Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/JOatkLYTRhX7zhDOiOu2Ghkn9Jk.roa
File: JOatkLYTRhX7zhDOiOu2Ghkn9Jk.roa (raw, json)
Hash identifier: hIU46JcUaNLRC4U/3AFdUL3GQC6PYBywtQpc4+CU49c=
Subject key identifier: 24:E6:AD:90:B6:13:46:15:FB:CE:10:CE:88:EB:B6:1A:19:27:F4:99
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27F447FD
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/JOatkLYTRhX7zhDOiOu2Ghkn9Jk.roa
Signing time: Sat 01 Jan 2022 16:09:14 +0000
ROA not before: Sat 01 Jan 2022 16:09:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60754
IP address blocks: 146.120.166.0/24 maxlen: 24
146.120.160.0/22 maxlen: 24
146.120.164.0/23 maxlen: 24
146.158.58.0/24 maxlen: 24
146.158.58.0/23 maxlen: 24
93.170.1.0/24 maxlen: 24
146.158.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 670320637 (0x27f447fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24e6ad90b6134615fbce10ce88ebb61a1927f499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:97:06:1d:68:70:0c:f6:bb:72:0a:b9:d4:8c:
c0:ff:0b:57:f9:8f:0d:9d:61:0a:7b:98:67:17:91:
ec:16:f7:19:77:93:09:c8:77:69:b4:ef:e8:07:48:
9a:20:b5:09:40:e4:9f:85:ca:c2:92:06:6f:0a:b0:
15:02:a6:b0:8c:5d:af:00:cf:ef:81:4b:4b:75:58:
69:60:60:cc:6e:1b:be:21:30:73:af:4f:70:03:1b:
17:a6:59:15:fe:55:c3:e1:1d:22:81:51:59:da:6b:
5e:51:70:f8:05:0f:60:e6:f2:3b:18:68:a5:09:48:
d0:cb:57:8b:f7:e0:0e:bf:1f:f6:b7:99:fd:7e:34:
bf:09:44:05:dd:79:15:fe:7f:79:32:77:cc:93:99:
72:50:6f:5e:45:af:cb:35:3f:3f:81:76:0b:26:6e:
3d:d8:d2:9e:e6:0a:7b:1b:0b:db:24:99:1f:8f:44:
3b:69:52:6f:84:e2:2d:47:88:b3:c3:41:60:d0:0e:
1d:4a:47:65:ef:35:bb:b7:0f:5e:51:1a:6a:25:43:
d2:3b:2a:63:dc:b3:87:68:6c:f0:a1:58:68:76:7f:
36:13:a5:82:ce:73:46:ad:3e:e2:bb:b3:37:23:f9:
27:ff:4f:35:0d:a6:9f:77:dd:30:9f:fa:46:32:c1:
c8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E6:AD:90:B6:13:46:15:FB:CE:10:CE:88:EB:B6:1A:19:27:F4:99
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/JOatkLYTRhX7zhDOiOu2Ghkn9Jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.1.0/24
146.120.160.0-146.120.166.255
146.158.58.0/23
Signature Algorithm: sha256WithRSAEncryption
12:00:1a:34:56:1d:bc:62:12:24:71:07:ef:87:db:0e:57:cf:
77:fa:cf:70:8b:aa:c3:49:8f:9f:d4:d6:af:2c:0c:d1:68:e3:
68:b2:12:6b:12:2f:27:f5:50:99:e0:c7:40:82:f7:e5:9f:30:
44:2d:9a:47:5e:54:dd:75:d2:6b:22:25:76:05:92:96:ef:5f:
03:4f:60:13:d6:bf:37:bd:ce:21:46:58:c7:53:90:1c:b0:c8:
82:8a:39:20:73:66:c2:5d:cf:1e:54:63:a7:21:5b:de:54:d7:
1c:bd:76:9f:68:2d:3d:88:17:42:f0:a6:35:54:b1:ea:1f:b0:
01:ab:06:49:a9:8c:0d:f1:0b:ce:c2:22:26:e5:90:b8:52:91:
5b:44:de:d3:b7:58:6b:b4:97:9d:ca:82:2f:2e:9c:20:57:cb:
ec:b3:95:18:4a:42:a8:00:4b:d0:9e:e2:7a:10:54:03:b6:18:
aa:ca:bd:e4:34:bf:3e:78:a9:0a:8b:b4:b4:0f:2f:5e:c3:74:
02:71:c8:40:a1:1e:2f:5b:37:fa:4f:22:a6:8f:7e:34:12:eb:
45:60:d3:54:ed:35:a5:3d:36:b8:a0:9c:28:c2:11:29:4e:2a:
ac:28:fd:e9:29:1d:d3:5b:ec:6f:b8:40:8e:d4:67:7f:5f:4d:
43:a6:4f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 17:11:24 2025 by rpki-client