Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mqF0OSuTFI5glMuteIRrvyYCKR4.roa
File: mqF0OSuTFI5glMuteIRrvyYCKR4.roa (raw, json)
Hash identifier: w+I0CpWZ+K6H/hpDApUJJd4WbWQXq2MUuKbm34MU3HU=
Subject key identifier: 9A:A1:74:39:2B:93:14:8E:60:94:CB:AD:78:84:6B:BF:26:02:29:1E
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0185709534C5C96B9410AAA2E7F6758978DA
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mqF0OSuTFI5glMuteIRrvyYCKR4.roa
Signing time: Mon 02 Jan 2023 03:45:04 +0000
ROA not before: Mon 02 Jan 2023 03:45:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47463
IP address blocks: 95.46.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:34:c5:c9:6b:94:10:aa:a2:e7:f6:75:89:78:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9aa174392b93148e6094cbad78846bbf2602291e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:58:2b:25:09:23:78:4a:18:89:44:74:01:3e:
ab:ca:b2:24:a1:e0:3e:ba:bc:74:ca:95:c7:18:f3:
8c:d5:1e:1a:e5:58:66:33:a3:b3:77:19:f4:a4:07:
21:4b:08:43:fb:04:39:6a:af:68:ad:af:92:f5:b3:
e7:a8:60:6a:21:49:07:63:70:42:3e:54:49:d5:9f:
cb:d6:e4:fd:72:b1:f9:35:ef:0e:db:a9:70:b3:b9:
f3:e9:b0:99:08:12:a5:db:9c:8c:3c:9c:4d:e5:6c:
4e:cf:f4:7c:19:b3:ff:33:ef:73:b9:48:f3:2c:dd:
56:82:40:e8:78:5b:1c:b0:0d:40:be:da:b1:f5:38:
3b:b2:7d:3e:97:82:1f:5b:b1:c5:e8:8f:9c:88:d2:
3f:79:32:19:6d:25:95:a8:33:84:4e:73:24:22:40:
57:92:63:9e:37:4d:3c:09:90:19:2b:15:25:60:bb:
8b:49:35:56:05:64:3b:57:a6:47:9d:52:52:9b:af:
d8:80:df:c2:09:e5:1c:09:3b:66:a0:4a:de:6f:e7:
b5:03:82:8e:70:b4:d2:03:91:de:c0:31:5d:e5:41:
d4:bd:e7:f2:89:13:ca:77:aa:bf:d6:1a:6e:43:2e:
bf:1f:e4:b2:29:44:96:32:a7:22:16:7b:e0:e8:48:
c5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A1:74:39:2B:93:14:8E:60:94:CB:AD:78:84:6B:BF:26:02:29:1E
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mqF0OSuTFI5glMuteIRrvyYCKR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.124.0/24
Signature Algorithm: sha256WithRSAEncryption
93:75:9a:f0:67:08:26:ca:f6:44:a6:93:50:77:55:88:a0:80:
1a:e5:03:16:3c:00:94:b8:24:77:0c:fb:bf:df:75:7d:47:fb:
b9:37:88:cf:20:2e:94:76:fb:58:e4:8e:90:75:e6:ae:e8:47:
ca:e7:a6:4a:13:7f:3b:cd:56:df:a0:87:15:e1:a0:fa:d3:2c:
5e:20:24:34:1b:e5:98:5f:0b:26:96:39:e2:e6:f5:10:1e:8b:
f5:9c:88:6b:51:46:e7:82:8e:9e:86:b0:a3:cf:f0:8e:45:8e:
1f:1c:a7:95:80:d8:15:7a:76:41:7a:24:be:79:93:cf:2c:dc:
5b:29:43:fd:8e:3e:de:5c:f0:ce:04:46:95:13:52:f2:48:50:
f2:87:f0:02:d6:4c:d3:18:73:63:23:16:dd:6a:f5:a3:a8:a6:
fb:2d:ef:eb:5d:ae:08:21:42:23:5d:57:4d:35:e3:2c:a7:78:
6e:3c:78:dc:62:96:17:58:56:d9:46:5e:2c:1e:d2:28:f7:0c:
6b:0e:68:1d:41:49:14:5a:18:b0:b6:f7:70:b5:5e:04:f1:66:
23:22:37:80:35:6c:c1:7e:a5:a3:1d:d8:65:66:af:a9:51:a9:
0c:c5:36:48:fe:20:12:f5:cf:a2:b1:c8:c6:44:da:83:a4:2b:
8e:32:fd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:31:58 2025 by rpki-client