Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Uxrg84h8IVB72ZCd1hXyGHi4qBE.roa
File: Uxrg84h8IVB72ZCd1hXyGHi4qBE.roa (raw, json)
Hash identifier: BC9RmN6pFYIW2SfYyuogqylnqHj7+oNHNvp8D9wa580=
Subject key identifier: 53:1A:E0:F3:88:7C:21:50:7B:D9:90:9D:D6:15:F2:18:78:B8:A8:11
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 2833285F
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Uxrg84h8IVB72ZCd1hXyGHi4qBE.roa
Signing time: Sat 01 Jan 2022 16:09:50 +0000
ROA not before: Sat 01 Jan 2022 16:09:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204674
IP address blocks: 95.47.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 674441311 (0x2833285f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=531ae0f3887c21507bd9909dd615f21878b8a811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:00:c3:2c:b2:c4:1a:89:43:79:48:7c:80:2f:
09:ad:a2:02:c7:cd:e2:80:fc:16:b2:8a:43:0b:91:
2c:dd:a6:d6:57:31:14:09:ec:98:ce:13:85:31:ab:
c8:83:5f:87:0f:bf:73:e2:8a:16:fa:95:0a:19:33:
9e:ad:ae:f2:a1:b2:77:0d:a2:7d:64:22:10:fe:bf:
2b:5f:37:b7:d7:81:04:2d:28:53:0c:f7:15:02:fd:
da:77:b9:0f:6f:91:be:08:7f:3b:03:45:0c:81:28:
fa:aa:9b:6e:92:68:1c:5b:4d:68:8e:a6:17:bc:ec:
78:c6:80:a0:e9:29:e8:c3:50:97:43:40:f0:b8:fd:
f1:f5:59:fb:3a:4e:9c:7e:84:18:62:98:ef:2b:f6:
1c:6f:cd:f2:c0:17:0e:a6:54:9f:45:b2:71:aa:06:
6b:60:cb:66:ff:e0:33:5b:6d:80:d9:e1:30:fd:63:
18:0a:36:b9:e0:b2:cd:ee:86:6a:40:50:51:b1:57:
92:cb:04:52:9c:b5:5a:59:00:54:d2:97:1e:2b:94:
f0:f8:4f:6c:3e:8a:34:ce:38:d9:5b:86:c3:e6:36:
30:f7:1d:34:b3:7e:05:a6:55:7b:bc:f5:6e:db:c2:
a6:73:6b:3c:4c:ea:71:a8:a4:5b:2b:06:f1:4d:98:
4e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1A:E0:F3:88:7C:21:50:7B:D9:90:9D:D6:15:F2:18:78:B8:A8:11
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Uxrg84h8IVB72ZCd1hXyGHi4qBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.154.0/24
Signature Algorithm: sha256WithRSAEncryption
68:19:60:8a:a4:e5:96:61:7e:aa:d0:f9:79:b7:e3:d8:f1:d7:
6f:77:50:3c:57:fc:27:ff:f3:69:13:08:04:47:bc:8a:8e:c5:
b9:c8:72:53:a8:8d:e0:19:42:e3:c8:db:32:e0:27:2e:47:06:
68:01:8d:14:92:46:83:0f:bd:70:61:cc:3e:a8:18:90:ba:dd:
ce:de:7b:ec:4b:62:93:f5:3e:ff:86:8b:8f:88:2f:e1:1e:3c:
4a:da:87:fd:25:cb:5f:08:1f:d3:d7:38:53:07:72:40:6e:0a:
fb:1c:0a:6e:0e:b3:77:1e:a8:98:85:d9:d1:e5:c5:72:62:d0:
ed:50:db:05:cb:f0:95:86:e3:74:6d:86:c1:10:bb:ad:d2:ad:
46:9b:54:f0:a1:5c:be:5a:ed:7e:8c:67:67:42:66:ca:41:0b:
ac:a1:80:ca:9b:66:c3:61:42:3c:c2:f9:06:db:2f:9e:64:c9:
c9:ec:16:a5:13:5f:4b:89:08:76:53:a4:c4:24:83:17:23:1a:
2b:06:4f:a8:77:af:9e:58:5e:b4:8d:d8:d7:1e:5d:0c:4b:e3:
75:ae:6b:8f:33:a0:68:c7:91:f9:99:29:16:8f:22:df:63:2a:
9f:10:de:bd:66:35:88:e7:e6:98:27:d7:ee:98:dc:a1:eb:d4:
50:41:a9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:10:34 2025 by rpki-client