Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1evZ2nU5SRvqIucXya_u-8iHwZk.roa
File: 1evZ2nU5SRvqIucXya_u-8iHwZk.roa (raw, json)
Hash identifier: 1oRuro+A0RZcY64u/ulyqB0GapNxZi3sxFPJ8JL07VA=
Subject key identifier: D5:EB:D9:DA:75:39:49:1B:EA:22:E7:17:C9:AF:EE:FB:C8:87:C1:99
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 28E7C0A4
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1evZ2nU5SRvqIucXya_u-8iHwZk.roa
Signing time: Thu 17 Feb 2022 09:05:19 +0000
ROA not before: Thu 17 Feb 2022 09:05:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12365
IP address blocks: 93.170.224.0/22 maxlen: 24
93.170.228.0/22 maxlen: 24
92.38.96.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 686276772 (0x28e7c0a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Feb 17 09:05:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d5ebd9da7539491bea22e717c9afeefbc887c199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5e:e1:07:c0:76:e3:de:cc:04:4e:f2:f0:f2:
78:99:7f:7b:f5:cb:d4:9b:81:64:8f:8a:bc:57:14:
66:58:07:5b:6e:23:96:3d:63:83:84:1d:d8:1a:44:
45:ad:ed:64:1a:ef:b9:7f:89:ec:80:cd:0b:e5:90:
52:fa:96:0c:ce:2b:8f:23:f8:38:22:7a:31:97:7e:
2f:bf:ff:12:ca:fa:b2:4e:09:4d:32:72:ee:0d:78:
1d:8b:97:09:60:1c:54:76:e0:02:b6:33:91:fa:73:
47:69:6d:f9:b2:1a:b9:4f:d5:ff:d2:8a:2c:11:85:
eb:d7:fe:66:f4:9e:c4:45:9f:18:12:5e:0c:30:1e:
3b:b0:49:63:54:87:2e:70:e3:1f:1f:84:a9:af:02:
1f:0b:6b:ac:8a:84:ac:96:37:cd:24:5b:71:f1:16:
72:fe:48:b9:e0:2d:a0:30:4b:15:ad:b0:04:07:26:
3c:e0:3d:b8:16:8b:c7:c1:d0:68:61:39:d7:87:f6:
8c:2f:6c:5b:27:d4:b3:1d:d8:31:3a:0f:b6:48:3f:
5f:fc:df:8b:b9:ab:92:18:c3:96:4f:7c:44:71:dd:
7e:c8:e8:77:b5:ed:38:a1:23:18:4f:6b:8a:7a:86:
02:dd:b4:74:34:86:1d:2d:05:cd:f3:36:b9:f9:dc:
d0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:EB:D9:DA:75:39:49:1B:EA:22:E7:17:C9:AF:EE:FB:C8:87:C1:99
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1evZ2nU5SRvqIucXya_u-8iHwZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.96.0/19
93.170.224.0/21
Signature Algorithm: sha256WithRSAEncryption
40:97:5f:28:e0:34:d3:9d:6e:9c:5b:93:4e:4f:3e:aa:c3:0c:
27:e0:98:2e:53:d7:c5:1f:fe:db:e2:c1:45:8e:76:5c:ad:37:
ca:01:f8:60:4f:21:eb:69:0e:90:6c:3c:e9:e9:9e:9e:da:9a:
88:77:a1:58:5a:8b:ff:da:6d:24:36:39:f4:2b:f8:d2:54:98:
23:05:6d:b1:45:76:2b:37:5f:a2:44:ee:da:78:09:e3:88:65:
55:bb:07:b6:aa:bb:73:2b:91:52:c4:40:5c:fd:a4:2f:d8:6b:
2e:9d:32:30:17:62:04:61:07:a7:bf:c3:37:5f:43:9f:fd:e0:
95:6c:5f:5f:86:0e:e3:06:49:2d:0b:c8:03:85:ea:9b:9d:d8:
5c:95:32:d4:eb:01:33:8c:66:5d:e1:65:8d:95:3e:5d:8a:7f:
e4:0e:94:a8:6a:5a:68:d0:d0:6f:94:ad:81:e5:d0:fd:e6:c0:
ef:a7:2a:c6:b5:3d:d9:8a:3e:5c:51:54:81:00:56:73:b6:13:
4d:07:29:91:f4:a2:b8:15:6a:57:95:e9:12:19:ed:25:57:5b:
a2:f6:81:28:f9:f1:b9:ec:cb:75:4d:61:76:24:3b:a6:4c:88:
25:7b:50:bf:29:52:21:75:0a:97:d0:e3:9e:1e:e3:51:36:b5:
81:14:32:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:29:45 2025 by rpki-client