Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/jNmLA4rqyk-G7H3TsPoHUGJb_2k.roa
File: jNmLA4rqyk-G7H3TsPoHUGJb_2k.roa (raw, json)
Hash identifier: iMYcoiOadmqd30BL+TQ+ebD9owweon5wOkf888flnlQ=
Subject key identifier: 8C:D9:8B:03:8A:EA:CA:4F:86:EC:7D:D3:B0:FA:07:50:62:5B:FF:69
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 2844CC7B
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/jNmLA4rqyk-G7H3TsPoHUGJb_2k.roa
Signing time: Sat 01 Jan 2022 16:09:59 +0000
ROA not before: Sat 01 Jan 2022 16:09:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208538
IP address blocks: 146.120.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 675597435 (0x2844cc7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8cd98b038aeaca4f86ec7dd3b0fa0750625bff69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:31:9c:0e:d5:30:58:4d:85:14:e3:11:db:68:
ad:58:fd:66:77:32:ac:95:c6:ae:44:c0:4e:0a:d6:
24:9d:4a:87:5e:60:61:62:73:21:71:86:63:39:ad:
b2:48:99:f1:cb:41:da:ed:4e:03:56:ed:e0:e3:db:
51:f3:52:96:d3:69:70:93:48:a3:98:9b:0f:9c:10:
75:b9:6c:19:d0:61:49:65:75:3c:b0:63:e7:51:5b:
8d:3a:8e:6d:a9:99:12:12:88:d0:99:d1:f7:cb:9e:
0b:1a:0d:8d:b7:9f:91:f8:6d:57:0c:26:b9:98:70:
5d:ce:b2:98:3a:cd:ad:4d:42:0e:d3:12:5f:63:a4:
82:2c:d1:d8:df:c4:51:11:af:57:25:11:fa:3a:69:
b8:3f:5c:a5:ef:45:89:03:ef:31:84:70:9b:51:c5:
e1:61:8c:3d:92:a7:e8:09:9f:30:7e:fc:9f:bd:f5:
d8:d7:ab:6c:5d:10:a0:e4:61:b4:67:6a:de:24:13:
84:63:fd:f3:19:a0:50:dc:0c:05:02:2e:7b:8f:ba:
51:e1:70:e1:60:8b:b3:ed:2e:21:e0:a8:ce:d1:d5:
2d:b9:b3:ca:80:4b:45:f1:e3:d6:01:6d:ff:df:41:
07:f2:64:7f:73:cd:e8:cd:db:35:41:1f:9a:09:4f:
96:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D9:8B:03:8A:EA:CA:4F:86:EC:7D:D3:B0:FA:07:50:62:5B:FF:69
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/jNmLA4rqyk-G7H3TsPoHUGJb_2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.227.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:76:ff:bf:97:da:c0:27:44:c4:e4:60:cd:d0:21:66:f4:0c:
04:b8:50:9e:01:ea:d9:e2:99:7b:b0:90:97:4c:d2:a1:f2:f8:
0e:9b:a3:26:67:e5:10:ca:a9:b2:b3:de:0f:2f:0c:b5:bc:68:
3c:47:32:41:67:7c:9f:29:1e:dc:45:9a:58:eb:ae:d2:21:71:
03:57:a0:f6:6d:6a:cb:e5:54:c6:b3:a2:58:1c:2b:a3:f9:74:
d4:b6:6a:32:50:55:9d:86:ce:cc:99:ae:bc:e6:b5:dc:fa:ea:
81:c4:3f:a9:21:33:36:be:a5:ff:5f:77:88:8b:5e:1f:cd:cc:
10:8f:02:13:b1:be:7c:7d:86:4a:3d:92:f7:00:e1:b3:dd:94:
28:af:1b:af:2b:16:56:96:48:65:c7:cd:f4:a0:16:5a:82:36:
72:bf:68:e3:b3:be:6e:60:ef:16:fa:b6:19:45:24:63:39:f4:
4e:27:22:dc:6e:5e:71:28:cb:27:9c:13:dc:70:12:87:f0:bb:
6c:18:bb:d0:d2:f2:e8:50:3c:49:8a:40:60:8a:27:dd:6e:d9:
04:7c:66:97:9c:ae:a3:68:8b:7a:ff:17:71:79:dd:cc:1a:29:
77:b1:09:13:c0:fb:c6:08:ac:53:f8:20:bc:f9:71:d8:bb:f9:
73:90:7a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:24 2025 by rpki-client