Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/abNwcX-dUZ8rY0zMFguJK_SBhsI.roa
File: abNwcX-dUZ8rY0zMFguJK_SBhsI.roa (raw, json)
Hash identifier: HSY11FQlKBxQaUd4WpJSqAlCKRInTzwa4nDD/SbXNyQ=
Subject key identifier: 69:B3:70:71:7F:9D:51:9F:2B:63:4C:CC:16:0B:89:2B:F4:81:86:C2
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095912CDC2E00B204B782A8454B3495
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/abNwcX-dUZ8rY0zMFguJK_SBhsI.roa
Signing time: Mon 02 Jan 2023 03:45:28 +0000
ROA not before: Mon 02 Jan 2023 03:45:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201593
IP address blocks: 95.46.197.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:91:2c:dc:2e:00:b2:04:b7:82:a8:45:4b:34:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69b370717f9d519f2b634ccc160b892bf48186c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:39:ff:ce:a7:c2:7e:a2:e5:24:64:ad:06:d1:
24:03:1b:7c:39:64:15:ce:18:43:45:92:a1:5c:46:
4c:08:24:48:92:43:e8:be:ad:9e:25:a0:56:67:36:
fa:d8:51:e8:3f:32:c2:b9:ea:3b:a7:20:1f:30:cf:
dd:e7:dd:70:12:9c:10:6f:75:d6:ae:74:2d:df:01:
9d:a2:e4:f6:1e:44:ff:14:bd:e4:b5:bb:0b:66:70:
b6:2e:a9:e2:44:3f:2f:e3:12:16:0c:f3:10:78:35:
be:cc:98:de:84:a1:c7:ba:f1:8d:ff:29:d4:d5:49:
91:22:28:9e:a0:27:a6:9d:50:10:3c:d2:e2:f4:0e:
6f:46:06:35:0c:b4:56:d9:6b:c9:89:77:d1:ce:09:
20:3d:e1:91:5f:33:00:4c:84:59:ef:b6:1d:5c:5e:
f7:d3:f0:fa:aa:fd:82:cb:20:93:76:2e:31:cb:86:
29:72:fd:e5:24:53:ad:d5:fa:34:8b:7d:0a:76:01:
5e:da:b6:3c:ee:3c:51:9e:40:06:2c:1a:32:41:71:
0f:b4:45:63:ba:e6:6d:4d:93:d1:ae:c8:fb:ed:4c:
30:f7:4b:8f:b6:0c:23:91:7c:14:a8:c2:82:f3:12:
78:1c:bc:29:8d:49:0d:c9:6d:c8:34:b5:dc:eb:a9:
26:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B3:70:71:7F:9D:51:9F:2B:63:4C:CC:16:0B:89:2B:F4:81:86:C2
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/abNwcX-dUZ8rY0zMFguJK_SBhsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.197.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:a9:56:a1:4f:7a:6c:49:69:fd:2d:09:9d:aa:ba:9e:09:e0:
62:ad:86:6d:18:d9:f0:4f:1b:6b:e5:2b:9b:bb:ba:ac:77:8d:
be:8a:43:c0:38:ca:d8:16:e9:78:62:22:35:bf:59:5c:5f:88:
a0:75:79:8d:f5:f9:f2:40:85:a5:f0:e9:2a:89:4b:3b:09:2e:
7c:4b:60:7b:43:90:6a:5b:1b:3a:36:80:18:21:b5:59:24:74:
69:8e:a7:a1:e1:70:1e:be:08:1e:f9:cd:e5:01:39:dd:80:34:
4f:28:66:55:42:12:57:8b:f0:0a:4d:e2:c1:ea:c8:19:30:37:
4f:67:d4:0c:ca:e0:09:ea:ad:db:33:e6:78:e0:fd:33:62:e6:
73:a9:1a:5e:ea:d7:db:7b:aa:a7:89:ac:0c:eb:b5:4a:cf:9d:
e1:ee:87:7a:a2:aa:0c:57:5a:65:35:07:1b:56:7c:cb:d5:6f:
97:25:08:13:6e:14:b9:d8:eb:40:6b:d3:41:53:85:5a:49:fd:
f4:38:83:45:c4:48:8c:14:27:96:09:0a:79:f3:96:f3:bb:4e:
65:c8:bd:74:ef:10:56:af:41:fd:a4:2b:68:1f:a9:25:d0:4d:
83:36:20:48:76:38:c1:fe:50:0a:12:e9:1f:9d:cd:28:62:6d:
98:65:b3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:36:33 2025 by rpki-client