Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-KtuvmHxp_MQ3VlN98NZ68v4QE.roa
File: 1-KtuvmHxp_MQ3VlN98NZ68v4QE.roa (raw, json)
Hash identifier: BKAc4xbho24nUOJBgnOTZXOXgSxo7ckMS5oFxWZGLFI=
Subject key identifier: D7:E2:AD:BA:F9:87:C6:9F:CC:43:75:65:37:DF:0D:67:AF:2F:E1:01
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0186B68AE6E8525B1C4A2A0E3595B81C9089
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-KtuvmHxp_MQ3VlN98NZ68v4QE.roa
Signing time: Mon 06 Mar 2023 10:50:01 +0000
ROA not before: Mon 06 Mar 2023 10:50:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213029
IP address blocks: 93.170.6.0/24 maxlen: 24
95.47.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b6:8a:e6:e8:52:5b:1c:4a:2a:0e:35:95:b8:1c:90:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Mar 6 10:50:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7e2adbaf987c69fcc43756537df0d67af2fe101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:dc:d3:c2:4b:0f:b8:10:aa:c4:71:35:a6:cb:
89:83:0d:87:f4:1e:5c:ca:62:b0:06:4f:d3:12:92:
65:7c:16:3b:d5:ac:18:c7:c2:5f:4d:7d:51:74:ff:
07:50:a0:0a:bd:6e:25:9a:3e:7f:46:3c:28:3b:8d:
7c:3e:4e:db:24:41:6b:de:da:34:97:f9:6b:08:99:
93:0a:6b:5b:84:17:f2:38:c1:c3:a2:ba:d5:29:a8:
55:4a:d7:40:4d:f9:dd:0f:32:dd:1d:2b:ab:c0:63:
98:dd:b5:95:b0:47:9b:fb:dc:55:d0:42:13:68:3e:
1d:d5:b3:ce:b2:5b:0f:18:b3:19:49:40:15:eb:cd:
14:17:82:ed:9c:09:a7:6b:eb:88:c7:e5:2d:b9:c3:
34:88:a1:75:0f:65:e7:0e:1b:6e:6b:5d:51:9a:b9:
b8:6a:9b:1f:91:8a:dd:f3:ba:99:44:15:67:03:54:
59:b6:b8:0e:c4:bb:54:f3:1b:76:4b:68:2c:84:7f:
c4:24:05:84:fa:fe:8e:96:9c:a0:6a:aa:80:50:07:
f3:a8:59:08:95:4a:b2:9b:c6:72:9c:9f:46:0a:0e:
d7:c3:02:44:5c:34:2f:ff:d4:f4:60:54:cf:84:20:
a7:ab:54:4d:ec:c5:46:0a:28:84:54:83:d5:dc:3a:
22:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E2:AD:BA:F9:87:C6:9F:CC:43:75:65:37:DF:0D:67:AF:2F:E1:01
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-KtuvmHxp_MQ3VlN98NZ68v4QE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.6.0/24
95.47.127.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:a2:96:e8:87:4d:04:5a:a9:1e:bc:d6:42:f8:6b:7f:e6:67:
f4:58:40:6a:b1:71:49:18:0f:84:6f:ff:6e:72:25:d0:c0:82:
ae:93:6f:71:67:db:bc:62:3d:db:f5:e5:34:5d:95:37:ea:3d:
04:a1:d4:f5:44:b1:80:bf:a0:1d:8e:98:4c:5d:2e:25:47:ea:
d6:45:02:ca:1b:db:6f:31:5e:59:96:58:6a:39:d2:87:4f:ec:
3c:3e:1b:3c:73:e8:f5:6f:76:9a:82:d3:6d:c6:c0:36:3d:03:
4d:a7:ab:45:aa:50:14:0c:49:dc:1c:22:ca:1c:7c:ad:2f:23:
f1:21:65:c6:7a:07:55:2d:02:63:4e:93:d0:02:96:5e:79:09:
da:ec:bd:09:59:fb:96:7d:8c:22:08:d5:b5:b7:77:42:d8:bd:
9a:ed:91:17:97:d1:70:70:f3:73:c2:e1:ff:25:fa:59:30:55:
0e:6a:34:f9:31:67:2a:79:de:2c:45:4f:23:a5:ca:62:d2:7e:
54:95:a3:1a:84:ad:0a:53:b6:3c:ae:4c:c9:23:d1:4f:57:5f:
48:0e:22:8f:bf:09:aa:65:24:54:e2:3d:e3:21:41:e6:c4:ab:
50:7a:f0:5c:0d:b2:02:c7:35:f4:18:47:72:93:33:fd:bc:e8:
8a:ae:d7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:32:56 2025 by rpki-client