Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gOmHPyu8_hnQTtOXhmZqZ9bSZfk.roa
File: gOmHPyu8_hnQTtOXhmZqZ9bSZfk.roa (raw, json)
Hash identifier: yhQZgoSJovj3FePh6VxvWGg+uWfnOAuJqcNPAtF0eZY=
Subject key identifier: 80:E9:87:3F:2B:BC:FE:19:D0:4E:D3:97:86:66:6A:67:D6:D2:65:F9
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 28434779
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gOmHPyu8_hnQTtOXhmZqZ9bSZfk.roa
Signing time: Sat 01 Jan 2022 16:09:58 +0000
ROA not before: Sat 01 Jan 2022 16:09:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208087
IP address blocks: 146.120.246.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 675497849 (0x28434779)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80e9873f2bbcfe19d04ed39786666a67d6d265f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1d:68:c5:47:2e:b1:90:77:c3:0e:ba:85:0b:
cc:df:e7:0e:46:0d:b5:5f:61:e2:d9:83:b7:5f:f3:
47:32:ff:65:60:87:ba:a8:4c:06:bb:65:04:3c:af:
2b:34:ba:25:b2:6c:63:dd:eb:39:8b:1a:e1:31:57:
81:f4:64:c2:ea:31:05:3d:b3:66:ee:99:41:4c:68:
ac:dd:e4:f5:b8:81:44:dc:fe:df:34:c7:c3:40:e1:
71:8c:62:12:44:06:37:89:37:e1:f9:06:80:56:4a:
61:dd:61:2f:d3:5e:b7:06:99:75:4d:fc:f6:a0:2d:
c5:72:1b:4a:67:fb:cf:ec:0f:f3:c1:e8:b4:4e:be:
19:3b:39:09:ab:75:72:36:28:d0:bf:4a:81:ed:ee:
d8:67:86:0b:58:95:79:5c:a4:85:62:0d:0c:fa:da:
eb:25:54:64:4c:ff:57:ac:56:49:ff:cf:a3:6d:f5:
79:8d:d6:6a:b0:bf:aa:11:55:f5:cd:18:22:45:e8:
cd:2f:20:53:4b:f0:01:da:ff:b6:59:9a:f4:9c:eb:
4c:aa:3d:07:49:8f:66:0a:f0:ec:02:5d:bb:9b:4e:
db:7d:bd:4f:40:94:7b:6d:0a:a3:16:b6:7a:2a:52:
a3:a4:bf:1b:15:76:16:c5:48:4f:01:d3:3a:6f:32:
ad:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E9:87:3F:2B:BC:FE:19:D0:4E:D3:97:86:66:6A:67:D6:D2:65:F9
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gOmHPyu8_hnQTtOXhmZqZ9bSZfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.246.0/23
Signature Algorithm: sha256WithRSAEncryption
10:bf:72:4b:13:c4:0b:6d:6a:e2:4d:b3:c5:13:ff:53:5f:21:
9f:34:a3:44:0d:22:32:dd:ec:e4:e5:47:98:58:8a:7c:04:10:
71:16:f8:cd:82:43:eb:5d:72:4e:00:82:fc:a9:b7:df:46:8f:
9d:e5:3b:5e:f6:05:87:f5:82:74:c2:37:3d:bb:7b:23:6e:cc:
c7:a9:71:a1:ba:23:70:ea:cf:cb:fe:ba:cf:4f:2c:28:12:95:
1b:01:b8:16:58:cb:51:39:c8:a2:65:06:df:1e:ee:14:0a:0e:
75:b9:be:b7:b1:9b:b2:c3:b5:29:fa:6c:67:97:c3:0d:14:89:
0b:19:04:33:20:9a:90:73:5c:f0:55:cd:05:c2:95:16:06:42:
33:92:1d:c4:8a:4c:3b:fa:7c:1e:e8:95:38:ae:8a:b2:3b:bb:
b9:a9:d8:b7:9a:61:c4:1c:27:68:16:e1:c6:42:67:b2:1d:6b:
77:6e:94:ea:dd:b0:4e:af:01:79:f1:0c:6d:2b:bb:40:b5:08:
9b:c0:11:10:67:e6:2a:b1:4e:53:fe:5d:15:32:e6:b7:d8:b0:
b2:ae:55:84:d7:a8:7a:19:ef:0a:34:d6:74:b3:1f:02:74:2b:
c7:1c:d7:00:b1:14:36:7e:7d:8f:9d:c9:be:d1:25:71:cd:32:
f5:e0:f1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:30 2025 by rpki-client