Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fMUn8M-Uz8QoTJ4lXcml4pUKYio.roa
File: fMUn8M-Uz8QoTJ4lXcml4pUKYio.roa (raw, json)
Hash identifier: BqqDYD16Tr1IrMF6rIqG3ZrMHNnfOuEt3MP+5Saa0C4=
Subject key identifier: 7C:C5:27:F0:CF:94:CF:C4:28:4C:9E:25:5D:C9:A5:E2:95:0A:62:2A
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 28178B62
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fMUn8M-Uz8QoTJ4lXcml4pUKYio.roa
Signing time: Sat 01 Jan 2022 16:09:36 +0000
ROA not before: Sat 01 Jan 2022 16:09:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64461
IP address blocks: 146.120.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 672631650 (0x28178b62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7cc527f0cf94cfc4284c9e255dc9a5e2950a622a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c3:3b:d2:f2:ec:ce:3f:59:a4:70:9f:1b:7d:
98:f1:fa:2e:e6:0f:18:90:29:da:bb:f9:12:87:62:
79:23:c2:4d:68:b3:12:66:be:42:1c:14:5d:dc:57:
75:e2:c8:8d:b7:5b:61:b7:22:5f:14:3d:6b:04:11:
0d:a2:1d:79:a9:23:cc:7e:49:cc:77:07:55:ad:a1:
99:19:08:4d:8f:ad:ab:ac:2b:c0:b6:b9:c6:80:44:
78:a2:ee:d3:9a:18:be:d7:6a:bd:2c:69:c3:1c:f8:
0b:b8:a4:16:21:32:07:1b:c8:ed:1f:fe:9c:28:f6:
8b:d0:36:7c:68:4f:12:20:09:28:18:b8:72:ed:31:
2a:16:0d:4a:8b:6a:c9:d4:ed:8d:2f:db:78:61:c2:
d2:48:b9:9e:20:97:de:b5:53:c6:4d:48:56:62:e5:
54:d9:ce:70:3f:95:a0:be:07:82:5c:0b:d1:6a:fe:
67:2a:78:d7:c6:44:85:09:77:f0:64:7d:3f:8b:41:
d5:bb:1d:f2:bf:e5:86:c0:6e:5b:67:51:58:02:12:
5d:5d:dc:3a:5b:d9:17:d5:cf:06:ff:79:50:df:c6:
72:a9:96:a9:2c:df:b2:10:73:46:0d:e2:63:3c:db:
0a:5e:b3:5f:3f:50:af:a4:5f:0c:da:16:5e:f2:36:
fc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C5:27:F0:CF:94:CF:C4:28:4C:9E:25:5D:C9:A5:E2:95:0A:62:2A
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fMUn8M-Uz8QoTJ4lXcml4pUKYio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.94.0/24
Signature Algorithm: sha256WithRSAEncryption
80:03:a8:bf:39:99:2c:34:c2:92:e4:e9:08:ca:eb:7d:48:d9:
03:14:d8:c9:27:a6:75:c0:21:71:c2:1b:e3:26:f0:02:da:82:
25:ab:f4:5b:f9:cf:07:92:d5:d7:3c:fe:90:c0:00:10:7a:f8:
df:70:fe:1d:43:ba:ee:a1:d7:61:e2:75:f5:bf:e4:ca:99:4b:
d0:45:44:f0:0d:28:ae:78:16:0b:3a:f9:1d:71:66:52:d6:24:
37:ce:df:1a:88:b1:b6:23:57:29:7a:4a:ad:ac:76:af:4e:16:
87:94:17:46:10:4a:d8:e2:19:0f:be:61:a6:60:57:c0:08:f6:
79:d4:24:8a:55:7e:44:68:17:64:6b:f7:90:61:69:40:7d:28:
bf:dc:ab:7b:0b:87:94:54:87:f1:8d:14:27:06:a5:76:55:f1:
b3:e0:c7:ee:c2:6a:1f:f7:27:c9:3f:4a:00:69:14:63:28:37:
49:7b:fb:c4:fc:31:88:f2:3e:12:8e:03:7c:cc:ae:96:32:10:
9f:68:cb:4a:36:95:33:c5:bf:ee:b3:ab:ff:a4:dc:aa:f1:a3:
e4:78:2b:a2:51:6e:43:ac:e3:5b:04:ce:40:bd:04:fb:dc:f8:
b3:d3:bf:39:93:3e:60:59:a9:9a:1b:75:f7:12:01:6f:2c:c9:
77:4f:56:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:29 2025 by rpki-client