Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/_40XBu-NEwJCKsQ8WT3vDo0mlM4.roa
File: _40XBu-NEwJCKsQ8WT3vDo0mlM4.roa (raw, json)
Hash identifier: 04olb6N3QkJ45nuMCYk5fDtTT9UJI8TsnqjBDMW8ObM=
Subject key identifier: FF:8D:17:06:EF:8D:13:02:42:2A:C4:3C:59:3D:EF:0E:8D:26:94:CE
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 277AA711
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/_40XBu-NEwJCKsQ8WT3vDo0mlM4.roa
Signing time: Sat 01 Jan 2022 16:08:08 +0000
ROA not before: Sat 01 Jan 2022 16:08:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41917
IP address blocks: 146.120.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 662349585 (0x277aa711)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff8d1706ef8d1302422ac43c593def0e8d2694ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:78:2d:e9:e8:97:ce:cb:51:4f:c7:b7:59:64:
df:40:dd:52:a5:3b:4e:cc:20:40:c6:60:33:af:b0:
e8:33:f1:b1:80:fd:90:ee:4b:c8:f5:17:38:0d:27:
06:9e:77:12:85:20:8e:c2:f2:e5:d7:7b:38:f1:7f:
10:01:b2:91:25:cd:dd:cb:96:ee:a2:26:4f:47:b2:
11:94:4e:aa:49:c1:54:07:54:86:df:f5:a4:b3:db:
3c:f0:32:6e:e8:81:46:de:da:89:56:7e:07:63:0f:
d9:c9:db:fa:2e:f3:3d:4b:f3:1c:76:f0:ef:fe:d9:
d5:2b:3c:4f:3e:f5:57:42:13:1a:f2:b7:bb:48:91:
63:eb:7b:1a:79:3c:8f:e1:aa:44:3f:c4:35:0a:c2:
ca:b0:76:24:ae:70:83:fa:77:c2:e8:66:96:01:61:
bd:ad:c5:03:1f:e7:3d:e6:0c:08:28:98:83:b7:97:
95:33:40:a2:39:0c:f1:fc:65:46:5d:c9:32:04:7b:
f7:d1:31:74:51:26:b4:dd:a2:f3:1b:ad:2e:04:76:
d3:48:d2:a0:11:ed:b2:7f:2c:f2:38:c9:4d:fa:79:
7a:cb:af:88:eb:6f:df:45:f9:36:89:8f:f2:34:d0:
b8:95:cc:57:18:4a:79:77:f6:2a:2c:6c:05:ef:46:
7c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8D:17:06:EF:8D:13:02:42:2A:C4:3C:59:3D:EF:0E:8D:26:94:CE
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/_40XBu-NEwJCKsQ8WT3vDo0mlM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.101.0/24
Signature Algorithm: sha256WithRSAEncryption
62:d5:fa:e3:2b:08:9f:e5:3f:8a:ef:d1:b4:48:0a:8b:10:73:
bf:85:d9:9f:46:b5:a5:96:4a:8e:a3:2a:09:4f:83:f6:45:03:
63:83:3d:44:25:4b:85:ca:4b:fd:e9:e1:26:6e:fe:73:e2:3f:
a7:85:39:91:75:91:8a:5d:53:7b:3b:ec:ee:d7:5a:a7:eb:ed:
dd:a9:05:db:ac:3f:d3:79:c8:c8:0e:c3:bc:13:5e:87:e2:c1:
4c:41:38:6e:88:ee:0d:80:30:64:c8:02:2b:98:a2:2c:9b:2a:
49:b4:41:2e:b5:82:19:bb:9c:1f:a7:4b:93:6d:70:44:df:e7:
97:79:a9:68:30:4f:73:0d:12:a9:9d:7a:94:84:19:c1:2b:6e:
12:fa:bc:48:43:54:63:8e:40:07:2b:19:89:05:0c:bb:d5:71:
1b:2d:66:50:aa:aa:bf:e8:ee:f3:e1:29:02:43:1a:3a:a3:ef:
51:da:1f:17:94:0c:3f:89:bf:9e:8b:a4:24:19:69:e0:bd:3c:
f2:df:e2:29:b1:47:19:95:1f:74:48:f7:12:b6:18:bb:94:9d:
ba:11:ca:2d:7d:cf:b3:3a:41:50:da:da:54:7c:24:d3:76:ff:
02:09:a5:25:2e:92:f4:b9:2e:f7:b7:9c:48:5d:92:3b:0b:bc:
f1:25:3f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:19 2025 by rpki-client