Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/kotqIN0SpmyZCfdIvO6lmo2DGeA.roa
File: kotqIN0SpmyZCfdIvO6lmo2DGeA.roa (raw, json)
Hash identifier: B8fen5V027Dz7ZOZ2CAZFAVg+IPZgdzTOiebuaGTziI=
Subject key identifier: 92:8B:6A:20:DD:12:A6:6C:99:09:F7:48:BC:EE:A5:9A:8D:83:19:E0
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0182CAF17019C81D0703D279061B47017DD8
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/kotqIN0SpmyZCfdIvO6lmo2DGeA.roa
Signing time: Tue 23 Aug 2022 13:43:16 +0000
ROA not before: Tue 23 Aug 2022 13:43:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59888
IP address blocks: 146.158.74.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ca:f1:70:19:c8:1d:07:03:d2:79:06:1b:47:01:7d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Aug 23 13:43:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=928b6a20dd12a66c9909f748bceea59a8d8319e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4d:95:ef:a0:f6:ee:c3:20:6b:d0:3c:40:c4:
4f:20:a6:a6:c9:88:22:84:5a:e0:4a:77:a7:03:aa:
0a:e9:8a:ef:01:a1:d8:ef:30:c4:61:aa:5e:7f:71:
a1:e8:96:63:d2:44:24:68:36:84:80:85:f8:f6:25:
76:48:d4:15:58:93:91:1b:3f:f3:1b:49:c9:a3:16:
6f:22:dc:36:2c:41:76:a8:f4:ad:3f:8e:7b:9a:9f:
96:01:43:c4:6d:e1:0e:ee:27:12:12:57:b7:8d:bb:
c3:f4:9e:ed:ff:9a:ac:12:8a:35:88:68:ee:a6:8e:
4e:b1:27:5c:d7:8c:b2:5e:e5:77:1c:48:cd:fe:ad:
69:3d:82:ef:5d:57:8f:2f:2c:02:6a:be:6c:bd:b7:
6a:1d:eb:94:b1:d4:fc:a0:00:b1:d2:05:ce:df:17:
d4:a3:2f:29:21:79:ae:57:92:84:83:d7:10:ec:1d:
e5:68:04:38:61:1a:a4:66:d0:a3:f9:fd:04:9e:73:
5f:21:51:77:69:90:3c:b3:a6:6f:39:1f:c6:7c:47:
3d:17:6d:f4:c4:83:57:93:5b:1a:74:b0:6f:6b:d6:
c9:dc:77:3b:b2:9f:ae:9d:5c:e3:ff:29:05:a8:35:
4d:1c:e7:97:b1:26:39:f5:e4:a1:20:8d:84:7a:cd:
dc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:8B:6A:20:DD:12:A6:6C:99:09:F7:48:BC:EE:A5:9A:8D:83:19:E0
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/kotqIN0SpmyZCfdIvO6lmo2DGeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.158.74.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:24:2d:78:76:50:53:00:31:53:a7:ca:77:cb:29:2a:e2:76:
56:f8:3d:a9:81:3c:76:ab:6f:f8:c4:eb:87:93:5f:ea:8f:c3:
b2:f5:86:2a:4f:6a:63:50:e8:7d:05:9a:de:ef:8b:58:62:8f:
56:60:c1:ae:45:02:85:66:0d:95:fa:49:84:52:e8:b8:8b:7b:
93:b8:bd:69:32:45:09:7b:ea:25:24:de:56:79:f0:3b:ce:f1:
52:71:2e:12:a1:ec:9d:66:05:66:8c:56:a9:35:36:ac:91:45:
ae:ee:f9:9b:5e:fa:5f:63:43:01:9d:f7:d1:24:a7:e3:96:cc:
e1:cb:6a:1c:f7:5c:c2:aa:8e:cd:0a:5a:99:e0:10:3a:a5:79:
7b:9a:bc:29:ae:42:c8:b2:e5:a9:20:b2:f6:27:59:1c:cc:23:
c6:c9:90:a6:9d:c1:fe:4e:90:8e:80:91:27:b8:10:72:07:ab:
58:82:7a:d1:87:f4:1b:53:e2:0f:c2:1b:24:b1:4d:b4:8f:52:
16:3e:d9:92:27:f7:b4:aa:2b:8e:b9:60:3d:16:ec:24:eb:fa:
7c:73:db:77:d1:69:fb:73:67:bb:e4:f2:37:35:1d:a0:2b:3b:
f2:6c:f1:b7:ee:5d:73:53:ea:2e:61:f5:53:ea:b3:a3:1c:df:
4e:99:80:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:29:34 2025 by rpki-client