Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/VV9HLqkqIejlkTaOZplKzzwY4l4.roa
File: VV9HLqkqIejlkTaOZplKzzwY4l4.roa (raw, json)
Hash identifier: 5sR2UNRPJuBcJIEjdzfIMhZmsAFEECM+YntP7JR6iaM=
Subject key identifier: 55:5F:47:2E:A9:2A:21:E8:E5:91:36:8E:66:99:4A:CF:3C:18:E2:5E
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27DD63CA
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/VV9HLqkqIejlkTaOZplKzzwY4l4.roa
Signing time: Sat 01 Jan 2022 16:09:00 +0000
ROA not before: Sat 01 Jan 2022 16:09:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59392
IP address blocks: 95.47.204.0/22 maxlen: 22
31.148.52.0/22 maxlen: 22
31.148.56.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 668820426 (0x27dd63ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=555f472ea92a21e8e591368e66994acf3c18e25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:7c:e3:b6:5a:ec:2c:69:6a:72:7e:7b:57:bc:
41:71:1c:38:a7:d2:84:70:e7:db:ce:7f:6f:50:15:
00:9b:71:dd:36:36:e8:21:06:4c:71:c6:60:eb:19:
08:b6:c0:d3:e9:73:47:4e:a7:01:85:0e:b4:f3:4b:
f1:3f:9d:8e:14:e6:50:f6:8c:5b:e4:19:7c:38:f1:
a2:a8:3d:d1:7f:f5:f4:ad:0f:02:f7:cc:01:d5:34:
73:63:be:25:fc:78:b6:7b:b9:13:41:d3:b7:33:36:
83:d0:e5:d3:24:3a:6f:15:17:ed:77:e0:ba:d1:79:
d0:e1:80:2f:28:02:d8:df:02:cb:87:61:5c:90:82:
cc:50:b4:aa:94:be:4a:51:e3:27:06:e6:48:0f:1a:
3d:97:82:e7:a8:19:7b:d3:bd:ec:48:6f:7f:db:d2:
27:9d:1b:5b:cf:20:11:66:6b:19:d2:01:38:64:28:
cf:34:3c:57:f9:fe:e0:dd:e4:92:6d:1b:14:86:e7:
60:ac:21:ca:e4:a8:ff:ab:2e:54:a4:9d:b1:37:cd:
31:43:b8:dc:77:85:8e:a9:a4:db:9b:0e:ae:7c:be:
39:7a:a3:66:61:c2:ea:96:3e:c9:8c:bf:cc:d4:53:
e6:b2:d0:76:09:40:2b:30:81:ce:4a:de:2d:8d:c6:
c9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5F:47:2E:A9:2A:21:E8:E5:91:36:8E:66:99:4A:CF:3C:18:E2:5E
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/VV9HLqkqIejlkTaOZplKzzwY4l4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.52.0-31.148.63.255
95.47.204.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:93:8e:4c:f4:3b:86:61:92:9d:03:d2:28:95:a0:b4:4f:cc:
f7:0d:37:aa:67:67:bf:96:cd:bb:d2:98:ce:9a:a2:ba:34:01:
13:b6:6b:17:b2:4e:cc:39:3b:22:0a:ff:e6:c4:36:40:90:71:
3f:a3:2d:d9:9a:0c:c6:e8:ad:0c:cc:82:3d:61:fb:eb:be:98:
89:dc:44:46:c0:d6:f1:78:95:a4:26:f1:f0:8b:db:7e:f3:89:
6c:ff:83:4b:eb:8b:d5:0c:d9:3d:84:70:ad:23:93:83:69:a3:
37:0a:aa:6d:4f:f0:dd:a8:fa:13:a5:ec:db:f3:97:27:69:4c:
c3:76:2d:45:bc:7c:25:74:6e:3c:da:fc:dd:c7:30:83:62:de:
e4:b7:88:78:b5:ac:b4:e0:0d:bb:ff:ec:33:5e:29:66:c2:28:
b2:d6:4e:f3:52:55:a4:fb:05:d3:ef:87:47:ed:d5:b9:25:a2:
c7:56:4d:31:cd:7b:46:f1:0c:0c:8b:7e:46:ba:47:22:31:04:
04:43:f9:29:f9:97:e0:21:45:c0:b6:dd:52:54:6f:55:cd:bc:
ae:33:fa:5a:77:b2:3b:83:a9:a1:fd:23:54:66:ff:93:42:65:
07:a2:5b:33:5b:4b:4b:07:56:66:5a:35:c2:77:98:fc:10:94:
31:90:46:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:51:11 2025 by rpki-client