Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dqPmoI2DH1Jf6-yUXXHWn18kxF4.roa
File: dqPmoI2DH1Jf6-yUXXHWn18kxF4.roa (raw, json)
Hash identifier: R8BVD4AKPBxLkg2xPxg0DYZqijo360K/1QYAQNCDIUI=
Subject key identifier: 76:A3:E6:A0:8D:83:1F:52:5F:EB:EC:94:5D:71:D6:9F:5F:24:C4:5E
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27C139C7
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dqPmoI2DH1Jf6-yUXXHWn18kxF4.roa
Signing time: Sat 01 Jan 2022 16:08:47 +0000
ROA not before: Sat 01 Jan 2022 16:08:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51503
IP address blocks: 146.120.232.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 666974663 (0x27c139c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=76a3e6a08d831f525febec945d71d69f5f24c45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:47:9a:69:be:07:4f:5f:0d:3a:5b:e9:39:97:
87:85:d2:63:10:69:3e:55:b3:a9:0c:2f:a7:39:cc:
33:9c:3e:33:ac:2f:27:38:5e:af:2a:ac:2e:79:77:
65:d8:6c:95:f8:c6:14:76:f1:c8:37:ab:41:f3:00:
e1:3d:98:db:5b:2d:cb:fc:25:e5:e6:6c:c3:6a:4f:
71:90:90:6d:91:42:1f:42:ec:3d:76:bb:7b:57:86:
65:df:4a:a4:dc:db:d2:fb:57:6a:2f:10:cc:5c:a1:
d5:fe:7e:9b:36:78:7e:b3:81:af:3b:db:e0:8e:81:
94:df:b4:6d:84:25:a6:ad:bd:b5:ba:59:c8:3e:b4:
74:f7:38:3e:4d:67:d4:59:83:ee:c8:3c:8a:99:e9:
ae:09:0d:65:51:ff:43:58:88:28:a5:fd:29:79:f1:
f8:d6:fe:44:c4:2c:58:9e:fd:5d:34:4c:e2:2e:1e:
45:8c:f4:7b:c7:b6:4e:be:09:e1:ab:5b:57:8d:54:
aa:ef:d2:e0:07:1d:9e:cb:b3:38:fa:51:26:4a:6b:
5c:d1:8d:be:a9:aa:43:93:10:95:51:e4:9a:5d:d2:
37:df:0b:3d:a8:b0:01:7a:33:f1:6c:c9:5d:65:c0:
e9:ba:cc:26:53:d6:c6:56:7b:fb:22:01:a5:97:a0:
fd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A3:E6:A0:8D:83:1F:52:5F:EB:EC:94:5D:71:D6:9F:5F:24:C4:5E
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dqPmoI2DH1Jf6-yUXXHWn18kxF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.232.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:27:7d:26:f2:4e:8d:cd:c4:5d:2f:6c:fc:6e:c3:9e:77:64:
c3:71:d4:1e:53:ee:3b:80:1d:d2:ce:4e:1e:fd:fc:0e:85:c8:
6f:f6:7d:1d:ad:7a:b1:dd:43:0a:2e:54:dc:e3:17:02:b7:ea:
3d:ba:66:fa:81:b4:ca:68:8c:94:ed:3e:26:ee:d6:13:0d:f9:
5f:e2:0c:7e:34:dd:1c:f2:0e:4e:85:4a:0e:6b:1b:be:0c:94:
66:a9:7c:08:52:7a:6a:64:e0:ed:16:d7:f4:82:7e:df:1e:50:
fc:cd:f0:aa:83:fb:4f:7d:2a:27:d3:6f:9f:5c:b2:9e:68:bc:
5e:c6:2d:e9:81:85:cf:3e:29:7b:33:70:ed:e6:9a:03:49:60:
94:3a:8a:0b:ac:a6:64:32:3f:56:b0:98:77:9f:d5:b1:7e:03:
80:69:8c:b8:16:df:84:8c:10:b8:a4:41:af:a4:e6:21:f7:45:
14:43:58:2e:da:a0:79:6c:a6:3d:1d:ed:18:55:9e:e5:cd:04:
30:3a:12:50:bc:c6:d3:9f:8d:b1:f6:62:68:88:e3:51:f6:47:
48:18:a1:59:10:37:69:57:80:2b:c6:fc:47:a1:09:41:26:d7:
fd:ce:82:c8:08:37:ed:a8:0b:d3:79:5e:de:ee:51:63:63:17:
e6:c7:c6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:51:04 2025 by rpki-client