Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/pgu1zbFbIcJA3wTx2FcorvRcN6c.roa
File: pgu1zbFbIcJA3wTx2FcorvRcN6c.roa (raw, json)
Hash identifier: g5HFjSEFVJO2RYKj3VOIyIRVGLxfrdqDwlS/ggyO0V0=
Subject key identifier: A6:0B:B5:CD:B1:5B:21:C2:40:DF:04:F1:D8:57:28:AE:F4:5C:37:A7
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0181ECC08D0463C999D86DD3DE739C29FE0B
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/pgu1zbFbIcJA3wTx2FcorvRcN6c.roa
Signing time: Mon 11 Jul 2022 10:14:10 +0000
ROA not before: Mon 11 Jul 2022 10:14:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201012
IP address blocks: 146.158.48.0/21 maxlen: 24
95.46.198.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ec:c0:8d:04:63:c9:99:d8:6d:d3:de:73:9c:29:fe:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jul 11 10:14:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a60bb5cdb15b21c240df04f1d85728aef45c37a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:16:b1:ff:06:75:82:5b:fd:5e:92:84:af:d2:
70:3d:0e:7b:e7:20:27:8a:b1:bc:97:42:19:2e:2c:
5c:be:06:80:51:8f:9f:d3:3c:0a:1b:1e:01:0a:60:
9b:af:94:3f:92:73:4b:f7:1f:f3:f3:e5:49:21:c4:
29:0a:68:f2:2c:cd:de:a8:c8:69:80:49:be:37:29:
c6:ff:d4:61:7b:3e:69:8f:23:82:53:49:cd:20:5c:
d3:d8:24:95:b1:6f:33:f9:1b:5a:62:25:f3:74:0b:
66:bd:01:3b:dc:e7:96:5d:54:08:af:a5:ef:2f:d9:
14:a8:71:cb:4f:90:7b:bd:28:c0:2a:f5:6f:a7:95:
dd:f3:6c:98:86:96:c0:1c:eb:6c:ac:1a:d4:1a:d5:
35:da:cd:6d:2c:b9:98:74:49:39:22:1f:85:82:33:
2d:36:5c:9d:ef:0e:e7:17:b3:91:74:c1:cb:ab:8b:
6a:39:ec:e6:55:28:90:f4:8c:4a:23:4c:25:fb:99:
12:9c:23:c4:96:27:ed:31:85:f8:ec:4e:a1:06:fd:
3b:90:87:e2:77:6b:ea:73:95:d6:b8:a1:d0:08:09:
2b:c2:6f:52:7e:2c:8e:de:9f:72:99:95:25:26:1c:
c6:c1:1f:81:2f:e7:cf:21:a1:4b:bc:46:57:a2:91:
f6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:0B:B5:CD:B1:5B:21:C2:40:DF:04:F1:D8:57:28:AE:F4:5C:37:A7
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/pgu1zbFbIcJA3wTx2FcorvRcN6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.198.0/23
146.158.48.0/21
Signature Algorithm: sha256WithRSAEncryption
0a:d4:c6:78:2a:7b:48:59:24:85:a6:60:63:75:43:55:a8:1c:
5e:3c:10:d6:eb:c1:c4:a9:3a:95:33:78:96:e1:9c:5d:da:7e:
81:d0:b3:8a:52:2a:fb:44:2b:2e:76:a9:78:3d:67:3d:79:35:
53:23:d2:f5:73:73:97:11:70:b7:c7:9d:d0:78:86:29:cc:18:
ff:60:df:fb:9b:6b:ed:a6:6a:c8:c9:5c:5c:c7:29:d1:5f:1b:
95:2a:2b:d5:13:1b:8a:0b:1a:bd:68:11:39:c3:fc:1a:5a:e7:
e8:c1:f2:33:f3:8a:e5:b6:ac:a2:b0:81:8b:cf:da:c2:22:13:
33:92:a9:d7:83:a9:40:59:ea:20:a1:e1:a6:7e:40:77:b7:7b:
d8:81:4f:30:53:60:2f:18:f1:bc:be:bf:b3:b3:59:f1:ee:a5:
f3:60:23:96:26:41:1b:4b:de:d6:ba:62:3d:77:01:d0:4a:9b:
1e:de:b6:10:b1:aa:a7:f5:42:3d:37:53:ff:90:a5:fb:97:37:
69:1d:87:d2:3a:2a:4e:51:bd:83:2e:eb:77:f0:58:93:0a:6f:
72:72:69:90:26:e8:ce:03:94:a6:f2:c0:77:00:55:f8:92:ab:
e3:7d:8e:59:61:0d:d9:08:39:dd:68:45:72:5f:d3:f8:27:06:
41:5c:a1:02
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYHswI0EY8mZ2G3T3nOcKf4LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjIwNzExMTAxNDEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjBiYjVjZGIxNWIyMWMyNDBkZjA0ZjFkODU3MjhhZWY0NWMzN2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBax/wZ1glv9XpKEr9JwPQ575yAn
irG8l0IZLixcvgaAUY+f0zwKGx4BCmCbr5Q/knNL9x/z8+VJIcQpCmjyLM3eqMhp
gEm+NynG/9Rhez5pjyOCU0nNIFzT2CSVsW8z+RtaYiXzdAtmvQE73OeWXVQIr6Xv
L9kUqHHLT5B7vSjAKvVvp5Xd82yYhpbAHOtsrBrUGtU12s1tLLmYdEk5Ih+FgjMt
Nlyd7w7nF7ORdMHLq4tqOezmVSiQ9IxKI0wl+5kSnCPEliftMYX47E6hBv07kIfi
d2vqc5XWuKHQCAkrwm9SfiyO3p9ymZUlJhzGwR+BL+fPIaFLvEZXopH2fwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKYLtc2xWyHCQN8E8dhXKK70XDenMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvcGd1MXpiRmJJY0pBM3dUeDJGY29ydlJjTjZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBXy7GAwQD
kp4wMA0GCSqGSIb3DQEBCwUAA4IBAQAK1MZ4KntIWSSFpmBjdUNVqBxePBDW68HE
qTqVM3iW4Zxd2n6B0LOKUir7RCsudql4PWc9eTVTI9L1c3OXEXC3x53QeIYpzBj/
YN/7m2vtpmrIyVxcxynRXxuVKivVExuKCxq9aBE5w/waWufowfIz84rltqyisIGL
z9rCIhMzkqnXg6lAWeogoeGmfkB3t3vYgU8wU2AvGPG8vr+zs1nx7qXzYCOWJkEb
S97WumI9dwHQSpse3rYQsaqn9UI9N1P/kKX7lzdpHYfSOipOUb2DLut38FiTCm9y
cmmQJujOA5Sm8sB3AFX4kqvjfY5ZYQ3ZCDndaEVyX9P4JwZBXKEC
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:38:57 2025 by rpki-client