Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/OU6HgI0gKHllhvtcE5sAGW81xLk.roa
File: OU6HgI0gKHllhvtcE5sAGW81xLk.roa (raw, json)
Hash identifier: vOYPULAy1hPgluFAl/EbxS4WWP/4p9brJ86oZ9+pIdA=
Subject key identifier: 39:4E:87:80:8D:20:28:79:65:86:FB:5C:13:9B:00:19:6F:35:C4:B9
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0184A9BEE891495B35AB6A4EECA10EB0873D
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/OU6HgI0gKHllhvtcE5sAGW81xLk.roa
Signing time: Thu 24 Nov 2022 13:06:11 +0000
ROA not before: Thu 24 Nov 2022 13:06:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42581
IP address blocks: 146.158.74.0/23 maxlen: 24
146.120.212.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a9:be:e8:91:49:5b:35:ab:6a:4e:ec:a1:0e:b0:87:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Nov 24 13:06:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=394e87808d2028796586fb5c139b00196f35c4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:87:41:57:b7:e9:b4:7f:ff:c9:41:ad:14:d7:
29:10:d7:ad:3c:ce:a7:2f:63:d7:e1:4c:2a:74:91:
96:f8:52:39:d7:73:cb:c1:62:80:08:7d:1c:b8:4a:
b0:0d:f8:a2:ed:ff:8d:b0:9a:01:07:9a:44:17:93:
47:2b:41:24:72:4c:5d:25:40:92:e1:bb:cc:31:48:
e8:64:c9:e9:4a:65:14:75:cd:3d:4d:f7:72:5d:39:
db:d4:68:ae:48:49:ed:3e:7b:c0:24:56:91:ff:47:
6e:6d:6f:55:73:d1:fa:26:b7:82:3b:1f:9e:73:d6:
09:ce:c9:3d:68:63:b0:93:72:14:01:3d:c8:57:96:
9d:6c:7f:61:15:4a:9d:76:50:56:d5:68:67:8a:65:
8e:e9:d1:d6:91:49:6c:7a:36:e9:cc:f7:3e:f3:2f:
da:c2:a1:ae:64:e0:60:ae:f5:4e:97:14:d0:35:ca:
c7:63:50:0d:40:3e:d0:51:cb:1d:a2:ff:81:8a:fd:
c8:8a:63:fb:65:5b:ea:dc:c8:45:86:22:95:c4:48:
d8:d2:d0:9c:1b:e5:7d:66:5d:7f:92:91:06:f6:cb:
61:a9:d7:11:3b:57:09:0a:0f:dd:f8:38:04:b2:b4:
d6:33:64:0a:e5:77:57:7d:ec:b2:9a:81:b4:03:55:
2a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4E:87:80:8D:20:28:79:65:86:FB:5C:13:9B:00:19:6F:35:C4:B9
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/OU6HgI0gKHllhvtcE5sAGW81xLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.212.0/23
146.158.74.0/23
Signature Algorithm: sha256WithRSAEncryption
29:2b:8b:e7:9a:b4:78:78:ce:0a:ad:a3:aa:62:ad:e8:6e:98:
9f:d0:cd:47:ed:fc:47:40:5a:2c:3f:d2:ca:23:0d:fb:cd:c8:
5a:96:f0:7f:8c:9b:fc:8b:ca:bb:44:03:a0:77:ef:90:e4:b6:
68:f9:21:e2:d0:d9:ae:67:dd:c2:4b:ce:f9:ec:0f:04:5e:00:
86:d0:9f:5b:a0:38:76:b4:22:e1:23:49:f4:8c:35:d9:db:32:
f3:74:c4:12:2d:15:2a:77:1a:e9:73:1d:81:a7:18:bf:68:87:
17:43:fa:f1:c9:92:d5:40:b2:c4:65:b7:0d:b8:0d:d2:8b:fa:
a8:d9:18:63:91:48:6b:ac:80:eb:e4:e7:d5:b4:6f:c0:03:95:
48:ee:55:8b:61:c2:46:0c:a0:5d:01:61:ea:77:2e:36:bb:2a:
2b:04:93:1f:9c:0f:1c:41:10:81:f6:04:92:5f:88:55:10:21:
91:2e:c0:24:6e:8c:cd:40:cb:43:ba:6b:1a:2a:9b:1f:07:05:
c9:89:04:38:12:fc:8e:1a:38:c5:4b:23:59:f9:4b:5e:8e:6b:
ca:5a:bd:80:d1:e0:50:12:72:69:ae:53:1e:39:07:a4:54:4c:
96:ba:58:1f:63:b1:ec:70:fb:eb:67:81:3f:91:52:38:68:9f:
b7:f2:d8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:17 2025 by rpki-client