Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tbJBcw48z2eT5nK7SrwG0i-LP9M.roa
File: tbJBcw48z2eT5nK7SrwG0i-LP9M.roa (raw, json)
Hash identifier: V3UaNT8XeXAZdsy7fjXc47l4Il5g1T1qwgrgOs5Ex3U=
Subject key identifier: B5:B2:41:73:0E:3C:CF:67:93:E6:72:BB:4A:BC:06:D2:2F:8B:3F:D3
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01863AB0777133F347391760755F81C6B55C
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tbJBcw48z2eT5nK7SrwG0i-LP9M.roa
Signing time: Fri 10 Feb 2023 09:38:08 +0000
ROA not before: Fri 10 Feb 2023 09:38:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49529
IP address blocks: 95.46.146.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3a:b0:77:71:33:f3:47:39:17:60:75:5f:81:c6:b5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Feb 10 09:38:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5b241730e3ccf6793e672bb4abc06d22f8b3fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:fe:05:6f:08:0b:3b:97:51:2c:e0:0f:77:71:
c8:74:51:7f:c7:82:ee:d1:e3:50:a4:19:97:10:b6:
36:d2:42:48:a6:f7:a6:aa:47:22:bd:03:dc:45:cf:
30:f4:45:00:39:1d:2c:38:14:3f:4a:41:d9:fd:46:
46:6f:34:84:7b:cd:2c:b3:cb:8d:b3:9a:04:1e:f5:
f6:f8:ee:f0:81:ee:a7:98:12:5d:53:15:69:0a:64:
20:02:03:73:37:f7:f5:96:97:b4:53:c1:37:51:41:
e1:18:73:2b:61:6f:49:c5:a8:58:0a:dd:45:fc:0c:
38:0b:82:62:99:35:f1:9b:7d:d0:34:18:de:8c:fe:
0d:81:7e:3d:62:f4:29:83:70:30:22:96:e5:00:4f:
61:1e:98:6d:8b:51:0e:f0:2b:4a:ba:43:06:59:2d:
f7:eb:cf:f3:d8:56:2f:76:33:ec:4a:9b:f7:e1:7d:
e7:05:e7:4d:ac:ab:00:2d:a8:df:3f:20:b7:fc:3f:
44:1e:c5:13:e3:89:52:e6:85:47:a8:3c:44:ec:57:
9f:cf:ec:c0:5a:12:9a:9e:64:69:e3:b4:94:b4:c5:
44:7b:0a:fc:a6:f7:7d:27:c5:62:04:a9:ad:26:0f:
0e:94:81:aa:f1:1e:ae:3a:71:de:2a:ff:bb:25:75:
d7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B2:41:73:0E:3C:CF:67:93:E6:72:BB:4A:BC:06:D2:2F:8B:3F:D3
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tbJBcw48z2eT5nK7SrwG0i-LP9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.146.0/23
Signature Algorithm: sha256WithRSAEncryption
66:09:61:ac:8f:e9:e8:e7:00:2c:79:42:89:80:9b:0c:fb:4f:
be:c8:e0:54:36:b0:14:a0:8a:f7:98:c1:36:2e:11:8c:bc:bc:
7e:c6:b5:b0:5b:cc:24:06:7f:ed:01:3b:20:bf:97:89:56:cd:
83:95:1c:1d:03:9b:3a:04:66:30:89:b1:9e:d2:41:23:6a:ef:
da:3a:89:f6:c3:ff:50:67:6b:26:04:c8:de:c2:80:ab:57:a8:
99:51:cb:d6:b4:9e:5e:5e:7a:16:9d:60:c2:3e:ee:1f:b8:6b:
c2:33:a2:32:88:f0:f6:e4:f1:ed:a2:bc:1b:24:90:3c:48:2b:
25:9f:c9:72:0e:32:4b:36:40:b9:0c:08:41:d7:95:e3:0a:8b:
26:74:16:dc:02:69:82:6b:07:90:1b:fc:b5:a1:4e:1d:11:43:
58:e6:9c:6d:8f:ab:ad:f8:3e:40:1e:0a:80:d2:42:06:ad:73:
f0:20:9c:29:9b:a5:48:62:7a:de:9f:80:05:15:3e:33:61:c1:
07:53:02:75:5d:e8:e2:05:00:a7:e8:87:71:f6:ed:c8:f7:0e:
d5:e5:b7:ea:82:3f:73:c8:67:69:fa:da:ee:30:d9:0f:99:bd:
80:99:59:b8:c9:b2:42:98:fa:2a:24:d8:e4:d1:97:cb:f1:65:
8c:ba:d2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:36:46 2025 by rpki-client