Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/kJ4s5n06KMBQqEaY9JN8Z2OFvpU.roa
File: kJ4s5n06KMBQqEaY9JN8Z2OFvpU.roa (raw, json)
Hash identifier: OVsOOJusgonL87oxr8U+hQ/c/rKB1JpdGlULi4OlkyA=
Subject key identifier: 90:9E:2C:E6:7D:3A:28:C0:50:A8:46:98:F4:93:7C:67:63:85:BE:95
Certificate issuer: /CN=f26920bbd7fb70ef5dbcf2d0fea202bd95765eba
Certificate serial: 0722D7AE
Authority key identifier: F2:69:20:BB:D7:FB:70:EF:5D:BC:F2:D0:FE:A2:02:BD:95:76:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/kJ4s5n06KMBQqEaY9JN8Z2OFvpU.roa
Signing time: Fri 15 Apr 2022 07:08:56 +0000
ROA not before: Fri 15 Apr 2022 07:08:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62457
IP address blocks: 95.178.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119723950 (0x722d7ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26920bbd7fb70ef5dbcf2d0fea202bd95765eba
Validity
Not Before: Apr 15 07:08:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=909e2ce67d3a28c050a84698f4937c676385be95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3d:a4:a5:a9:2a:07:d6:3b:8f:63:2e:45:fa:
1d:58:63:c0:d1:f6:f8:27:7f:40:f5:1f:bf:0b:4d:
81:9f:37:89:3e:c3:ea:7c:40:24:3a:62:16:15:17:
ce:79:42:d2:b4:9f:1c:cf:0f:11:da:c6:ed:da:83:
ae:3c:cc:9b:2a:13:30:60:a0:2e:3a:99:33:dd:fc:
71:12:6c:1f:3a:a0:a0:1f:fd:fe:cc:e1:f6:44:4d:
7a:94:46:6c:55:3b:a5:33:c4:ac:43:0d:a8:48:56:
ae:ca:65:f4:b8:7d:60:40:5e:95:75:31:36:ef:11:
3b:e4:f1:5a:2e:c2:7e:ae:85:c3:ef:b0:ed:70:10:
d0:8e:c7:f0:8f:2f:f3:6f:40:93:eb:94:30:6e:b2:
cc:51:65:02:b8:68:a7:99:6a:cc:b6:cc:c0:21:43:
52:86:eb:75:c1:e6:fe:24:6f:17:1c:8c:2a:5c:5c:
f5:43:af:aa:23:78:66:2a:15:3b:71:43:04:e4:8c:
ac:75:ec:76:fe:f4:f6:33:df:da:e9:5d:e0:bb:9e:
84:e4:db:76:61:6a:a1:cc:db:0c:19:67:37:87:db:
48:73:9b:38:5e:12:0a:a3:24:2d:b1:e7:60:76:64:
0b:33:17:fa:34:4d:75:c5:ee:b7:b1:c0:ff:f5:42:
8f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:9E:2C:E6:7D:3A:28:C0:50:A8:46:98:F4:93:7C:67:63:85:BE:95
X509v3 Authority Key Identifier:
keyid:F2:69:20:BB:D7:FB:70:EF:5D:BC:F2:D0:FE:A2:02:BD:95:76:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/kJ4s5n06KMBQqEaY9JN8Z2OFvpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.178.120.0/24
Signature Algorithm: sha256WithRSAEncryption
41:51:06:be:fc:73:c1:d9:e2:bc:9d:87:8f:9a:39:ca:ba:d2:
76:16:d7:d4:b3:21:5a:82:2e:37:b1:c9:89:54:4c:e2:85:43:
4c:4c:96:fd:b0:d5:8d:9d:b5:f5:2a:90:f6:3f:c6:78:26:45:
46:55:8e:af:83:16:f9:b6:4f:25:76:1f:b1:d8:c4:73:40:81:
24:4c:2c:06:15:5b:3f:bc:06:19:b7:f0:af:df:22:fa:18:40:
1f:c4:30:cc:b3:35:3f:6f:21:e7:d7:16:af:54:01:69:67:f9:
a0:23:42:ee:bc:cf:6f:77:31:fd:98:65:fa:e9:74:7f:34:7a:
9c:70:10:65:b2:3a:dd:e3:da:02:78:a0:a3:58:fd:2f:25:88:
d7:ff:5f:0b:2a:b4:35:4e:ab:3a:34:e8:56:ec:af:22:50:b5:
04:7d:46:e7:8a:76:83:63:8c:79:40:f6:4e:ee:f8:8f:16:b6:
22:1b:c3:18:be:fc:65:be:6d:0d:63:a5:87:a2:d8:6f:54:ec:
af:6a:96:4f:0c:d7:84:cd:7d:2b:43:a9:fe:9e:d5:09:39:2b:
b5:13:8a:68:86:48:06:aa:3f:bf:2c:03:ed:ba:db:d8:89:94:
ff:db:6b:6d:76:26:86:b7:e4:82:25:f5:f5:74:64:40:1d:82:
e4:81:d4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:04 2025 by rpki-client