Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/h-7DPqx-GqqeEaqRy9IuKXB-dOQ.roa
File: h-7DPqx-GqqeEaqRy9IuKXB-dOQ.roa (raw, json)
Hash identifier: 4WfU/pOR6CIj2PSj6RoqT+qUq57fcgXd9ASzz4pkt9w=
Subject key identifier: 87:EE:C3:3E:AC:7E:1A:AA:9E:11:AA:91:CB:D2:2E:29:70:7E:74:E4
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27BCE9C5
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/h-7DPqx-GqqeEaqRy9IuKXB-dOQ.roa
Signing time: Sat 01 Jan 2022 16:08:43 +0000
ROA not before: Sat 01 Jan 2022 16:08:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50927
IP address blocks: 95.46.160.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 666692037 (0x27bce9c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=87eec33eac7e1aaa9e11aa91cbd22e29707e74e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:57:38:41:4d:70:77:1e:63:55:61:0c:c0:d8:
fa:b3:45:8a:04:79:1c:39:80:9f:16:3f:5f:88:9a:
e1:17:5f:41:e3:40:db:88:a0:3f:a8:85:f5:5d:ac:
77:28:db:8f:4d:a5:62:ec:e0:2b:0a:6a:f5:17:b3:
12:9b:54:08:62:ab:5a:64:78:09:c8:d1:24:ec:db:
06:5b:d4:c3:90:94:c3:c3:49:cd:c8:45:f2:dc:47:
ab:77:56:3c:17:09:1a:e3:b5:5a:cc:89:fc:70:9c:
c0:7f:ab:cc:68:df:6f:ba:54:28:3f:27:6e:c5:d8:
f8:11:c8:e9:01:2d:bd:40:0a:04:4f:6b:cc:90:5e:
8f:70:2d:76:36:ee:e4:23:bc:f1:1c:91:ab:f6:97:
bc:a1:6e:db:0a:cb:43:e8:46:23:22:20:01:36:0b:
e4:3d:2f:04:06:26:a2:23:4f:3c:6e:4d:43:84:da:
16:52:34:41:a3:06:c4:50:a5:ef:07:b5:f3:54:6e:
96:ae:f1:44:48:69:d3:f6:73:32:c9:ee:9f:92:3d:
bf:2e:58:b2:3f:2a:c7:63:3e:e9:88:25:ff:72:f6:
db:6c:e9:d5:70:f9:3a:a1:ac:9f:8b:e4:43:49:14:
d2:0f:af:48:02:85:de:31:8d:01:ad:14:0e:f7:fc:
09:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:EE:C3:3E:AC:7E:1A:AA:9E:11:AA:91:CB:D2:2E:29:70:7E:74:E4
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/h-7DPqx-GqqeEaqRy9IuKXB-dOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.160.0/22
Signature Algorithm: sha256WithRSAEncryption
43:66:96:8a:c0:1b:f7:2e:e4:82:7d:3e:22:e0:f6:ee:41:f9:
52:d3:53:6e:c3:79:a0:f0:58:7a:d4:7c:cd:50:46:91:0e:87:
a0:e2:c6:ee:f8:6f:3b:c2:f9:de:87:74:f5:2f:fc:25:d3:8c:
4a:0c:e3:b8:81:6d:ed:49:c8:3d:be:20:39:f7:ef:eb:d6:b2:
4e:a2:bd:48:08:52:7d:21:92:35:9a:a8:07:25:f0:34:e9:5d:
03:5e:8f:06:d6:f8:d9:1e:60:b3:32:10:44:d9:36:81:47:87:
18:2e:32:83:f4:e8:4e:b3:35:d3:90:50:db:af:4a:a2:59:4c:
ba:b2:b3:d3:d1:9b:c6:db:05:d6:b8:f6:6d:3e:99:5b:b4:05:
ae:dc:db:9d:ae:0a:87:73:8b:14:9e:f6:ae:ad:3d:66:ca:3a:
d7:54:d1:4e:cf:9a:e3:ac:77:8a:0e:18:ba:3a:9b:b5:cf:a6:
b2:91:10:25:b3:98:15:c8:1d:e6:a9:0b:89:18:1e:29:eb:13:
4d:0f:d6:d8:f2:3f:3f:00:a0:36:1a:47:88:4e:2d:3f:75:0e:
4f:8c:7a:52:25:86:92:a5:de:8c:38:0e:e1:a1:e6:ae:e7:da:
ec:ee:b8:b7:bb:bf:b6:08:f8:83:c7:45:68:dc:16:a7:3e:c2:
b2:37:76:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:29 2025 by rpki-client