Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/PVi5kP4_SS3O7XkWtMIouI-LoAM.roa
File: PVi5kP4_SS3O7XkWtMIouI-LoAM.roa (raw, json)
Hash identifier: s1uxDDv5Z4UFpSShbUMbp07lRNfjlBHNIK2pV1yTgAw=
Subject key identifier: 3D:58:B9:90:FE:3F:49:2D:CE:ED:79:16:B4:C2:28:B8:8F:8B:A0:03
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 2852EFC3
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/PVi5kP4_SS3O7XkWtMIouI-LoAM.roa
Signing time: Sat 01 Jan 2022 16:10:14 +0000
ROA not before: Sat 01 Jan 2022 16:10:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209954
IP address blocks: 92.38.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 676523971 (0x2852efc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:10:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d58b990fe3f492dceed7916b4c228b88f8ba003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cd:80:5f:a8:9a:eb:0d:cc:39:0b:87:1d:1a:
06:a7:d7:a9:5f:a5:75:45:f5:47:88:fb:95:7b:3a:
85:74:09:5d:4b:7d:22:d5:9a:00:b2:7e:91:56:f2:
6c:55:9d:2a:85:ea:5b:70:ea:6f:14:21:cb:3b:9e:
18:d8:c9:c3:1b:28:4a:5f:4d:03:d7:03:35:e8:cf:
ab:47:f2:ff:b4:9a:96:55:57:ce:8f:67:fd:38:c0:
3e:24:83:a3:c9:1a:eb:3c:7f:39:8b:03:35:62:61:
df:66:95:09:98:b2:51:27:12:58:b5:5b:79:0a:f3:
09:7d:bf:ec:b6:e5:f8:90:a7:c7:f4:a8:d8:0f:36:
76:40:f5:06:c8:97:62:84:a9:43:ab:bd:ea:32:c6:
be:9e:85:e2:08:1b:3d:7d:ac:88:47:6f:f8:de:6c:
19:e7:8a:49:e9:4f:62:f2:6e:40:b5:21:8b:4e:5c:
68:ca:fa:5a:b5:60:c6:24:28:ea:f6:23:73:51:7b:
1e:3a:4c:14:08:7d:69:89:cc:b4:e3:38:e9:a6:ba:
fe:89:39:c9:05:2e:79:59:13:c7:e3:e4:4b:85:c3:
f7:e2:13:db:fd:4a:9b:60:f5:50:82:3b:ea:b2:ff:
03:e3:ee:ea:0e:67:4d:5b:d2:b5:b1:fa:ea:55:11:
5e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:58:B9:90:FE:3F:49:2D:CE:ED:79:16:B4:C2:28:B8:8F:8B:A0:03
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/PVi5kP4_SS3O7XkWtMIouI-LoAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.92.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:4c:5f:f3:33:e1:66:11:d9:08:e5:8f:6a:3d:4c:ce:82:8b:
67:65:25:b6:51:a7:5e:b6:44:b1:ce:94:68:f5:c2:d3:b5:c8:
5f:5c:c8:9f:21:37:33:40:b4:c7:70:a1:bc:26:a7:47:90:b8:
a8:ca:41:58:bc:5f:73:92:a7:6c:e6:d5:87:00:d7:94:ab:fc:
3f:18:c7:b1:8c:3e:ca:26:69:41:2b:49:22:42:6e:22:32:32:
c1:a4:38:06:ca:f1:5d:b8:31:86:22:f7:ee:21:aa:8f:a3:02:
eb:52:21:c8:cc:03:cb:c2:90:c0:4d:69:e0:cd:76:e9:7c:c6:
44:82:f6:74:61:18:c3:99:d3:76:61:16:29:ec:72:c5:be:5f:
d7:43:b2:ab:5e:08:fe:a9:e8:e1:28:81:08:0a:c1:47:55:c1:
a9:2b:11:70:4f:23:95:11:56:5a:0d:38:50:c0:00:34:26:e2:
dc:89:23:99:c1:74:a6:2a:27:de:72:5c:01:1c:eb:6e:a5:76:
68:15:15:f4:90:01:1b:e1:aa:35:75:d5:8b:83:e4:64:5e:1f:
84:b8:4e:65:5c:52:32:13:08:ac:1b:49:85:18:17:b5:e1:29:
50:98:51:f7:1d:6b:22:b5:4b:18:cb:70:dd:24:f2:47:af:b9:
f8:37:b3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:37 2025 by rpki-client