Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/X-GwVc6mxVGjqQCrF9TpX0tVpaQ.roa
File: X-GwVc6mxVGjqQCrF9TpX0tVpaQ.roa (raw, json)
Hash identifier: Eej57XPFu7ZWlzjUNV5s+8wtG7Lb4XYSc5hEdrqFT0s=
Subject key identifier: 5F:E1:B0:55:CE:A6:C5:51:A3:A9:00:AB:17:D4:E9:5F:4B:55:A5:A4
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27C2C2AE
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/X-GwVc6mxVGjqQCrF9TpX0tVpaQ.roa
Signing time: Sat 01 Jan 2022 16:08:48 +0000
ROA not before: Sat 01 Jan 2022 16:08:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51803
IP address blocks: 95.46.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 667075246 (0x27c2c2ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5fe1b055cea6c551a3a900ab17d4e95f4b55a5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:23:57:12:55:3d:fc:bb:51:fc:7d:f8:a7:af:
a7:10:98:48:84:b3:82:96:01:48:bf:50:dc:b9:95:
54:07:a9:7e:32:76:3c:24:e4:66:ea:fb:6f:b5:1b:
d3:36:a2:b4:09:c8:74:77:78:90:79:b1:dd:0f:89:
07:a0:d6:d8:d8:28:80:f1:e6:7d:31:7d:36:0c:63:
10:06:48:4b:8c:e0:01:7c:d7:70:c9:09:f6:7e:ed:
55:33:de:0d:5f:83:59:a8:48:6d:d6:fa:45:ac:ad:
30:8e:68:98:49:5f:a7:3f:d3:a5:6f:93:cc:5c:71:
fe:db:bd:e9:49:f5:ed:d7:24:8c:5d:b0:a3:fd:ae:
62:ea:81:8f:6d:13:57:b5:3a:04:e6:a0:c8:04:f1:
1a:9b:cb:4f:5f:1c:6f:cb:8a:f0:02:b2:d2:4e:32:
13:df:1d:02:96:31:b0:9c:ae:ac:ec:90:91:5e:f0:
b9:a6:ae:d7:3e:f5:ca:43:c1:43:8a:60:2a:ab:62:
98:a5:de:b0:68:33:41:16:73:87:39:fb:38:9c:87:
37:54:a1:a2:7f:10:32:54:7e:19:56:d2:88:97:f4:
f0:15:18:07:e2:e7:a0:5e:49:32:c3:e9:9f:5f:66:
d5:a4:f7:3d:21:fb:7c:51:4c:26:03:c8:f6:3f:c0:
8b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E1:B0:55:CE:A6:C5:51:A3:A9:00:AB:17:D4:E9:5F:4B:55:A5:A4
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/X-GwVc6mxVGjqQCrF9TpX0tVpaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.32.0/24
Signature Algorithm: sha256WithRSAEncryption
29:e0:10:0d:40:ec:86:86:a1:7f:ac:b8:81:e6:b2:22:14:c5:
6c:a0:31:31:91:a7:2b:09:c5:a2:9c:a2:df:85:f7:63:d0:0e:
dc:50:6c:a1:c0:fb:1f:99:7e:5a:3f:81:8e:a1:ed:ac:3d:82:
f1:f2:f2:fc:d6:4d:f5:fe:54:14:71:9d:aa:5c:39:02:2b:95:
8a:fd:36:52:c0:78:05:4f:81:bc:c3:44:c5:cd:64:52:46:74:
ae:fb:0d:83:0f:2e:91:2c:2e:ad:f0:3f:52:2d:2c:d6:57:aa:
60:6b:0c:c3:84:f1:91:14:ef:bc:a3:95:f7:34:c3:7e:f0:87:
15:4a:1f:f3:78:61:2a:b4:7f:fe:6c:72:75:e1:18:d7:d9:c5:
46:6e:31:43:41:e5:75:68:0c:fd:75:99:65:b9:ff:1e:b2:76:
63:cb:25:76:08:44:a6:60:d0:31:73:4f:fa:d2:19:04:49:11:
eb:7d:b1:7d:fb:f5:5c:25:53:a1:73:c0:dd:4d:34:66:20:b1:
f2:2a:3f:8b:0a:d7:37:65:40:7a:2f:21:36:55:ad:69:d6:0a:
bc:fb:7e:1c:95:e4:08:6a:57:ca:9d:ff:17:2b:91:a4:44:b2:
00:fc:e0:96:f6:7c:f6:32:75:da:cb:20:9a:52:f1:eb:23:24:
39:da:67:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:18:00 2025 by rpki-client