Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Hsx2TLKwZCthTKTZAdTT0ihtw9k.roa
File: Hsx2TLKwZCthTKTZAdTT0ihtw9k.roa (raw, json)
Hash identifier: Wj1cR7Z3USEaJNx9BHc9RAXUIalWh/Oj22Kye6PE06I=
Subject key identifier: 1E:CC:76:4C:B2:B0:64:2B:61:4C:A4:D9:01:D4:D3:D2:28:6D:C3:D9
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570957F2D8A55D107183E187026C69D5F
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Hsx2TLKwZCthTKTZAdTT0ihtw9k.roa
Signing time: Mon 02 Jan 2023 03:45:23 +0000
ROA not before: Mon 02 Jan 2023 03:45:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62091
IP address blocks: 95.47.98.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:7f:2d:8a:55:d1:07:18:3e:18:70:26:c6:9d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ecc764cb2b0642b614ca4d901d4d3d2286dc3d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3a:c0:14:c9:f8:36:32:70:ea:fd:63:0f:e5:
99:55:7f:d0:f3:ca:9e:6d:5e:74:ac:7b:73:c7:9a:
b4:9e:d3:91:ee:48:54:a5:10:bb:c5:55:4e:20:08:
f9:91:58:b3:4b:be:00:bb:bc:15:94:f9:59:c1:29:
ad:7e:a8:aa:fb:c9:02:62:8c:90:1c:c4:77:33:5f:
be:ad:53:30:9f:2c:8f:48:a0:54:15:21:bd:dc:99:
1c:67:03:74:14:d0:c6:b4:09:bc:7a:bf:aa:f1:d8:
56:83:14:91:74:e9:ea:4f:b8:c1:ec:19:4a:b1:d9:
02:6b:24:8e:92:30:79:9c:e7:39:03:ae:d2:3e:88:
60:4e:e5:2d:d0:aa:d4:e6:ee:d7:db:ad:b1:88:37:
22:4a:9f:bc:78:06:cb:7c:5f:e8:e2:e2:c2:25:05:
23:58:05:56:72:ad:cd:69:20:11:cf:9b:cd:5a:6b:
74:81:bb:b4:8c:e7:2d:a7:ac:7a:38:84:aa:43:17:
4b:f0:77:41:71:fa:2d:ce:51:81:77:c8:df:eb:6f:
aa:40:0a:50:84:a5:7e:05:b9:68:e9:1c:55:95:41:
96:b9:fe:40:74:80:80:be:e9:88:1c:e7:b3:8e:a4:
d7:48:00:22:f1:76:00:d5:4d:d3:64:5a:61:2c:a6:
13:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CC:76:4C:B2:B0:64:2B:61:4C:A4:D9:01:D4:D3:D2:28:6D:C3:D9
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Hsx2TLKwZCthTKTZAdTT0ihtw9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.98.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:86:97:82:99:03:47:f5:2d:65:64:ce:58:78:0d:33:d2:6f:
02:33:23:06:22:b2:85:62:df:6f:f3:e8:98:36:8c:2f:3f:1d:
51:1d:d2:5e:46:ef:84:37:74:92:af:17:36:75:a0:e6:68:62:
66:95:f3:92:b8:3c:32:35:39:a6:2e:53:a5:0d:01:76:10:17:
31:35:6c:eb:5f:a1:c1:ad:9d:15:b4:b3:33:f5:ca:89:3d:ec:
5f:5a:b0:b9:b3:2a:85:16:99:8c:a0:ed:49:ed:81:38:cd:b9:
6b:86:43:10:f6:4f:43:59:d8:75:5d:b4:44:b6:6c:c2:e1:09:
91:d1:84:b9:69:64:b4:7a:3f:e0:d2:48:d7:cf:44:04:f8:97:
73:45:aa:c6:89:a1:f7:e6:f0:ff:fc:e0:e5:c9:d8:e4:7c:9a:
d0:0c:95:dd:14:f0:b5:92:f8:a0:8a:ac:9b:33:6c:11:48:43:
8f:6f:49:96:f7:ae:0c:b4:e9:38:8a:e2:ec:e6:c1:aa:80:51:
59:c8:5f:73:13:d6:8a:ea:7e:06:f1:9e:6b:cd:a7:b7:91:df:
5d:9f:a0:a6:6b:fd:22:ae:18:3f:d5:4c:f5:7a:62:76:c9:af:
30:38:7b:0c:03:13:9e:e7:fb:42:67:e9:27:90:63:bc:91:c6:
00:99:f7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:29 2025 by rpki-client