Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/v3N9KcWtdmygFeSyIoKHOl81Ahc.roa
File: v3N9KcWtdmygFeSyIoKHOl81Ahc.roa (raw, json)
Hash identifier: l+zCD57c9dPXG6w7qRNo+zSQSu3gxohoGJG0DwzU4H8=
Subject key identifier: BF:73:7D:29:C5:AD:76:6C:A0:15:E4:B2:22:82:87:3A:5F:35:02:17
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27F06D27
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/v3N9KcWtdmygFeSyIoKHOl81Ahc.roa
Signing time: Sat 01 Jan 2022 16:09:11 +0000
ROA not before: Sat 01 Jan 2022 16:09:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60442
IP address blocks: 95.47.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 670068007 (0x27f06d27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf737d29c5ad766ca015e4b22282873a5f350217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7c:24:e7:16:cb:af:78:36:55:98:b6:d2:7f:
d0:4a:fe:3b:60:f2:4e:1a:ae:66:3f:f7:4d:18:fd:
69:d6:74:2c:41:2b:0b:38:9b:39:09:aa:28:0e:5c:
cf:33:c9:86:69:97:0f:3b:ab:23:fd:cf:14:e0:ab:
eb:9c:c5:bb:12:8c:79:88:5a:7e:98:34:ad:b8:b5:
b5:64:d0:d8:d1:dd:df:7e:fc:0f:c0:6d:e3:27:68:
fc:2b:5d:72:62:a5:f3:e6:6a:9b:3e:60:c6:5e:7e:
69:c8:df:5c:df:f8:45:18:e7:c2:fe:71:ce:d1:65:
79:4d:cf:94:c9:d7:6b:65:90:85:4a:75:a7:51:c6:
2f:59:22:95:65:e4:7c:60:90:51:99:b8:49:3d:5b:
9b:cf:dd:b9:24:5a:aa:10:ef:7b:a5:3b:cc:55:09:
14:85:16:f3:4d:c5:6d:0e:a9:39:fe:7f:51:7e:0b:
e9:f4:98:cc:47:64:24:2a:a1:97:ee:0b:f5:a8:05:
5e:ad:82:36:92:6b:cd:59:43:98:52:ee:a0:d1:43:
a7:10:4e:96:df:d4:8b:4a:5a:57:7a:70:b6:a5:7c:
ff:50:f6:0c:50:04:c2:4a:7b:57:dd:53:0f:99:64:
15:20:b7:1d:b4:83:b4:9d:a3:90:ca:6c:cc:8e:15:
89:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:73:7D:29:C5:AD:76:6C:A0:15:E4:B2:22:82:87:3A:5F:35:02:17
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/v3N9KcWtdmygFeSyIoKHOl81Ahc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.159.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:29:14:97:0f:a7:90:dc:6c:fd:7a:1a:9b:44:1f:c1:22:1e:
33:98:8b:3e:5f:b9:ca:cf:0f:19:17:92:1c:22:ef:c0:89:e4:
11:b6:37:4d:d6:76:14:e9:35:44:43:e5:58:da:71:b2:4a:85:
f7:79:dc:22:f7:5d:60:ff:cb:40:5e:c6:b8:53:76:d3:5d:6c:
50:85:d4:5e:83:7c:1d:51:60:dc:fd:b4:d6:02:ff:fd:64:4f:
da:d1:d4:ae:4f:20:cd:6b:0e:46:a3:56:5f:ab:c1:ff:dc:79:
8d:45:41:88:7a:4d:fd:ea:94:bd:47:c2:bc:30:05:9f:9f:50:
90:07:f1:bd:c3:96:15:d6:b9:3b:9b:cc:75:36:a8:a6:da:89:
07:5f:c7:18:62:28:9d:ee:96:20:7b:b4:54:a4:9c:ab:af:6b:
c3:64:48:a4:0e:30:a7:6a:8b:a0:69:ca:1e:de:ae:f1:f9:e4:
33:6d:a6:3d:a1:38:1c:83:9a:00:4e:87:96:4f:32:bf:9f:e0:
cc:10:35:0d:10:66:52:81:26:29:04:aa:de:4e:fe:dc:8d:17:
6c:93:6b:8c:ea:15:fe:22:93:1e:ed:62:db:d5:d9:1d:f0:17:
26:a6:b1:b2:c4:e0:90:23:48:cd:1b:bd:2b:d2:07:d3:23:d5:
ef:66:89:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:39:03 2025 by rpki-client