Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tm_mUrkMjpp-NYjTBFJ_5Wq-eKs.roa
File: tm_mUrkMjpp-NYjTBFJ_5Wq-eKs.roa (raw, json)
Hash identifier: Uh02XAfGy9mUa33iLQ9f5j7zGJGQiUTwhm9wE38Is88=
Subject key identifier: B6:6F:E6:52:B9:0C:8E:9A:7E:35:88:D3:04:52:7F:E5:6A:BE:78:AB
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095982DAC1C487CDC179C6C5CD790BC
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tm_mUrkMjpp-NYjTBFJ_5Wq-eKs.roa
Signing time: Mon 02 Jan 2023 03:45:30 +0000
ROA not before: Mon 02 Jan 2023 03:45:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204532
IP address blocks: 95.47.168.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:98:2d:ac:1c:48:7c:dc:17:9c:6c:5c:d7:90:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b66fe652b90c8e9a7e3588d304527fe56abe78ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a1:c2:76:dd:8c:e3:e6:55:fd:6d:98:8c:38:
15:15:87:c8:2e:e6:78:c6:c7:ce:7e:f1:7f:38:17:
cd:dc:d0:40:17:0e:4c:7b:a2:aa:23:5f:57:c8:ec:
69:c7:02:4b:73:ac:ce:80:54:ce:eb:45:75:f0:83:
ef:98:9d:ec:c8:75:58:a8:2b:19:e7:68:eb:0d:68:
b9:b7:e0:45:ff:68:7c:eb:9f:4c:ca:ce:11:7f:8e:
6c:3b:83:b2:de:d3:95:5f:5e:e5:0c:f9:30:8e:af:
ea:d2:03:7b:6a:f5:44:53:83:dc:95:30:0e:df:9f:
4b:dc:27:29:17:ac:78:d2:72:7c:07:ba:38:27:e5:
43:5d:2b:79:1f:1e:a7:c2:32:58:55:75:37:bf:40:
1a:31:2f:1e:10:20:cf:54:78:dd:74:28:75:7f:af:
0c:0b:51:5a:de:b4:e3:61:36:32:59:91:80:4c:e6:
ed:17:45:99:f6:03:a2:88:86:b3:58:61:41:99:77:
5c:56:52:4d:3d:71:c7:4d:4b:1f:d8:98:1b:66:08:
ce:eb:64:44:fc:4b:b2:97:94:9f:9b:3e:ba:ca:d6:
40:fe:1f:95:1d:8f:91:17:d4:69:89:7f:98:6f:65:
46:51:96:95:40:67:3b:1e:fa:d4:b3:6e:61:d6:b5:
53:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6F:E6:52:B9:0C:8E:9A:7E:35:88:D3:04:52:7F:E5:6A:BE:78:AB
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tm_mUrkMjpp-NYjTBFJ_5Wq-eKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.168.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:09:0b:a7:1c:8e:fd:cb:d1:5f:19:44:fc:73:29:d3:be:4c:
68:f1:e2:8d:63:cd:54:1b:ef:c2:8f:92:f9:f2:12:87:6a:cd:
07:03:7d:f6:9e:6b:2b:6e:2a:5c:86:1a:a4:a1:b2:f9:06:7e:
d0:85:20:20:ea:28:02:4b:ce:c2:ee:e4:3a:9c:cf:e8:72:b9:
74:e9:46:13:f0:c9:dd:66:f8:fe:36:6f:de:1d:44:e4:51:79:
a7:df:2a:af:75:e3:57:42:63:cd:bd:11:b5:69:d8:4f:9c:74:
ee:25:f1:12:30:84:0a:26:45:09:1c:ec:66:ab:68:2b:1b:3f:
23:c5:fa:de:6e:0c:19:bb:0b:53:7f:76:61:16:19:b3:1d:ab:
d8:3c:60:f7:a5:f4:15:41:9a:30:a3:52:c6:9f:0b:16:fd:ca:
d8:0e:87:d6:b5:82:fe:8d:8e:54:0a:5e:c9:c5:91:68:0e:60:
e6:82:15:11:16:7b:49:04:e5:ae:74:d1:fd:16:e3:36:60:fb:
ab:9f:02:4f:e2:e0:01:0a:a7:7c:60:8c:0d:b6:09:ae:50:7c:
f0:5d:49:c1:02:99:ca:65:28:66:99:54:e6:b1:04:6a:73:4a:
a1:0b:37:77:f3:dd:44:bc:82:45:9a:be:b4:3a:1a:14:c0:fa:
5a:0e:d3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:22 2025 by rpki-client