Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/PkKAnjxmlhPleeIW8UDxCgl9smU.roa
File: PkKAnjxmlhPleeIW8UDxCgl9smU.roa (raw, json)
Hash identifier: BXKXHosGmpOJ5IXExF4GteXI+a/0Z5eM86Hvo3VnbIw=
Subject key identifier: 3E:42:80:9E:3C:66:96:13:E5:79:E2:16:F1:40:F1:0A:09:7D:B2:65
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 280D8FB5
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/PkKAnjxmlhPleeIW8UDxCgl9smU.roa
Signing time: Sat 01 Jan 2022 16:09:29 +0000
ROA not before: Sat 01 Jan 2022 16:09:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62108
IP address blocks: 95.47.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 671977397 (0x280d8fb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e42809e3c669613e579e216f140f10a097db265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8e:08:ed:42:b2:ac:61:9b:9a:b7:4c:47:bd:
78:21:19:11:b1:a8:4c:0b:6e:65:82:b8:30:bd:9c:
21:3f:07:51:d3:3f:50:0b:d1:8f:e8:7e:64:52:34:
cb:9a:d5:f6:3b:d8:e8:1c:03:c8:f1:5c:4c:dd:ee:
35:96:70:4e:eb:b6:f1:16:bc:79:93:68:bd:b1:23:
ae:d9:a7:cc:40:0c:d7:09:4a:a4:12:4b:94:c1:f7:
02:bc:9c:60:d0:19:19:db:df:1b:e4:aa:b4:a2:37:
25:43:f0:f8:17:85:36:70:94:2b:49:87:c2:5e:87:
bb:0b:84:d4:d9:94:8d:17:bc:5e:da:6f:a8:3e:84:
e9:f4:2c:89:bd:01:03:a7:14:30:b1:f1:b5:50:fe:
0e:5d:2e:40:5c:67:ff:d0:59:87:90:b2:0d:ab:3f:
88:89:f5:a2:15:e7:e7:d6:45:1a:ff:c9:82:e1:50:
4d:99:7d:e2:9d:bf:9f:7e:16:6a:2a:53:81:19:3c:
de:69:b1:7e:64:fc:54:34:c0:32:cf:1f:97:f3:5a:
25:80:8d:9c:4b:6e:cf:91:41:cf:a5:ff:e1:6d:9f:
0d:7c:cc:f1:f0:aa:6c:45:a0:42:89:ca:4a:4f:d0:
86:d8:8c:86:1f:ca:8f:5c:47:fb:56:4e:ad:e8:10:
ae:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:42:80:9E:3C:66:96:13:E5:79:E2:16:F1:40:F1:0A:09:7D:B2:65
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/PkKAnjxmlhPleeIW8UDxCgl9smU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.97.0/24
Signature Algorithm: sha256WithRSAEncryption
93:cb:b0:58:07:8b:7c:65:65:33:cc:98:f4:15:7d:4a:ca:13:
04:84:f6:d3:b9:46:0f:4e:81:3b:9d:31:fb:1f:c8:3b:22:01:
20:fb:f6:35:36:3e:08:e1:f5:27:73:69:12:4f:68:8c:86:07:
8c:b9:ef:c7:aa:ef:4d:b7:24:47:82:b6:f7:e4:ac:a3:00:8a:
2a:40:52:aa:78:e7:29:c4:d5:ad:e0:18:98:96:8f:f8:f6:10:
f6:8e:b2:24:84:0c:92:2b:41:53:96:4a:b4:54:78:e6:d5:b5:
69:82:98:6a:39:34:04:43:5f:8a:cc:54:06:b9:9c:b1:49:80:
8f:0a:fa:25:82:7c:b4:c8:27:99:63:f1:01:bf:11:6b:b5:19:
94:2d:80:4b:b4:fc:df:36:74:87:ba:78:29:37:e6:25:9b:86:
04:60:a6:96:13:85:02:c1:cb:c1:41:c6:e7:83:3e:53:80:7a:
2e:4b:cb:99:32:f9:9a:50:77:66:2c:38:3e:bd:02:ee:38:ce:
2c:7c:2b:52:6a:0e:7f:3c:43:d7:df:f2:51:5f:aa:4a:49:7b:
3f:52:9b:ea:03:a4:45:d5:08:aa:d0:38:08:0a:f6:9e:04:c2:
68:da:ea:ba:d7:b0:1b:94:b6:42:77:f4:53:45:ac:4f:ad:6d:
a9:fe:bb:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:11 2025 by rpki-client