Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Up_WoZ5Z7vvT0ANHezDNpgSIOCM.roa
File: Up_WoZ5Z7vvT0ANHezDNpgSIOCM.roa (raw, json)
Hash identifier: R76E307mRvLWwz96B9MMpfEXPQf8ZprbYcJqv33N78c=
Subject key identifier: 52:9F:D6:A1:9E:59:EE:FB:D3:D0:03:47:7B:30:CD:A6:04:88:38:23
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570959ABECAC798F0C6092D19E4A5C24A
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Up_WoZ5Z7vvT0ANHezDNpgSIOCM.roa
Signing time: Mon 02 Jan 2023 03:45:30 +0000
ROA not before: Mon 02 Jan 2023 03:45:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204671
IP address blocks: 95.47.236.0/24 maxlen: 24
95.47.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:9a:be:ca:c7:98:f0:c6:09:2d:19:e4:a5:c2:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=529fd6a19e59eefbd3d003477b30cda604883823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b1:bd:4c:ea:20:af:df:28:cf:24:ec:c8:80:
24:5c:3d:a7:1e:71:d6:34:87:03:6c:bf:3a:1b:f2:
05:5b:75:09:00:3f:cf:e4:4c:b6:30:5f:a5:b8:9c:
8c:a0:3b:29:6e:17:b5:1f:93:0c:0a:96:e9:9b:65:
5d:a8:5e:05:ca:7a:39:d7:f6:7e:12:0e:9e:2a:86:
69:89:b8:08:9b:87:e4:cc:a3:06:40:27:fd:5d:5d:
e2:ff:eb:37:fa:5c:3c:b5:33:e1:60:d9:e5:b1:b6:
83:89:b2:31:37:b1:28:c8:c9:8d:ab:82:9b:47:e6:
ac:1d:20:42:92:8e:3c:b9:86:2d:08:d9:f4:08:c4:
ad:de:74:ad:1c:88:b1:3c:7a:e9:08:26:1d:94:3d:
43:cd:2d:e3:5e:b0:9a:2e:89:d7:5e:f1:6d:b7:2b:
64:8b:72:ab:5b:98:83:79:f5:24:0d:a1:77:77:ef:
6d:57:dc:f1:07:10:2e:bd:ad:6e:47:b2:77:9d:14:
a6:10:2a:c8:b7:fd:0d:52:7c:9a:14:9f:33:fd:58:
78:65:53:01:2a:e8:f7:73:e5:31:cd:38:66:e9:a0:
15:b2:1e:05:89:8c:83:16:da:ac:84:d8:dc:70:13:
48:f5:34:ef:f1:cc:83:5c:3e:48:49:18:39:e9:43:
27:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9F:D6:A1:9E:59:EE:FB:D3:D0:03:47:7B:30:CD:A6:04:88:38:23
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Up_WoZ5Z7vvT0ANHezDNpgSIOCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.173.0/24
95.47.236.0/24
Signature Algorithm: sha256WithRSAEncryption
61:c7:b6:73:3e:82:6b:54:d3:71:21:ca:88:5c:ec:47:6e:f9:
53:5c:16:71:d9:57:4e:2e:51:3c:ef:ce:fe:bf:e8:85:c8:d4:
be:b7:f5:9d:59:da:79:85:ae:99:cb:65:74:ff:9f:9d:d1:55:
01:80:15:1e:2b:13:1f:8e:f4:f1:e1:57:8f:cc:d3:b5:96:6b:
04:d0:74:4b:50:77:0c:ad:ba:7f:8b:4d:b9:e6:08:e9:c9:cc:
77:d3:06:32:bf:be:74:9a:0c:7f:73:16:72:8f:74:db:10:e2:
53:91:2e:f8:35:c7:9f:da:0b:04:5d:b6:77:9a:42:d4:dd:97:
55:07:96:13:73:5e:26:e7:82:f3:c8:25:f6:89:bc:4d:6b:87:
98:83:e6:28:cd:68:2d:9b:8e:bf:b3:7d:98:50:0b:6e:2a:92:
e7:f0:04:df:f9:76:4b:a8:69:ff:1f:bb:51:1d:ea:7e:ca:d4:
5b:8c:df:5c:0a:03:8b:7f:39:22:47:5f:2b:99:7d:c8:02:b0:
37:55:bf:ba:8a:33:99:8c:8f:20:76:81:53:09:a3:35:2d:1f:
3c:a5:79:b2:2e:60:70:c3:e7:a6:50:2b:26:bb:08:78:33:52:
86:59:dd:ac:70:8a:bb:73:e5:23:48:0e:79:8f:9c:c3:d6:cd:
98:9f:ed:7c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVwlZq+yseY8MYJLRnkpcJKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjMwMTAyMDM0NTMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjlmZDZhMTllNTllZWZiZDNkMDAzNDc3YjMwY2RhNjA0ODgzODIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLG9TOogr98ozyTsyIAkXD2nHnHW
NIcDbL86G/IFW3UJAD/P5Ey2MF+luJyMoDspbhe1H5MMCpbpm2VdqF4Fyno51/Z+
Eg6eKoZpibgIm4fkzKMGQCf9XV3i/+s3+lw8tTPhYNnlsbaDibIxN7EoyMmNq4Kb
R+asHSBCko48uYYtCNn0CMSt3nStHIixPHrpCCYdlD1DzS3jXrCaLonXXvFttytk
i3KrW5iDefUkDaF3d+9tV9zxBxAuva1uR7J3nRSmECrIt/0NUnyaFJ8z/Vh4ZVMB
Kuj3c+UxzThm6aAVsh4FiYyDFtqshNjccBNI9TTv8cyDXD5ISRg56UMnGwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFKf1qGeWe7709ADR3swzaYEiDgjMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvVXBfV29aNVo3dnZUMEFOSGV6RE5wZ1NJT0NNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXy+tAwQA
Xy/sMA0GCSqGSIb3DQEBCwUAA4IBAQBhx7ZzPoJrVNNxIcqIXOxHbvlTXBZx2VdO
LlE8787+v+iFyNS+t/WdWdp5ha6Zy2V0/5+d0VUBgBUeKxMfjvTx4VePzNO1lmsE
0HRLUHcMrbp/i0255gjpycx30wYyv750mgx/cxZyj3TbEOJTkS74Ncef2gsEXbZ3
mkLU3ZdVB5YTc14m54LzyCX2ibxNa4eYg+YozWgtm46/s32YUAtuKpLn8ATf+XZL
qGn/H7tRHep+ytRbjN9cCgOLfzkiR18rmX3IArA3Vb+6ijOZjI8gdoFTCaM1LR88
pXmyLmBww+emUCsmuwh4M1KGWd2scIq7c+UjSA55j5zD1s2Yn+18
-----END CERTIFICATE-----
Generated at Sat Apr 12 15:14:11 2025 by rpki-client