Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/sV_ZuFOWc0hgo6H8rK8fm3M0AVo.roa
File: sV_ZuFOWc0hgo6H8rK8fm3M0AVo.roa (raw, json)
Hash identifier: KZyFuEywbxfQRW91DBF+KeU9KixwERoCI5U16K78rw0=
Subject key identifier: B1:5F:D9:B8:53:96:73:48:60:A3:A1:FC:AC:AF:1F:9B:73:34:01:5A
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 298E1467
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/sV_ZuFOWc0hgo6H8rK8fm3M0AVo.roa
Signing time: Wed 20 Apr 2022 12:30:44 +0000
ROA not before: Wed 20 Apr 2022 12:30:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59734
IP address blocks: 95.47.240.0/23 maxlen: 23
92.38.86.0/23 maxlen: 23
95.46.120.0/23 maxlen: 23
93.171.32.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 697177191 (0x298e1467)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Apr 20 12:30:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b15fd9b85396734860a3a1fcacaf1f9b7334015a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c3:5a:e0:4b:2e:ce:aa:73:32:01:c2:1c:e0:
df:49:f3:82:3a:1c:ea:03:8b:76:cb:8a:d2:f3:9d:
75:f5:39:51:0e:d7:2d:f7:48:87:88:ff:bd:c6:20:
1d:cf:ee:9e:99:c0:43:6a:8e:3e:2f:52:5f:97:1f:
93:27:ba:82:92:b9:de:74:f8:ee:f5:77:b3:cf:ae:
ec:29:29:d4:6f:f8:b4:0f:2b:37:c2:ed:82:d4:c6:
f4:3c:c9:53:0b:5e:f5:1c:d2:14:02:74:4b:bc:dd:
b9:d6:7f:a7:1b:da:4c:2e:c8:43:59:a2:b3:1d:dd:
34:fd:5f:3e:64:27:82:d7:45:af:be:4c:a4:3d:18:
ac:59:c3:aa:04:bb:40:23:d3:94:84:03:61:ed:70:
c7:a6:9f:b9:9d:1f:77:c2:74:f4:97:79:c1:5c:6d:
2d:74:ef:60:69:33:fd:38:bb:8d:fc:53:50:f7:85:
94:1c:e8:8b:a5:5e:74:1a:e2:a7:53:f4:35:09:7b:
96:63:3f:7f:49:f9:a4:cf:8d:74:2e:42:13:3f:64:
0c:dc:95:9d:34:7a:45:00:73:28:20:32:95:e0:59:
66:61:39:2b:80:a8:2c:dd:b5:99:58:45:84:96:23:
eb:0a:6f:93:5b:45:82:3b:e0:20:ad:92:b4:53:90:
ce:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:5F:D9:B8:53:96:73:48:60:A3:A1:FC:AC:AF:1F:9B:73:34:01:5A
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/sV_ZuFOWc0hgo6H8rK8fm3M0AVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.86.0/23
93.171.32.0/23
95.46.120.0/23
95.47.240.0/23
Signature Algorithm: sha256WithRSAEncryption
35:a0:c8:40:02:ac:e5:27:79:24:40:82:45:9e:ca:f5:7b:6c:
3a:91:5d:96:4f:dd:57:61:0a:df:ab:ea:25:18:cd:10:64:d8:
9a:b0:81:c2:52:11:35:64:89:7c:85:42:d2:bf:45:3b:82:f8:
22:af:ea:6a:2a:38:f4:1f:40:6d:87:0f:b8:44:89:51:44:31:
e4:b7:82:8c:44:5c:9f:fa:54:3e:0c:f3:38:bb:c7:d3:d7:55:
30:1b:6a:bf:19:bb:76:c4:50:d5:6d:39:92:2f:88:18:53:74:
c5:cd:2c:50:69:7e:18:5a:c4:a0:31:a5:40:3c:b0:91:70:4b:
d6:c2:45:bf:72:95:6e:ae:f1:73:f6:8c:c6:ba:bf:5a:87:b4:
bb:46:5d:6a:05:df:c5:28:6b:5c:ea:e4:f5:40:43:a0:50:4c:
dc:c4:10:38:68:f5:23:df:ad:dc:a9:35:56:5b:47:d8:bd:9a:
87:45:a3:66:15:4c:d4:39:da:bc:70:3c:fa:d9:f5:f0:ec:f2:
43:bf:7f:1b:cc:13:13:88:d7:ad:b5:e8:1b:0d:e3:a3:be:bc:
3d:71:f2:df:58:eb:bc:c0:63:f7:09:25:5a:f0:5e:f6:bc:50:
2b:b6:43:78:97:f1:b5:6b:12:d1:90:92:5a:f1:06:8f:fb:b7:
11:ca:b4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:53:44 2025 by rpki-client