Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DsWd8xbvXSdSTnZGBLsu_tZ8jfk.roa
File: DsWd8xbvXSdSTnZGBLsu_tZ8jfk.roa (raw, json)
Hash identifier: ygwUZfoMZsS2hyc63XUyj7sqDZpSBH7boo/9hPQ55J4=
Subject key identifier: 0E:C5:9D:F3:16:EF:5D:27:52:4E:76:46:04:BB:2E:FE:D6:7C:8D:F9
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0185709553C5E09747E055B21905A93145B1
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DsWd8xbvXSdSTnZGBLsu_tZ8jfk.roa
Signing time: Mon 02 Jan 2023 03:45:12 +0000
ROA not before: Mon 02 Jan 2023 03:45:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51803
IP address blocks: 95.46.32.0/24 maxlen: 24
2a02:128:21::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:53:c5:e0:97:47:e0:55:b2:19:05:a9:31:45:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ec59df316ef5d27524e764604bb2efed67c8df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3a:15:5e:7d:d3:d5:a3:65:2e:37:73:8e:16:
41:33:49:6b:1e:17:75:54:61:96:f4:0f:dd:c4:2b:
b3:89:86:82:ac:9e:9e:98:16:4d:82:c0:51:2f:7f:
29:8e:53:ed:88:86:97:c7:1e:a9:50:1a:f2:7d:f5:
fc:ef:2f:fc:6c:2b:b0:e5:52:f7:03:05:d3:6b:75:
22:4f:28:78:7f:9f:10:ae:d2:43:45:74:9e:83:4b:
21:0a:5b:0d:49:c7:5e:d4:5f:14:6b:f2:c6:ba:c3:
f4:7a:de:3c:07:c0:e2:6b:e4:b6:d0:2a:3e:e6:9f:
71:f8:e9:5c:25:3f:e4:be:10:1d:17:e0:18:09:9b:
6d:a0:35:15:2b:61:fb:fa:40:08:f0:9e:58:73:f6:
ff:d6:53:0d:d7:85:0c:dc:6d:24:27:a7:39:fe:d2:
02:bd:2b:44:bc:08:a6:e3:e6:b8:dd:1b:a4:56:2d:
48:1f:56:45:28:8e:12:63:f6:d7:f6:4e:9a:bc:74:
c4:65:de:fb:e8:85:38:36:4f:32:89:e0:8e:10:61:
82:f6:ef:de:4c:f3:c6:3a:5a:5c:41:39:fb:ab:21:
09:7c:c1:28:f3:aa:5a:7f:27:d5:f0:eb:c2:9d:ad:
96:fd:20:36:5c:32:29:82:e3:ae:8c:61:6b:ae:1e:
8c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C5:9D:F3:16:EF:5D:27:52:4E:76:46:04:BB:2E:FE:D6:7C:8D:F9
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DsWd8xbvXSdSTnZGBLsu_tZ8jfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.32.0/24
IPv6:
2a02:128:21::/48
Signature Algorithm: sha256WithRSAEncryption
71:95:68:74:eb:fb:1d:a7:f7:55:09:25:ac:4e:64:65:18:37:
d2:00:ed:26:0e:d7:b7:c2:c3:4a:01:93:3c:4f:8f:a9:b0:71:
05:2a:35:57:08:5d:d6:ce:52:a5:82:e4:c4:dd:53:4c:60:27:
00:89:fa:8f:1e:f6:f6:cd:e3:fd:f0:66:1b:92:88:4b:bf:90:
21:57:43:9d:c7:74:5d:e1:dd:d2:4f:01:4f:78:be:6c:6b:f3:
54:6e:a6:2f:ec:65:b2:71:9d:ac:ff:bb:1b:6d:5f:df:96:d8:
93:30:06:4c:d3:25:db:56:51:a6:ca:47:a7:39:8c:f0:07:96:
b1:ef:8f:ee:94:ac:61:f5:d7:aa:d2:64:ff:fd:fe:16:55:42:
f1:2f:49:29:17:e9:a6:e5:41:54:f7:26:c5:d9:39:b1:86:f8:
9f:ba:41:b1:42:e3:6a:7f:6d:71:e6:71:62:1b:d5:8a:c3:e1:
cb:23:bc:bd:d6:b8:e2:83:05:ab:7b:06:89:79:eb:27:20:a7:
b3:5c:e2:8a:76:27:4a:a5:0b:db:6f:23:53:9a:9d:52:92:b8:
06:46:22:2d:91:73:98:17:ee:9a:59:91:4e:38:8e:23:bd:b2:
9c:03:4c:47:d6:28:85:0c:77:88:37:c8:32:38:a0:17:2a:c2:
b8:c5:6d:6f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVwlVPF4JdH4FWyGQWpMUWxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjMwMTAyMDM0NTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWM1OWRmMzE2ZWY1ZDI3NTI0ZTc2NDYwNGJiMmVmZWQ2N2M4ZGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjoVXn3T1aNlLjdzjhZBM0lrHhd1
VGGW9A/dxCuziYaCrJ6emBZNgsBRL38pjlPtiIaXxx6pUBryffX87y/8bCuw5VL3
AwXTa3UiTyh4f58QrtJDRXSeg0shClsNScde1F8Ua/LGusP0et48B8Dia+S20Co+
5p9x+OlcJT/kvhAdF+AYCZttoDUVK2H7+kAI8J5Yc/b/1lMN14UM3G0kJ6c5/tIC
vStEvAim4+a43RukVi1IH1ZFKI4SY/bX9k6avHTEZd776IU4Nk8yieCOEGGC9u/e
TPPGOlpcQTn7qyEJfMEo86pafyfV8OvCna2W/SA2XDIpguOujGFrrh6MjQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFA7FnfMW710nUk52RgS7Lv7WfI35MB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvRHNXZDh4YnZYU2RTVG5aR0JMc3VfdFo4amZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAXy4gMA8E
AgACMAkDBwAqAgEoACEwDQYJKoZIhvcNAQELBQADggEBAHGVaHTr+x2n91UJJaxO
ZGUYN9IA7SYO17fCw0oBkzxPj6mwcQUqNVcIXdbOUqWC5MTdU0xgJwCJ+o8e9vbN
4/3wZhuSiEu/kCFXQ53HdF3h3dJPAU94vmxr81Rupi/sZbJxnaz/uxttX9+W2JMw
BkzTJdtWUabKR6c5jPAHlrHvj+6UrGH116rSZP/9/hZVQvEvSSkX6ablQVT3JsXZ
ObGG+J+6QbFC42p/bXHmcWIb1YrD4csjvL3WuOKDBat7Bol56ycgp7Nc4op2J0ql
C9tvI1OanVKSuAZGIi2Rc5gX7ppZkU44jiO9spwDTEfWKIUMd4g3yDI4oBcqwrjF
bW8=
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:10:54 2025 by rpki-client