Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/0lvgCp7w4d-F9ToJGf94cCEqKEc.roa
File: 0lvgCp7w4d-F9ToJGf94cCEqKEc.roa (raw, json)
Hash identifier: vpLvEw8Fcdv0d7+kYo1yxqEikz3E0+cuZ5oJHNM3AmU=
Subject key identifier: D2:5B:E0:0A:9E:F0:E1:DF:85:F5:3A:09:19:FF:78:70:21:2A:28:47
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 37906376
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/0lvgCp7w4d-F9ToJGf94cCEqKEc.roa
Signing time: Sat 01 Jan 2022 06:01:50 +0000
ROA not before: Sat 01 Jan 2022 06:01:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42440
IP address blocks: 94.183.58.1/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 932209526 (0x37906376)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jan 1 06:01:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d25be00a9ef0e1df85f53a0919ff7870212a2847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4d:ce:96:c8:53:21:f6:e1:0b:33:6b:e5:45:
f0:06:29:6a:76:08:ad:0e:b7:81:15:b5:09:ea:d3:
2e:ba:c2:94:46:a2:86:55:ae:50:01:ae:54:42:cf:
d8:5a:17:84:f4:63:74:25:a6:5c:5c:76:1f:78:ab:
58:db:19:d7:d5:83:d9:6e:f7:e3:b1:93:3b:15:c0:
08:9b:66:ea:5a:0f:dd:3b:be:08:1c:90:13:9b:18:
35:7c:0c:2b:d0:7d:ac:4e:a5:b0:2b:4b:9c:10:77:
aa:f3:f2:d5:fc:8a:cb:6e:b5:78:70:77:f9:f6:ef:
32:7d:a0:48:ae:03:2d:de:0f:7c:8d:80:53:d0:16:
3c:e6:27:5f:a4:46:c5:ad:8b:23:ee:0c:3d:51:7c:
85:bb:43:d7:75:2c:1e:d5:90:44:24:dd:57:b9:d7:
a9:25:18:9d:e2:82:ac:8c:ce:30:a8:2f:6a:6b:36:
e6:e4:3f:03:3c:0f:f0:5e:91:84:24:8f:51:4d:30:
47:ab:6d:18:40:5b:75:40:8f:92:04:21:9a:a4:3f:
0c:67:eb:c2:b4:46:3b:0a:03:67:9c:14:ce:8e:4f:
1b:34:aa:c7:e8:de:03:46:99:89:ea:af:eb:84:0c:
60:ca:79:03:6d:f2:95:45:cb:7a:33:a1:31:bd:c6:
b5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5B:E0:0A:9E:F0:E1:DF:85:F5:3A:09:19:FF:78:70:21:2A:28:47
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/0lvgCp7w4d-F9ToJGf94cCEqKEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.58.1/32
Signature Algorithm: sha256WithRSAEncryption
7c:b7:49:73:12:77:48:38:85:1f:2d:e3:16:10:ed:13:66:71:
ae:0f:8b:d1:bb:ef:18:51:cb:fd:8a:8f:0e:73:0b:e9:f3:31:
87:7a:fc:f9:0e:de:19:3c:d1:5b:d3:e6:7b:9f:78:6a:93:b2:
d5:60:32:ff:c7:94:9b:c7:1c:a8:27:45:ed:27:e4:fb:d9:33:
00:db:f8:14:a8:2c:97:f9:ae:48:ce:f1:78:07:cf:ae:78:0a:
f1:7d:3f:dd:a0:00:b4:05:57:39:4e:ea:c4:81:9e:3e:52:b0:
31:5b:00:f9:59:0f:63:9f:b8:86:d6:3c:7a:06:6d:c1:cc:70:
07:0f:b3:52:71:6d:7e:c2:33:f1:3c:83:48:14:a0:6e:f5:da:
5e:d1:ea:ff:55:37:92:33:4e:42:96:0e:98:be:1c:c1:58:c9:
c3:26:b2:9d:bc:32:a3:1d:12:43:1f:9d:fc:60:b3:97:c9:ee:
84:69:71:a5:85:93:09:f1:2a:e5:75:c9:92:4e:63:18:72:7a:
29:2a:05:2a:18:fa:44:3e:6a:d2:3c:65:09:54:a4:f1:03:0d:
22:12:a7:39:e3:cf:b7:46:63:68:a4:f0:25:8a:e9:59:1e:86:
7b:95:2c:f5:5e:2c:4e:45:c0:4e:d2:6b:85:a1:4c:95:22:96:
bf:21:5a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:04:58 2025 by rpki-client