Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/D8t7aV172ZUCDutAXEJVdvFIbk0.roa
File: D8t7aV172ZUCDutAXEJVdvFIbk0.roa (raw, json)
Hash identifier: rptROAxu4I6wc/PUGGpsAZb1k17tux5DYf+XKUoAihs=
Subject key identifier: 0F:CB:7B:69:5D:7B:D9:95:02:0E:EB:40:5C:42:55:76:F1:48:6E:4D
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570956EC7AE60430C9D7B611C9518A9A2
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/D8t7aV172ZUCDutAXEJVdvFIbk0.roa
Signing time: Mon 02 Jan 2023 03:45:19 +0000
ROA not before: Mon 02 Jan 2023 03:45:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60839
IP address blocks: 95.47.124.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:6e:c7:ae:60:43:0c:9d:7b:61:1c:95:18:a9:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0fcb7b695d7bd995020eeb405c425576f1486e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ba:ef:ae:65:89:94:ea:50:d9:27:5f:bf:2d:
f8:d3:3f:a2:6f:91:2d:e3:4c:81:da:dd:9d:03:f2:
5c:03:f5:77:da:e7:bc:6e:9d:b9:18:79:90:d0:3b:
ab:91:26:a8:c5:c1:c1:e4:26:7c:2b:08:c2:38:ad:
69:82:bf:aa:de:d6:0b:a3:46:dd:51:19:a0:25:db:
80:da:95:57:72:01:fb:8c:1b:60:b0:7b:e6:94:91:
9c:cf:e4:9e:f2:97:9b:8f:98:33:03:94:b4:0b:7b:
c9:00:67:56:62:0f:ff:39:d6:fb:a6:14:50:60:d3:
07:bb:96:4c:fe:90:a7:fa:d9:fb:33:e6:2d:23:6a:
2c:80:71:16:c3:1e:e5:58:4f:6d:ec:9e:23:70:14:
5c:66:b3:48:05:4b:c4:3a:b7:a1:e5:df:6d:4a:63:
5c:6e:a5:e4:58:6e:ca:de:79:8f:fc:b0:e8:88:ea:
e7:34:50:bc:b0:ef:10:54:ed:5b:b9:d8:80:b8:dd:
08:a0:a9:0b:f2:10:f9:65:f4:74:36:ed:4b:07:f0:
ad:03:8c:48:db:da:f8:82:f0:36:fd:6a:52:05:eb:
6b:26:27:ad:ff:c1:09:31:6b:54:80:aa:fb:34:55:
53:dd:03:be:a2:fa:2e:7f:cf:c4:20:fe:08:be:08:
6f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CB:7B:69:5D:7B:D9:95:02:0E:EB:40:5C:42:55:76:F1:48:6E:4D
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/D8t7aV172ZUCDutAXEJVdvFIbk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.124.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:c3:ed:f1:86:cd:ea:7e:b9:f2:d1:86:1c:6f:1c:78:46:7a:
ac:80:56:01:7e:89:a9:8b:77:92:b9:50:bb:ba:66:b4:7b:72:
e8:33:b6:2f:61:13:7e:c3:d5:bb:e4:14:27:ed:b3:40:43:79:
d2:d1:d0:b2:8d:f8:f5:70:77:b1:aa:c2:7b:1d:51:45:86:eb:
86:ba:c3:45:f2:14:18:29:9c:df:e7:19:09:7b:8f:f1:76:2a:
22:d2:a4:b0:6c:c7:1f:39:51:b0:ff:b3:21:b2:eb:ee:34:9e:
46:c9:b3:87:ed:6c:1b:33:f0:1c:4e:ae:7e:b3:78:61:96:87:
c3:c9:1d:12:e9:ce:92:f3:c6:4c:4b:aa:6f:ac:ef:1a:b6:c3:
3b:f7:e0:db:7c:6a:5b:00:1d:eb:40:55:4e:72:b6:42:60:a0:
2e:32:86:ea:03:19:68:e7:e8:fc:00:30:bf:39:fe:db:5d:53:
d3:18:12:97:4b:51:11:d1:2f:64:98:26:aa:79:7f:56:1f:22:
ca:be:f4:ed:4e:9f:c4:6b:1b:d1:ae:51:a8:98:a8:37:46:ad:
e2:e0:88:53:0b:c2:98:16:ca:23:17:73:33:c3:ae:bb:b8:a8:
08:a2:2a:c6:fb:9f:9c:5d:33:a3:65:a6:73:48:61:8e:fa:56:
0d:72:7e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:29 2025 by rpki-client