f:b2:a8:48:d4:06:90:14:4d:7d:8e:5a:cb:8f:83:52:d7:
7a:c1:41:80:34:95:95:19:2b:ed:80:db:02:3f:7c:fb:f8:e0:
3a:21:4e:06:b3:3f:a0:fd:f9:71:ef:28:88:45:4b:63:40:df:
da:08:79:97:45:7a:fd:89:6e:04:87:84:20:4a:6e:3c:ca:15:
3f:a9:95:94:06:3c:0c:33:2f:b3:fc:ca:63:46:12:72:50:46:
48:2c:00:eb:e5:07:6c:9a:0a:d3:f5:8d:44:d3:5b:95:74:be:
6c:10:77:c7:78:78:e5:6a:97:40:68:3e:f2:fd:6e:22:e8:7d:
9d:c3:29:73:24:0f:0c:3a:24:f1:12:50:5d:da:d1:d6:fa:5b:
cb:f9:d4:38:6e:91:66:68:a0:0b:cd:f4:ea:3c:5a:0b:71:61:
e9:c1:ff:fd:f8:02:16:4a:d4:1a:e4:3d:65:ff:2f:0e:17:9c:
31:46:e6:9c:7a:24:92:89:84:a6:01:3d:af:a7:b1:c1:9f:6b:
1b:ec:7f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:44:13 2025 by rpki-client