Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/yGQ71p63ybEYBMiAqnwxnhiVF18.roa
File: yGQ71p63ybEYBMiAqnwxnhiVF18.roa (raw, json)
Hash identifier: O4dJF4N1BXGLc+8p18o08DtRYnhAglquDkI9Ek3Uqv4=
Subject key identifier: C8:64:3B:D6:9E:B7:C9:B1:18:04:C8:80:AA:7C:31:9E:18:95:17:5F
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 2A177E53
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/yGQ71p63ybEYBMiAqnwxnhiVF18.roa
Signing time: Wed 01 Jun 2022 09:32:25 +0000
ROA not before: Wed 01 Jun 2022 09:32:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58254
IP address blocks: 95.47.153.0/24 maxlen: 24
146.120.16.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 706182739 (0x2a177e53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jun 1 09:32:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8643bd69eb7c9b11804c880aa7c319e1895175f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:29:9f:78:7e:d2:ae:83:a6:f4:88:f9:36:f2:
01:d5:11:e7:38:79:8f:52:e4:b4:00:65:2c:9b:14:
ab:66:f6:0a:b9:0d:78:d0:34:5b:a6:98:4b:aa:d9:
1b:f2:53:af:10:9c:eb:c4:7f:85:e1:91:36:de:a4:
cd:4b:ec:6b:91:c9:3b:ad:49:4e:3d:c9:6b:1f:e2:
b1:f9:4f:51:10:07:ec:05:b7:cd:fd:14:55:d6:d6:
ff:79:81:7e:7d:b6:eb:29:21:b4:91:5f:67:90:65:
8e:c5:41:93:e2:cd:45:d3:ce:2e:05:1e:39:c1:f5:
54:ab:04:30:10:d0:4b:37:f5:49:67:e5:aa:33:d5:
41:cf:b8:d9:a8:8e:75:73:e3:f3:5a:d1:b4:f6:b8:
d5:1e:63:4c:d4:65:29:ca:b7:cc:17:36:8c:8c:fd:
52:c8:2f:98:fc:32:2b:e6:5b:ba:15:71:c9:88:f1:
52:9f:08:e4:74:b8:5d:d3:0b:cf:5f:fa:1e:b6:dc:
97:a5:f1:70:40:5f:5e:a2:39:87:89:3f:11:02:b3:
64:e8:ac:5b:8c:3c:30:24:03:63:84:65:c9:22:9b:
53:65:1c:4b:a6:7a:aa:8f:81:15:a9:87:87:43:e4:
6f:20:9e:7d:95:9b:b6:e2:8a:0e:02:f1:4a:4d:ef:
5b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:64:3B:D6:9E:B7:C9:B1:18:04:C8:80:AA:7C:31:9E:18:95:17:5F
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/yGQ71p63ybEYBMiAqnwxnhiVF18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.153.0/24
146.120.16.0/22
Signature Algorithm: sha256WithRSAEncryption
56:f8:36:fa:a7:56:89:fb:f3:50:c5:c2:94:0b:eb:7d:fd:96:
17:4b:92:7f:60:c7:25:df:fa:60:92:49:44:c2:74:52:76:9e:
c1:3f:75:44:fd:1f:a5:74:18:13:f1:4d:aa:84:1c:14:02:7e:
2c:46:55:d7:aa:9d:ac:c3:9f:e3:62:56:d3:6b:50:bf:c4:13:
cf:7e:62:e8:b5:60:4d:c1:72:6f:6d:28:85:45:27:6b:95:b0:
be:02:75:21:55:62:22:d9:8b:fa:d7:9c:37:59:88:77:c1:35:
bf:ef:fd:95:0d:65:c2:ec:d9:fc:cf:fd:0d:7c:68:e9:91:13:
3b:c5:42:42:10:cf:12:79:31:95:74:08:7b:25:59:fe:e2:8c:
11:4a:35:ab:2e:7b:94:40:b8:3f:17:6d:25:b8:43:3a:ef:05:
f5:8c:f9:37:8b:03:db:4d:3b:ac:31:e5:23:f9:17:8d:44:5f:
c5:95:c6:29:00:24:5e:c3:21:21:b7:3d:5d:68:3c:6b:9e:d1:
1b:25:5b:e9:67:65:66:e6:4c:52:91:f2:c7:5b:87:38:be:61:
83:0f:1a:e9:c8:94:65:6c:1e:6e:1e:2f:11:7d:42:03:3f:a7:
49:73:bb:36:a4:98:72:05:30:10:6d:6a:28:db:b7:f5:04:0c:
12:52:60:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:15:29 2025 by rpki-client