Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/0aZL-9obeBPlmVO0V4i28VYRckE.roa
File: 0aZL-9obeBPlmVO0V4i28VYRckE.roa (raw, json)
Hash identifier: I0toWrfMJ3OxTy/Km96DxC7KbSuKDhYNXb6RQEPSm9o=
Subject key identifier: D1:A6:4B:FB:DA:1B:78:13:E5:99:53:B4:57:88:B6:F1:56:11:72:41
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 276BBCEA
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/0aZL-9obeBPlmVO0V4i28VYRckE.roa
Signing time: Sat 01 Jan 2022 16:07:59 +0000
ROA not before: Sat 01 Jan 2022 16:07:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35297
IP address blocks: 93.170.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 661372138 (0x276bbcea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:07:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d1a64bfbda1b7813e59953b45788b6f156117241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:48:0d:ac:f4:88:65:b7:b6:9b:c6:b7:14:94:
b1:6d:68:7d:22:ad:b3:72:a0:ba:9b:62:17:78:44:
24:6d:f2:d5:95:1f:48:17:e0:c7:27:1b:31:1c:6d:
be:4a:60:5c:14:d4:14:95:b4:fd:f4:d7:18:69:70:
72:ea:0e:f4:48:5c:4c:15:36:bb:35:5f:43:93:f3:
23:e5:23:79:d5:74:1a:21:7f:9d:d6:60:b1:17:39:
70:11:61:12:11:53:b3:b3:9c:f1:85:c8:fd:29:de:
a5:fb:8b:41:01:39:1e:72:18:b8:34:f2:25:e9:51:
86:21:99:aa:e3:14:3e:e2:bb:62:8c:f3:0f:bb:d4:
4d:af:0e:42:9a:ae:7b:41:b2:ac:a2:d2:cc:a9:2d:
2d:2f:58:c6:a0:02:10:31:04:6d:34:9a:43:8e:a9:
b5:69:a9:36:30:b4:c2:ca:4c:73:a9:88:e2:b2:38:
c6:7b:5d:70:76:34:ec:1d:1d:bf:d6:bb:41:9c:97:
e4:99:ce:39:b1:1c:c7:c0:5d:e1:6f:15:5d:04:b1:
07:7b:5d:57:d0:0c:65:93:39:88:55:96:b4:4c:04:
f8:77:98:42:11:3b:e3:e4:f4:30:2c:ab:74:98:4a:
3a:2c:18:6c:b8:8f:d8:58:00:79:d1:eb:5d:ba:f9:
36:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A6:4B:FB:DA:1B:78:13:E5:99:53:B4:57:88:B6:F1:56:11:72:41
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/0aZL-9obeBPlmVO0V4i28VYRckE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.53.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:46:81:4e:d2:b1:16:3c:45:d0:7b:6b:5c:b5:83:7f:02:fd:
95:05:f1:e1:b6:35:e5:c1:8f:b2:94:fb:af:6d:bc:3b:3d:3d:
61:ee:35:f9:a4:fb:24:b4:c3:35:f9:98:7c:f4:7d:30:be:b5:
4f:af:36:72:c9:2d:51:3b:c3:d9:00:69:54:3d:e1:b0:3d:a5:
fc:6e:e2:dd:9a:0a:a6:d7:a6:eb:bf:f6:e5:a5:12:8b:c0:18:
a6:26:ce:57:16:5d:a0:b9:4b:b5:53:03:47:74:74:f8:af:d2:
22:73:e1:61:41:ff:c1:54:64:4f:ab:f6:31:ee:1b:d8:87:ec:
a8:c3:19:28:7c:0a:70:87:88:d6:9f:33:96:c8:07:49:53:ff:
b3:1c:ef:c9:d5:43:6b:2f:0a:f6:75:42:f5:04:d2:2e:5c:a6:
be:6d:7d:30:58:98:d1:04:30:59:28:55:ca:20:d1:b0:cc:fb:
dd:c3:40:1e:13:00:e7:93:58:a7:34:38:31:f1:9b:95:f3:6a:
d0:8f:32:32:10:07:b7:2e:e0:67:4a:16:e8:14:0a:57:f9:19:
99:68:70:d1:47:a1:86:ee:d1:09:66:a7:04:53:d2:15:28:81:
36:50:86:95:e3:1d:42:3d:a6:3b:a8:24:2d:34:c5:93:15:51:
d1:4f:10:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:25 2025 by rpki-client