Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/J2wxZANrQzS9TZf0LxoCB6DW-SM.roa
File: J2wxZANrQzS9TZf0LxoCB6DW-SM.roa (raw, json)
Hash identifier: vJ0fyMLHfzWtm7C1LIrK2wUhU0+BunJXK2oXIclwhKU=
Subject key identifier: 27:6C:31:64:03:6B:43:34:BD:4D:97:F4:2F:1A:02:07:A0:D6:F9:23
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0185709530BD78A6C1826A5C3DD6DA51C7E6
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/J2wxZANrQzS9TZf0LxoCB6DW-SM.roa
Signing time: Mon 02 Jan 2023 03:45:03 +0000
ROA not before: Mon 02 Jan 2023 03:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44927
IP address blocks: 146.120.89.0/24 maxlen: 24
146.120.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:30:bd:78:a6:c1:82:6a:5c:3d:d6:da:51:c7:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=276c3164036b4334bd4d97f42f1a0207a0d6f923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:54:5f:a1:1f:55:15:57:03:e2:0e:d2:b9:86:
ea:a1:22:c5:08:05:cf:46:95:d8:21:d8:12:d5:71:
9a:b5:d4:1c:f9:02:29:1f:b3:f8:42:ae:cc:02:37:
3c:5b:a3:c9:8f:a5:59:2e:8f:fb:20:a0:5d:fb:a1:
3d:2b:55:49:c8:cf:19:ae:e5:47:7d:c7:f7:a6:8e:
0f:af:c8:2d:a3:a8:63:46:ec:64:19:4b:53:5a:89:
44:35:30:b5:46:3c:38:f6:0c:2d:03:aa:5a:04:a4:
4c:50:46:05:9f:bb:04:09:49:45:af:f5:98:4b:ce:
58:e5:5d:02:69:c3:d9:86:c4:ba:c1:e8:10:45:bd:
46:6b:00:2f:25:26:83:8b:c8:b7:c0:22:23:bc:30:
dc:fc:2d:b4:94:a1:48:44:ca:10:85:b7:e9:a4:59:
a4:31:1b:f7:60:33:95:45:6a:02:b7:f5:8b:dd:a9:
3a:99:17:1f:df:ee:e1:1c:66:49:e6:22:14:ff:0d:
2b:af:f1:60:79:92:19:4c:58:42:5f:73:11:5e:43:
f1:d5:dc:cd:0d:1e:cd:f6:3c:ba:ec:5e:53:a1:23:
7f:b2:c2:d4:89:c6:b1:ec:21:8f:d4:02:1c:f1:b6:
ef:3f:9f:31:d8:2b:a7:97:5b:d2:8e:0b:fe:51:ed:
48:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6C:31:64:03:6B:43:34:BD:4D:97:F4:2F:1A:02:07:A0:D6:F9:23
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/J2wxZANrQzS9TZf0LxoCB6DW-SM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.89.0/24
146.120.96.0/24
Signature Algorithm: sha256WithRSAEncryption
32:af:ce:74:85:6c:36:62:87:07:99:c6:91:15:21:99:1d:92:
b3:4c:31:2b:d0:e6:96:2a:40:57:86:ef:0f:93:bb:95:32:95:
a1:7a:04:a7:f0:51:17:62:f3:cb:18:dc:f4:31:18:58:63:df:
a7:03:d0:ef:97:7e:21:53:40:48:49:04:a1:71:da:f9:87:82:
0a:76:9b:a2:df:2b:62:ce:94:b5:79:9a:16:e9:7c:17:11:4f:
5e:38:34:b0:9e:5c:89:fc:86:f0:34:88:c6:8f:40:de:1f:43:
b8:97:57:ef:bb:ea:08:57:93:d5:fb:32:93:bc:43:fa:48:4a:
f9:9f:49:73:95:b4:2b:c7:57:64:66:4b:fa:f1:45:0b:12:7a:
59:1d:ee:27:81:54:42:9a:ab:48:65:f0:0f:fb:31:dc:5c:6b:
b3:09:65:5a:a0:b9:79:f9:16:f6:e9:21:7d:ee:d4:df:51:7e:
a8:03:1c:8a:f1:19:34:74:90:62:40:b7:a8:23:f3:4c:27:cf:
78:4b:ec:2c:2d:8d:30:9c:31:bf:e7:46:8a:c6:4f:c4:2a:94:
d6:a6:64:98:35:03:c3:93:30:82:cd:7f:60:d1:62:53:08:29:
49:23:5b:df:53:ac:87:72:b6:90:6d:c1:49:57:b5:3c:ba:16:
89:56:41:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:18 2025 by rpki-client