Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/lR0r4ehOHXJLeZSGDQk1tAYjDuE.roa
File: lR0r4ehOHXJLeZSGDQk1tAYjDuE.roa (raw, json)
Hash identifier: XCR/mIFeeCHAvA3BwaP9Fxky46yyLbZ8QlVHWd4GbvA=
Subject key identifier: 95:1D:2B:E1:E8:4E:1D:72:4B:79:94:86:0D:09:35:B4:06:23:0E:E1
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 2812795E
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/lR0r4ehOHXJLeZSGDQk1tAYjDuE.roa
Signing time: Sat 01 Jan 2022 16:09:33 +0000
ROA not before: Sat 01 Jan 2022 16:09:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62331
IP address blocks: 95.47.244.0/24 maxlen: 24
95.47.189.0/24 maxlen: 24
31.148.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 672299358 (0x2812795e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=951d2be1e84e1d724b7994860d0935b406230ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2c:5b:9e:0e:ca:21:3b:1b:af:af:bc:a5:20:
0c:88:99:c7:c4:29:f2:15:b2:cf:28:bd:f5:a3:3a:
70:e1:56:c0:c0:37:d5:0c:d4:f9:b7:bd:35:3d:1e:
5e:f0:17:2e:e2:cd:56:41:c8:e8:a0:56:ec:5c:bc:
ad:25:b1:84:f8:83:a2:16:19:74:b5:dd:36:1c:df:
db:2a:c7:7b:1f:27:92:64:00:b6:ba:94:80:53:75:
46:7d:a3:d6:61:b3:3b:19:81:66:80:1c:6b:c4:ae:
52:c5:55:b5:8b:77:0b:be:bb:b0:7d:d0:9d:51:53:
6e:fd:f2:3f:f5:48:c9:8d:59:1a:95:ea:11:3d:3f:
b7:2d:11:52:91:7b:c9:dc:61:99:95:97:86:2b:06:
5b:3e:07:70:a1:be:85:dd:05:df:2f:76:20:17:14:
42:07:f4:df:08:e9:e5:2f:36:fa:0e:38:6c:10:17:
50:6b:f2:ba:a4:60:06:c7:42:01:e0:56:a2:cc:b5:
ae:ea:a9:79:2b:af:6f:07:53:80:d7:ae:dd:e4:30:
9c:cd:17:cb:8b:2a:24:fa:78:56:56:4e:c9:d0:e2:
63:18:c0:30:ca:02:d2:ca:96:cd:c2:1d:0e:4b:b3:
7e:17:be:27:7f:6e:fe:01:5a:4e:61:30:74:9d:0e:
18:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1D:2B:E1:E8:4E:1D:72:4B:79:94:86:0D:09:35:B4:06:23:0E:E1
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/lR0r4ehOHXJLeZSGDQk1tAYjDuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.205.0/24
95.47.189.0/24
95.47.244.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:0a:fd:7c:af:32:c3:7a:db:a6:bb:6d:ca:52:2c:9f:4f:7d:
a1:2b:7e:d8:94:7c:37:23:52:bf:e6:5d:63:fc:01:5d:e2:20:
bc:28:5a:7f:bb:05:35:b7:29:7e:78:d7:e9:5a:a9:ac:56:37:
dc:b1:d4:b1:3e:5e:8b:38:e2:82:30:12:ef:aa:23:fa:38:f9:
4a:44:d9:56:de:76:36:d9:1c:a2:f8:63:29:ee:87:b8:2e:fb:
1d:d6:98:34:86:0a:2b:2d:55:a8:67:97:ca:e4:eb:db:d3:d8:
48:4f:9b:29:fb:e0:ae:59:b7:4f:0f:43:5d:96:f4:48:04:b5:
ed:78:ed:d6:fa:23:cc:48:a7:98:45:4a:3a:36:13:04:e9:dd:
b4:37:49:db:62:7f:2f:17:a3:a3:d1:f9:e5:25:94:36:b2:c7:
b9:1c:cd:7e:99:f7:9f:bb:90:e8:0a:da:d6:02:66:5f:ab:e4:
e4:22:ae:f3:fc:7b:6c:bd:d1:b2:d4:74:ba:f6:a6:8f:59:5a:
6b:64:46:6c:23:a8:92:d3:fd:99:0a:00:8e:83:10:ed:d4:fe:
ea:75:ac:7d:97:9f:87:da:65:72:13:39:ea:aa:62:12:56:18:
30:8e:00:1f:60:e0:5f:6f:16:8f:f3:68:37:dc:e8:da:24:97:
f5:a9:35:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:56:12 2025 by rpki-client