Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/z2xDX2ZTN3mrBmuab13pp2EU3f4.roa
File: z2xDX2ZTN3mrBmuab13pp2EU3f4.roa (raw, json)
Hash identifier: XtOQSboGNUkCYhiTz4dR5E6yXANC5PZ3a3XF+h7jNn0=
Subject key identifier: CF:6C:43:5F:66:53:37:79:AB:06:6B:9A:6F:5D:E9:A7:61:14:DD:FE
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27AEC8E8
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/z2xDX2ZTN3mrBmuab13pp2EU3f4.roa
Signing time: Sat 01 Jan 2022 16:08:36 +0000
ROA not before: Sat 01 Jan 2022 16:08:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49631
IP address blocks: 146.120.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 665766120 (0x27aec8e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf6c435f66533779ab066b9a6f5de9a76114ddfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7b:3d:3c:9e:b8:bb:32:42:39:5a:18:a0:b9:
50:9c:79:47:88:29:a5:f1:05:da:1c:c4:71:c8:9c:
80:7f:38:56:df:66:59:64:51:48:c4:87:56:5d:96:
bc:72:64:2b:81:12:83:17:95:db:be:11:e2:c7:90:
cf:c6:1b:e5:a7:49:4f:da:e4:1a:28:02:79:f9:b0:
56:3c:dc:ad:ec:b8:a1:86:8f:f2:85:0f:67:7b:2e:
e4:ff:b5:f2:d5:fe:1e:4e:f7:87:14:b3:3d:40:e0:
d6:73:c1:da:b0:ee:07:65:15:a9:1e:fe:c9:80:dc:
dc:9b:75:0b:e2:ce:c7:98:75:79:05:b7:6a:49:7a:
e1:4b:4a:2b:67:76:83:45:ed:63:13:1f:26:ac:9b:
ac:98:26:74:55:50:f2:2b:06:24:14:c7:fd:11:a6:
c8:b3:4c:78:ab:72:8c:6a:52:fd:4f:89:5c:4a:a1:
41:40:85:d8:e4:03:be:da:59:85:45:95:c6:8b:90:
4b:6e:5e:37:34:59:9a:07:6e:db:f2:99:07:63:08:
50:3e:7f:be:60:d5:28:06:5a:84:27:c2:88:f5:0d:
73:e8:14:2f:d3:5e:41:79:0c:bf:5d:8c:25:7d:1b:
50:16:a8:8a:50:8d:3c:2f:45:5f:3b:05:24:5d:fb:
2b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:6C:43:5F:66:53:37:79:AB:06:6B:9A:6F:5D:E9:A7:61:14:DD:FE
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/z2xDX2ZTN3mrBmuab13pp2EU3f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.95.0/24
Signature Algorithm: sha256WithRSAEncryption
14:9b:2f:4f:24:d6:67:fb:76:5b:2b:47:e0:e3:18:6a:08:dc:
71:f6:47:83:9a:e6:86:cd:6a:fa:28:a3:06:6b:f1:0c:24:40:
a0:73:95:76:1d:81:3f:19:a8:29:7f:27:e3:71:1c:7c:aa:13:
02:c2:23:a6:bd:c2:c5:c9:47:e6:01:d6:84:93:83:a5:42:34:
4e:fb:d9:86:1f:67:21:33:d8:4d:53:f0:da:f5:96:41:95:63:
3b:5e:e6:8b:85:19:26:de:a5:44:58:75:b2:b3:d5:de:31:9c:
a2:a8:1e:ee:5e:5b:29:12:ad:a3:bd:ea:eb:21:bc:73:ab:0f:
e7:5b:91:ec:4e:c2:df:7c:e7:d7:49:f4:44:e0:ed:32:d9:01:
aa:09:bf:0b:0a:7e:80:bd:6d:db:40:e5:04:fa:47:0e:6f:bc:
23:5f:4b:1a:97:4e:54:3f:8e:86:03:30:3a:88:45:57:92:79:
9d:65:a0:12:bf:05:b6:27:d4:a8:89:e9:5f:63:14:1c:0a:08:
0c:db:32:b1:11:fd:96:dd:6e:f4:12:19:cd:16:ce:d7:01:6a:
1c:fa:3a:c5:7c:20:37:3a:fb:59:4a:05:bc:5e:e9:26:90:d0:
b9:69:4b:e1:17:1a:58:e0:55:ad:3d:9d:21:df:94:7b:5c:eb:
32:e6:7f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:32 2025 by rpki-client