Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tJ4HprOXEsDwUKl2hVJlcn71rmw.roa
File: tJ4HprOXEsDwUKl2hVJlcn71rmw.roa (raw, json)
Hash identifier: 3aPSO3rod8xHPj8UubwLZCgPLLoV50KpG/AZGjiMA2c=
Subject key identifier: B4:9E:07:A6:B3:97:12:C0:F0:50:A9:76:85:52:65:72:7E:F5:AE:6C
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 2838E6B9
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tJ4HprOXEsDwUKl2hVJlcn71rmw.roa
Signing time: Sat 01 Jan 2022 16:09:52 +0000
ROA not before: Sat 01 Jan 2022 16:09:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204929
IP address blocks: 95.47.248.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 674817721 (0x2838e6b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b49e07a6b39712c0f050a976855265727ef5ae6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fb:41:be:2f:ad:d2:2c:24:cc:76:fc:a9:74:
9d:bd:ad:69:ad:1f:f8:32:ec:ac:eb:ad:35:a3:23:
68:b7:e8:68:5c:a6:3f:2c:a9:17:72:93:d2:0f:92:
23:d3:2a:95:0f:eb:48:47:ba:35:24:88:89:2d:5d:
12:48:c1:73:a9:3c:b4:7d:40:0b:af:1b:aa:6a:75:
02:06:1a:f9:74:3b:28:6d:03:59:e6:b2:c1:ac:e7:
be:9b:94:8b:2a:37:c8:5e:c7:8a:61:59:7d:32:d4:
44:c7:3f:b7:33:6c:06:38:28:55:79:33:ae:01:b2:
70:c4:55:f4:da:62:36:8b:d3:9c:48:da:0f:28:3e:
56:42:0b:84:25:e5:0c:0f:64:d1:12:49:5b:a9:41:
b3:66:1b:21:33:56:e9:1d:23:7e:2d:77:17:45:65:
44:34:d7:59:db:93:55:db:08:27:67:f5:35:f7:70:
ed:3b:78:22:8a:c6:2a:d4:08:95:6b:4a:bb:8f:06:
96:bc:f2:5f:a2:c6:7a:0e:66:ef:26:b3:aa:4f:04:
56:6d:5a:d8:c1:00:4d:13:58:3b:4e:ec:1b:41:59:
9a:ba:ce:60:20:ba:ed:24:a7:c5:47:53:de:56:f1:
0e:07:44:20:c4:07:bd:dc:e3:0d:95:e4:d2:55:eb:
ef:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9E:07:A6:B3:97:12:C0:F0:50:A9:76:85:52:65:72:7E:F5:AE:6C
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tJ4HprOXEsDwUKl2hVJlcn71rmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.248.0/23
Signature Algorithm: sha256WithRSAEncryption
72:cb:c6:c2:fb:2d:75:4b:c1:c1:70:bd:b8:04:a9:f1:40:02:
bd:27:2d:c6:5b:57:b9:ac:d1:d9:dc:0a:f8:74:07:c3:03:ad:
71:7b:20:5d:dd:f8:f9:27:d4:26:2a:ce:b9:a2:ff:36:00:1e:
9f:cf:d2:b5:fe:71:3b:55:a0:cf:e1:3c:0a:8d:02:1f:58:d1:
23:f7:d3:52:2e:60:bf:ec:10:03:ef:e0:13:ac:fd:4e:f7:47:
d9:4f:a9:a9:51:2d:d9:e4:a5:8d:ef:e1:62:dc:c5:37:f0:67:
b3:7e:8a:23:23:07:b0:8d:95:06:4c:29:e5:20:4f:7d:f5:bb:
fc:63:45:5a:4e:ff:87:68:06:a5:b5:4c:8c:e5:a4:51:d7:5d:
eb:40:6f:c2:4d:e3:ce:e0:a9:46:60:2d:f9:cc:fd:b1:68:f6:
d8:9e:3e:cb:e6:8c:6b:8d:f0:3a:c0:e4:36:06:0a:6b:b6:1e:
4f:06:ec:fd:04:45:57:c2:fa:75:a8:df:82:6c:9b:a4:4b:e7:
99:9b:73:89:b5:c3:82:ae:95:6d:d9:76:7e:03:8e:90:02:db:
d0:27:ab:25:b0:61:57:b0:1c:1d:9c:a2:99:b2:d0:87:06:c0:
0e:97:f9:0e:ef:ee:a2:aa:03:03:b4:b5:9d:4a:cc:6f:8e:d7:
62:ec:47:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:19 2025 by rpki-client