Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FhFs51hHQ63RkNqcKjiv_Llz4xk.roa
File: FhFs51hHQ63RkNqcKjiv_Llz4xk.roa (raw, json)
Hash identifier: E+rkAIVs0ioWasTo0r0x2O/XQbPll37zvuAJwWcTGVo=
Subject key identifier: 16:11:6C:E7:58:47:43:AD:D1:90:DA:9C:2A:38:AF:FC:B9:73:E3:19
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 28040082
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FhFs51hHQ63RkNqcKjiv_Llz4xk.roa
Signing time: Sat 01 Jan 2022 16:09:25 +0000
ROA not before: Sat 01 Jan 2022 16:09:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61979
IP address blocks: 92.38.44.0/22 maxlen: 24
95.47.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 671350914 (0x28040082)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16116ce7584743add190da9c2a38affcb973e319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dc:ab:7c:21:04:ce:c4:b5:2f:a9:b4:5c:9c:
08:71:92:56:c4:26:f2:7a:5f:b1:29:23:fe:21:ac:
7c:f2:74:40:c8:1a:00:5f:18:97:bd:15:06:c4:ad:
1f:8a:46:f7:2d:a3:83:a1:53:cb:26:62:14:1f:94:
c4:b0:8c:ef:7e:20:38:6e:95:b5:bd:a7:e8:c4:70:
78:59:02:e1:54:54:a0:d0:84:15:18:20:9e:26:61:
d0:45:53:a6:3d:95:9e:90:9a:6c:f2:9a:a4:8b:e7:
dd:85:95:79:70:eb:84:5a:7f:d4:9d:24:1c:c5:bd:
4a:70:66:84:bf:b7:ae:39:4f:64:3b:fc:a0:8d:91:
be:46:dd:82:e9:3b:04:1c:d4:0a:1f:67:25:5f:8b:
14:68:56:d8:db:a0:70:91:80:de:ee:20:29:08:30:
20:37:02:fc:5b:17:bf:7e:0d:47:25:1a:33:22:d6:
c9:fa:53:36:0b:1a:88:18:37:72:30:00:a2:0b:7a:
3d:e8:eb:f2:08:ff:9e:9e:d2:a7:9e:e3:c9:50:d9:
b5:1a:da:56:0c:e1:4b:4c:6b:35:8d:be:7d:a8:92:
3f:e8:f2:38:78:82:b2:0c:c6:ce:6f:ed:99:76:c4:
7b:e1:43:4f:1e:12:59:3a:72:1e:bb:90:b6:af:c3:
12:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:11:6C:E7:58:47:43:AD:D1:90:DA:9C:2A:38:AF:FC:B9:73:E3:19
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FhFs51hHQ63RkNqcKjiv_Llz4xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.44.0/22
95.47.53.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:de:14:9c:4a:e4:fd:e1:db:ed:aa:50:4b:fb:c5:b0:9a:b5:
6c:4b:ac:57:f1:ae:ca:33:4c:28:5b:b5:f9:73:5b:61:fb:03:
ee:a4:d1:22:f6:b8:da:fd:a6:1d:cd:eb:7f:c9:3b:c0:51:0f:
0a:e2:2e:46:68:00:6d:2e:73:b7:21:cf:86:0b:7d:4e:57:c7:
1f:00:d1:d8:6a:36:09:ec:f5:05:2d:7b:24:d6:c9:41:ae:fe:
ce:cc:81:dc:a6:2d:b9:49:eb:44:7a:c6:33:d9:23:9f:45:75:
07:ba:5f:fe:d4:cb:83:9b:7d:ca:dc:c0:63:a4:0f:e5:74:c6:
86:0e:ec:11:88:d7:a2:1f:f8:2d:9f:2c:73:a6:db:4f:7d:36:
e4:49:87:53:73:71:67:83:6f:a7:1a:61:09:53:fd:77:27:88:
04:43:7a:e8:d3:89:a1:4e:c6:ca:88:bc:55:a2:9d:fc:a8:b6:
ac:70:37:47:27:56:ae:da:d3:8b:a8:02:68:41:38:c4:cc:57:
e4:33:3d:da:b0:55:1d:fc:c2:b8:c3:89:57:5e:0e:9d:93:d9:
60:11:5a:e3:12:a9:cb:42:94:8d:d1:fa:92:95:05:83:02:b8:
f0:ba:a0:af:58:47:57:76:c7:84:16:66:58:74:db:5a:3e:6f:
16:27:9a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:39:01 2025 by rpki-client