Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ij5m7TpSTzYx5_exL3h48OKxVlA.roa
File: ij5m7TpSTzYx5_exL3h48OKxVlA.roa (raw, json)
Hash identifier: c3LyFlA3OYGKquXBuDEEQ1CR9c8EDevQW4vQbU6qa7I=
Subject key identifier: 8A:3E:66:ED:3A:52:4F:36:31:E7:F7:B1:2F:78:78:F0:E2:B1:56:50
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0186B68AE676C2EB70D1C170F2DC3EF90324
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ij5m7TpSTzYx5_exL3h48OKxVlA.roa
Signing time: Mon 06 Mar 2023 10:50:01 +0000
ROA not before: Mon 06 Mar 2023 10:50:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207383
IP address blocks: 95.47.254.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b6:8a:e6:76:c2:eb:70:d1:c1:70:f2:dc:3e:f9:03:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Mar 6 10:50:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a3e66ed3a524f3631e7f7b12f7878f0e2b15650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a1:93:22:ba:b0:ce:ae:99:6e:bc:b6:4e:f7:
9e:3a:a9:01:0a:11:98:de:45:97:dc:e7:75:76:a3:
b6:60:5c:aa:b2:90:89:bc:ee:4b:2b:52:0c:f2:7c:
4d:c9:d7:3a:29:f6:4e:fd:4c:c3:45:9e:cc:54:50:
35:4e:69:42:b2:01:15:b4:1a:e8:9a:91:7d:c5:eb:
ed:0d:99:3d:cc:c6:a9:59:dd:75:2c:bc:3e:e8:eb:
4e:3f:67:4e:c9:6e:e2:97:a0:a8:31:99:e4:5d:bf:
54:3e:61:54:e8:b9:14:29:cb:cb:35:79:2f:fc:c0:
d7:f9:5f:e5:09:c2:ea:97:c7:8a:83:20:5b:3b:8a:
e0:61:13:8c:60:d0:14:94:ff:a2:5e:1c:16:a2:1a:
e0:2d:40:a6:b5:f3:c0:26:7f:40:07:15:cd:bd:ba:
e4:06:b2:20:4d:5e:d3:9b:49:13:4e:15:09:73:81:
7c:41:d2:86:ce:df:50:27:ad:12:03:4d:a6:94:56:
ee:a9:83:86:17:28:ca:5e:32:e2:26:52:12:53:40:
c2:f9:24:a5:b0:55:f8:6a:fb:67:b3:7c:b9:71:c3:
4e:28:af:c8:43:08:e3:0b:6c:0c:88:d3:85:7f:25:
3f:8f:29:e2:7c:c1:74:6e:46:db:f9:30:eb:f3:bd:
22:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3E:66:ED:3A:52:4F:36:31:E7:F7:B1:2F:78:78:F0:E2:B1:56:50
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ij5m7TpSTzYx5_exL3h48OKxVlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.254.0/23
Signature Algorithm: sha256WithRSAEncryption
09:33:6d:51:be:4d:ca:be:e8:6b:32:03:bf:c4:b0:aa:28:6b:
69:aa:70:7b:6f:5f:2c:7b:b8:dd:c9:64:ef:9f:a8:b6:ce:c6:
66:15:19:32:a7:8f:9e:56:c7:1c:67:d3:ef:be:a9:ea:9b:70:
fb:3d:39:43:cb:64:b7:6d:d1:62:65:b1:04:a7:be:f3:23:ea:
15:c4:51:50:d9:ab:0e:eb:39:59:bd:42:e6:0e:b2:35:b4:1d:
c4:0c:cb:c8:a8:8c:1d:06:1b:7f:5d:c2:62:b5:4c:b2:76:6a:
eb:2f:ae:16:09:f1:e8:ee:7f:d8:86:5d:80:d4:ce:d5:da:15:
95:73:ae:ac:bb:a4:e8:1a:a3:37:ec:7f:1a:78:10:4e:4b:e7:
6c:06:f9:2d:5a:a1:65:07:b9:80:49:14:26:d3:0b:0c:4d:b2:
59:65:5d:ad:39:81:03:c4:08:c2:65:f5:76:fc:06:a1:31:bb:
45:d6:ef:95:e9:7a:cf:dc:98:72:f2:85:6c:9d:0b:61:2d:5b:
9b:e0:01:31:d9:fa:22:e1:48:64:2b:ad:2e:e9:a0:08:78:9d:
bb:cb:da:db:4b:f7:ec:77:b3:57:e3:cf:38:b2:82:7b:8a:0c:
32:5d:e2:11:6d:98:4b:58:4b:6d:de:4b:54:4c:66:e8:5e:1a:
75:3d:9c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:53:36 2025 by rpki-client