Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Gb9E21BEYnunIYZVIYMpbKnUulw.roa
File: Gb9E21BEYnunIYZVIYMpbKnUulw.roa (raw, json)
Hash identifier: Ut9A+zw8TcwuTquM4HrjiMwKgokb1Jvb8ItS28dYo90=
Subject key identifier: 19:BF:44:DB:50:44:62:7B:A7:21:86:55:21:83:29:6C:A9:D4:BA:5C
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0185709535CB888659CF18D3E1C35B75BE87
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Gb9E21BEYnunIYZVIYMpbKnUulw.roa
Signing time: Mon 02 Jan 2023 03:45:04 +0000
ROA not before: Mon 02 Jan 2023 03:45:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47845
IP address blocks: 95.47.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:35:cb:88:86:59:cf:18:d3:e1:c3:5b:75:be:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19bf44db5044627ba72186552183296ca9d4ba5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a6:84:77:5f:94:1e:4d:80:c0:2e:f3:a6:52:
42:e7:be:19:0f:9b:e9:dd:f7:db:f7:cc:1f:e1:a0:
36:87:76:50:a2:1e:c1:a6:96:31:c8:4e:3b:9f:84:
ef:a9:bf:0f:f5:78:05:c0:62:73:19:9b:40:10:a7:
f9:04:5c:fd:a3:a3:73:1b:b9:4b:63:e1:94:aa:a2:
61:96:ca:74:5b:fc:03:d8:b4:9d:e8:81:b4:5f:b8:
07:ef:9a:48:37:95:86:37:1b:3a:8b:8d:21:4d:4c:
bc:3d:77:4c:57:d2:9c:d9:0f:41:34:21:68:94:5f:
a7:aa:59:af:79:2c:18:ec:ea:a3:fb:f4:2d:f5:86:
14:cd:b2:92:ab:53:c7:99:85:2c:0b:22:73:6a:10:
ad:b9:ea:84:b7:2d:46:f3:cf:38:d9:35:d3:e6:13:
ab:87:4e:82:44:5c:bd:3d:66:c3:ba:c8:95:d2:23:
c5:aa:0e:e4:3d:6c:82:04:62:5b:c9:cd:84:c0:eb:
12:75:3e:79:ad:86:8a:2a:2b:20:7e:47:22:95:3d:
23:f9:e4:13:5d:94:f4:6b:3a:3a:2f:b2:1d:b2:38:
e1:e6:7c:56:d3:85:d3:91:71:7a:3a:50:e8:f0:d9:
08:1b:08:ab:4b:3a:0f:51:ed:37:4d:a5:7b:b7:28:
af:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BF:44:DB:50:44:62:7B:A7:21:86:55:21:83:29:6C:A9:D4:BA:5C
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Gb9E21BEYnunIYZVIYMpbKnUulw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.246.0/24
Signature Algorithm: sha256WithRSAEncryption
50:49:92:7f:5d:ac:87:c0:39:c4:2e:2e:1c:ea:58:14:f9:c1:
82:ae:0f:ce:c1:b2:f9:32:a4:d6:d4:eb:26:8b:ff:2d:b5:6c:
95:b0:75:07:1c:65:27:0d:c3:42:7c:4c:6f:87:64:75:6a:54:
3e:32:79:c8:5d:ad:ef:70:81:99:6d:98:de:06:53:c4:02:a7:
99:6a:92:04:52:fc:8b:ef:37:9b:b3:67:1c:13:80:4b:e4:28:
a3:bb:8e:97:50:f3:14:86:cb:3f:00:70:35:bc:ff:b8:96:58:
48:a6:ac:73:42:14:ce:7e:f0:65:14:6a:d1:11:67:4a:c2:d3:
e4:ec:38:9e:55:5b:81:05:0f:4f:46:fa:ed:40:c1:ba:49:82:
0a:c6:82:47:b4:40:ab:c1:a0:77:ba:22:2d:02:60:83:dd:db:
8c:b6:10:34:76:ad:39:7e:96:9c:8a:e0:ca:3e:cb:19:64:92:
a3:51:3c:49:36:dd:93:41:9c:ed:14:d4:2e:46:99:b3:d0:19:
6d:97:67:90:b1:b1:a9:83:48:78:da:d0:48:4a:0d:de:b4:b7:
fb:c5:c4:27:3c:9d:45:c8:50:70:53:c7:44:f6:6b:10:ff:2e:
f1:88:f4:54:4d:f2:c8:fe:ee:58:65:25:b4:fd:f5:aa:02:b8:
1a:bc:41:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:05:56 2025 by rpki-client