Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fLKlcYQebm5ZP10pD5Jn1Wlgyok.roa
File: fLKlcYQebm5ZP10pD5Jn1Wlgyok.roa (raw, json)
Hash identifier: J6qnNhZEDqF8WmTL1HyK17K/bTMPJOlca82W9Qk0kUw=
Subject key identifier: 7C:B2:A5:71:84:1E:6E:6E:59:3F:5D:29:0F:92:67:D5:69:60:CA:89
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 292335E4
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fLKlcYQebm5ZP10pD5Jn1Wlgyok.roa
Signing time: Fri 11 Mar 2022 11:23:29 +0000
ROA not before: Fri 11 Mar 2022 11:23:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208087
IP address blocks: 146.120.246.0/23 maxlen: 24
146.120.158.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 690173412 (0x292335e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Mar 11 11:23:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7cb2a571841e6e6e593f5d290f9267d56960ca89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:01:0c:e9:52:65:87:7b:c2:cb:e0:ba:d5:0a:
cb:7d:83:62:7d:56:95:e1:47:55:c3:77:2f:87:79:
83:5d:ac:d2:b8:ec:0c:cb:52:de:0b:0e:a5:e7:86:
06:23:73:98:45:a0:c0:0a:6c:28:b6:99:16:40:57:
02:b4:62:ba:99:c0:03:44:1f:24:ad:90:f4:1d:49:
22:9e:d0:0f:ce:90:ac:f4:bb:99:e3:f8:01:57:16:
4b:d5:ce:bb:4b:b0:50:18:43:da:46:50:91:d2:20:
9d:3b:be:0d:01:5d:98:f2:5f:83:a3:a9:9c:af:c0:
ca:d4:b0:9e:cd:dd:7f:af:fc:22:fe:83:7e:a5:29:
b9:9c:00:b4:5d:11:e1:2d:ae:f4:bd:15:5b:e8:9e:
85:f1:a5:5b:4d:3e:4d:b2:7b:a0:45:7d:e4:1b:30:
35:8c:88:64:ca:76:e1:96:ae:e5:5f:c1:c9:d0:2d:
01:71:65:ea:3a:73:7a:df:85:59:bd:61:35:34:77:
cb:fc:ab:28:e7:3a:f5:35:83:2e:38:41:31:8f:4c:
4e:50:ce:16:9f:61:a7:27:6d:22:28:91:4e:1c:3d:
0e:cd:dc:b8:ca:2c:4e:8a:29:fe:a1:d9:f9:09:a2:
ef:ed:3d:12:ea:e2:62:20:6b:20:02:86:1b:61:47:
7c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B2:A5:71:84:1E:6E:6E:59:3F:5D:29:0F:92:67:D5:69:60:CA:89
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fLKlcYQebm5ZP10pD5Jn1Wlgyok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.158.0/23
146.120.246.0/23
Signature Algorithm: sha256WithRSAEncryption
54:47:fc:fd:3b:71:d6:61:cb:e0:58:a4:75:3c:b0:c3:33:39:
68:49:92:f9:c2:cc:4c:09:9b:94:c4:61:e1:f2:dc:9e:97:75:
ef:48:f7:60:08:f6:d4:3c:d2:b9:72:b7:e3:ae:eb:35:f9:86:
52:9a:79:d4:ba:ea:6e:5f:d9:10:99:99:b8:fb:66:de:2d:39:
c0:e2:45:71:1b:35:39:bf:d1:41:1a:1e:d2:f9:2a:5e:df:54:
fb:a7:4a:2b:bd:ea:e2:80:e4:a3:a3:7e:b6:39:af:85:e2:54:
31:66:70:29:92:05:0b:11:16:9d:65:d8:12:29:c6:5b:89:d1:
af:ff:87:45:25:c0:01:b8:ac:a2:1e:38:d0:8d:dc:12:23:41:
99:d5:60:af:42:13:b3:5a:0f:6f:b9:c7:d9:f3:84:e0:e9:c0:
51:17:27:55:65:9b:40:02:59:8e:4a:bc:75:9e:31:39:b3:6c:
2a:fe:41:d7:03:22:b3:9d:62:f9:65:ad:8c:7c:30:8e:26:72:
c6:48:c2:d4:92:71:27:e5:1e:ef:c5:47:f5:90:2c:3a:31:1b:
71:53:be:2d:72:f8:f7:b9:a0:99:6e:ab:f7:56:95:95:1b:08:
98:b8:36:b1:3a:3f:0e:7d:e5:8b:33:a2:22:72:37:02:9c:e4:
c7:4f:81:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:53:28 2025 by rpki-client