Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/_bgj97cTsCh1m2cjtgcjY_CX8iU.roa
File: _bgj97cTsCh1m2cjtgcjY_CX8iU.roa (raw, json)
Hash identifier: xlfJHXatahvMoUpBpXKGY6qWAR+40ZAZaQlCMNjsv1Y=
Subject key identifier: FD:B8:23:F7:B7:13:B0:28:75:9B:67:23:B6:07:23:63:F0:97:F2:25
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27851E89
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/_bgj97cTsCh1m2cjtgcjY_CX8iU.roa
Signing time: Sat 01 Jan 2022 16:08:13 +0000
ROA not before: Sat 01 Jan 2022 16:08:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43047
IP address blocks: 95.47.102.0/24 maxlen: 24
146.120.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 663035529 (0x27851e89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fdb823f7b713b028759b6723b6072363f097f225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:16:61:7a:e8:83:e6:a5:56:5c:0f:da:15:cf:
b7:32:3b:8e:4c:53:6f:0c:eb:20:41:8a:ae:0e:8c:
4e:4c:13:dd:02:33:e6:13:13:0f:cb:3f:9e:4c:b9:
ae:71:a0:c4:f9:e5:0c:d2:16:27:27:d5:a3:c0:73:
7b:04:7d:64:86:95:68:b6:15:95:70:dc:a5:c4:36:
2d:82:28:cd:cf:62:14:af:36:b1:08:4a:e9:c3:72:
f9:b9:5c:00:16:61:7c:d2:66:d3:02:9b:8d:6f:24:
70:5d:7e:00:4f:77:4f:d5:48:7b:4c:1a:2c:99:97:
7f:d8:a1:02:80:f7:52:6e:48:d7:71:e3:98:f7:14:
94:f4:b5:2c:ec:d4:d3:0e:a9:30:5a:1d:f5:d8:d2:
e2:f7:dc:db:bc:9f:38:86:ac:f5:bd:53:20:9b:f2:
87:6b:8a:24:9d:9f:39:78:68:f4:77:87:fc:d9:26:
0f:39:ca:d2:f7:c4:1e:bb:fd:a6:ba:56:c1:23:d0:
35:7b:87:5e:21:0e:53:22:bd:3b:f9:8b:94:b6:fb:
c8:4c:f6:c9:c7:db:c4:a9:bc:d8:61:cc:8d:b8:c2:
87:56:93:28:d2:5b:44:9e:a2:06:e0:f3:93:d1:32:
32:46:6c:2b:cf:dc:9b:a3:fa:ac:5c:5f:20:87:29:
02:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B8:23:F7:B7:13:B0:28:75:9B:67:23:B6:07:23:63:F0:97:F2:25
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/_bgj97cTsCh1m2cjtgcjY_CX8iU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.102.0/24
146.120.225.0/24
Signature Algorithm: sha256WithRSAEncryption
15:15:32:13:2f:0e:a1:4e:60:b0:85:08:b2:fb:14:09:be:27:
c4:eb:a3:53:9a:56:68:43:a6:cc:93:48:dc:6e:f2:88:8c:99:
e8:b1:e9:6f:49:9f:08:8b:10:8b:bb:a8:b5:16:02:25:32:a7:
3f:ed:ae:46:b0:b0:27:f2:38:51:af:0a:e1:df:c4:ff:70:5d:
e0:67:94:b8:df:80:dd:f9:11:d8:37:11:f1:bd:f2:66:a5:31:
53:3f:34:4c:bd:71:03:46:06:d7:22:93:ef:10:3b:7f:d4:93:
9b:ff:41:24:16:de:ce:44:e3:21:6b:13:df:d3:36:35:1c:f9:
db:21:16:2a:2e:4d:30:ef:45:20:e2:ef:12:d4:83:22:fe:52:
34:88:43:97:04:0e:e8:02:92:50:68:7f:d8:72:58:64:fc:9e:
c2:37:71:af:ee:d3:2a:50:bb:16:3c:db:4e:b9:c7:34:8f:58:
93:06:b7:8c:19:7d:49:33:54:04:38:82:3e:ff:81:6f:04:c4:
46:72:55:f3:eb:ae:11:5c:89:9b:e4:be:29:de:9b:35:6f:63:
64:1a:11:bf:77:7d:d8:3a:00:61:0f:f2:a4:3e:8d:4e:51:93:
35:39:6b:ba:59:99:4c:10:77:4d:6e:ce:99:44:2e:1f:3a:7c:
c0:68:00:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:38 2025 by rpki-client