Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/EK2yf_SHD5YIKMC2-lpkFGQzz0Y.roa
File: EK2yf_SHD5YIKMC2-lpkFGQzz0Y.roa (raw, json)
Hash identifier: XC+uT32oFzoaQ3a8SpWVeGSM/AFKGV36u7Wo8LTs1zM=
Subject key identifier: 10:AD:B2:7F:F4:87:0F:96:08:28:C0:B6:FA:5A:64:14:64:33:CF:46
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018C5F21E7A45F6D308B527BE7BC84CC4A45
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/EK2yf_SHD5YIKMC2-lpkFGQzz0Y.roa
Signing time: Tue 12 Dec 2023 17:45:06 +0000
ROA not before: Tue 12 Dec 2023 17:45:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215851
IP address blocks: 95.47.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5f:21:e7:a4:5f:6d:30:8b:52:7b:e7:bc:84:cc:4a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Dec 12 17:45:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10adb27ff4870f960828c0b6fa5a64146433cf46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0c:13:51:00:bd:4b:b5:6b:9e:3e:64:80:d2:
93:df:63:3b:9b:21:55:4c:db:a8:f8:91:b8:74:42:
6f:95:84:f1:31:59:ea:aa:83:5b:fb:82:9e:43:17:
00:86:91:18:6c:71:95:45:4c:cc:3d:8f:41:27:24:
bf:c7:58:9f:ac:ec:ce:a8:91:4e:1d:01:4c:8a:16:
32:d4:15:92:d7:b9:55:8a:8a:8f:4f:bc:f4:42:b3:
9f:52:8a:9b:4b:d0:d3:ad:12:09:27:6a:64:b0:68:
2b:94:34:0a:ac:9a:a3:9e:fd:62:a0:b2:9f:a4:30:
00:cb:d2:fc:cf:de:ef:23:e2:d9:4c:6e:14:11:b9:
00:b9:a1:e3:3c:7a:3e:9e:78:b0:69:a2:97:ec:25:
b2:3b:0b:92:fe:f5:22:4d:73:66:57:a9:13:10:36:
1d:f7:77:16:31:17:6b:31:6b:c7:17:ab:10:00:13:
62:56:4d:b8:a9:db:b3:d5:70:ae:91:0b:c1:20:f2:
2b:0f:db:78:47:0d:88:1a:c3:0c:d6:f4:d0:27:3c:
a4:5a:64:e5:79:66:4f:c7:fe:26:2f:44:ac:ab:44:
c5:43:02:99:fe:88:bf:e3:b0:d1:83:52:5b:b7:b9:
86:d6:02:b9:e4:58:22:41:d9:ed:9f:8e:e9:64:23:
01:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AD:B2:7F:F4:87:0F:96:08:28:C0:B6:FA:5A:64:14:64:33:CF:46
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/EK2yf_SHD5YIKMC2-lpkFGQzz0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.63.0/24
Signature Algorithm: sha256WithRSAEncryption
82:78:8e:82:48:a1:01:7f:93:b8:61:35:f8:63:12:6a:1c:71:
d7:76:ba:7a:aa:bf:91:d5:01:13:ed:28:fd:2c:54:df:f9:7b:
86:41:61:5b:a9:3c:3e:75:de:6f:19:6b:61:e2:ca:88:c1:31:
fd:f1:5e:20:b1:a1:93:ba:d7:49:89:ee:15:d6:5f:24:94:5c:
82:f5:af:a7:5d:b7:6c:1d:3c:db:25:61:0d:a5:29:9a:7d:6b:
c1:d6:40:6b:33:88:62:81:24:2b:e8:31:4a:48:04:eb:4f:3d:
dd:cf:ee:91:9a:29:86:9b:bc:3e:e8:4d:dd:f4:41:d2:8c:0c:
ad:b7:1a:34:f9:e0:c9:a9:07:c7:0a:8a:06:98:91:fd:70:7b:
c4:84:ba:aa:be:45:9b:db:75:ac:ca:43:43:7f:14:ac:b4:e9:
45:94:2d:48:f1:83:fa:12:76:0a:ad:9a:e4:9f:08:7c:77:99:
c4:e0:31:c1:11:8c:f0:29:65:5d:5b:d4:ea:00:ee:3c:25:2e:
17:2b:52:3a:86:1b:7d:6a:44:c9:a0:68:e3:d1:37:f7:8a:18:
c8:53:e6:17:c2:b5:f3:6e:72:30:2f:a0:5c:92:d0:3f:f7:a2:
e3:ff:c5:2d:6c:3b:ad:d2:99:d9:60:2e:76:ae:ca:52:b1:20:
2a:90:c7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:51:16 2025 by rpki-client