Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HjcQoM1ls0RnfP00BSf10fzcOo4.roa
File: HjcQoM1ls0RnfP00BSf10fzcOo4.roa (raw, json)
Hash identifier: VA/jfqtrPpmWzne8atvyz1IqKNtk+0t+yKCVuhi0RSs=
Subject key identifier: 1E:37:10:A0:CD:65:B3:44:67:7C:FD:34:05:27:F5:D1:FC:DC:3A:8E
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0187EC4349EA500ADC583FF09DFBF6BDE6C5
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HjcQoM1ls0RnfP00BSf10fzcOo4.roa
Signing time: Fri 05 May 2023 14:14:05 +0000
ROA not before: Fri 05 May 2023 14:14:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43049
IP address blocks: 95.46.142.0/24 maxlen: 24
95.46.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ec:43:49:ea:50:0a:dc:58:3f:f0:9d:fb:f6:bd:e6:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: May 5 14:14:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e3710a0cd65b344677cfd340527f5d1fcdc3a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:16:f9:b4:c2:68:f4:ad:64:74:0a:e1:48:50:
c9:22:18:8e:47:5e:94:55:e2:9a:4b:65:aa:b3:96:
17:52:49:cb:ee:35:4a:ac:2b:f2:96:4f:1a:10:ae:
4f:cb:23:47:91:6e:38:94:98:34:a9:40:5d:e8:2d:
e9:55:09:ab:b0:8a:54:29:0d:1a:ca:66:14:a4:38:
24:aa:af:9c:99:b3:35:dc:27:2b:14:6c:37:53:97:
48:d8:4d:bf:97:94:35:54:ec:d3:c1:0e:59:94:68:
73:cd:b0:60:f9:72:b3:ef:4a:86:14:5b:fb:ca:c6:
a3:ff:39:5e:22:bd:80:6a:88:70:ad:0f:86:6b:25:
1e:e9:51:3d:82:ec:75:25:e4:bc:6f:38:c5:d1:c9:
bb:fb:23:b5:1e:a0:af:67:3d:7e:11:83:47:f8:34:
98:ad:ce:22:0a:05:a2:a4:eb:20:0a:d4:0b:28:d6:
31:46:e4:3f:03:be:e6:d9:79:2b:05:c7:8b:fd:20:
18:51:8b:92:68:83:8e:5a:58:dd:bf:54:6d:13:13:
07:8f:bc:f0:95:2b:8c:a4:d8:18:97:b4:f6:33:37:
16:2c:d9:c6:53:15:a7:b6:c6:46:71:e9:c0:22:c3:
0b:20:15:73:9f:ab:17:b3:ab:c3:8f:92:77:6b:19:
cd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:37:10:A0:CD:65:B3:44:67:7C:FD:34:05:27:F5:D1:FC:DC:3A:8E
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HjcQoM1ls0RnfP00BSf10fzcOo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.104.0/24
95.46.142.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:ec:2e:40:a9:84:b5:9d:f4:2d:65:30:7b:05:c6:fc:ac:94:
1a:c3:a2:a1:44:f6:73:b5:49:9b:10:03:f1:a8:af:f6:f5:02:
45:46:31:60:76:42:af:f7:b6:35:5a:30:e1:cd:79:d4:68:5d:
94:47:a7:09:c0:86:a4:06:35:12:60:d6:e4:52:8e:aa:b2:c7:
f0:88:4f:b5:fa:00:7d:47:47:4b:5e:5c:ad:a9:8c:90:9a:38:
3a:d6:d6:3a:b9:6d:49:10:19:d2:e1:3a:f8:52:2e:4e:91:3a:
10:a5:91:40:6b:19:d0:54:c0:e6:7d:b9:74:cf:f1:d6:20:44:
ce:e1:94:ac:69:84:d7:7f:e6:ca:e3:cb:79:91:5e:40:4c:f3:
6b:d2:43:0d:27:91:ae:63:ba:df:06:1c:b5:49:9f:f2:7a:77:
c4:ee:ad:d5:99:00:c3:4a:25:2a:43:89:15:6d:4e:8d:c2:09:
18:d1:4e:4a:62:39:99:db:63:d8:53:f7:a4:2a:d0:0c:58:5b:
3d:ea:64:84:4b:ea:72:22:97:06:19:a8:2f:9c:bd:af:8e:0d:
28:5d:93:c3:77:f1:03:d0:16:00:2b:22:7d:3e:ce:88:99:5e:
90:ed:32:55:f3:d0:ab:40:fb:00:49:3b:3d:4d:3c:ff:c2:f0:
f7:7e:cf:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:53:31 2025 by rpki-client