Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1sVgWocLd0vcR315_t0E4lWiT1Q.roa
File: 1sVgWocLd0vcR315_t0E4lWiT1Q.roa (raw, json)
Hash identifier: JCnY4oWUQyMpmD4slmBYlcJ3QigJNV5NMHKuDHaYWyY=
Subject key identifier: D6:C5:60:5A:87:0B:77:4B:DC:47:7D:79:FE:DD:04:E2:55:A2:4F:54
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 2759A186
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1sVgWocLd0vcR315_t0E4lWiT1Q.roa
Signing time: Sat 01 Jan 2022 16:07:48 +0000
ROA not before: Sat 01 Jan 2022 16:07:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8870
IP address blocks: 93.171.240.0/22 maxlen: 24
93.171.246.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 660185478 (0x2759a186)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:07:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6c5605a870b774bdc477d79fedd04e255a24f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7a:71:aa:52:c5:f2:bd:8b:a3:25:2a:78:20:
ca:c3:59:94:d3:f5:d2:30:d4:dd:4c:38:fc:81:86:
d0:37:6d:8a:78:04:ac:d2:15:f3:ce:9f:b6:3a:46:
65:2a:ca:6f:de:10:15:7b:7a:da:74:8a:f3:be:05:
c2:ce:18:35:00:b8:d3:ec:28:30:ff:05:e4:1b:02:
a0:11:d3:81:f2:7b:6a:74:d5:57:d0:55:2a:9d:05:
24:71:56:36:ae:6e:97:15:b8:7b:d5:4e:17:a9:ee:
64:6d:d9:3f:98:bc:54:ff:50:c9:a5:ec:b3:bb:3a:
5f:fa:06:47:3d:db:73:3b:a4:1d:c2:21:68:2e:b0:
e1:8b:6a:f6:39:de:fc:2f:83:5d:b4:a3:86:e4:3c:
3a:22:66:1c:5c:f6:33:c4:93:a4:e6:df:44:4f:ca:
41:02:ce:1d:98:63:c3:c8:6f:6d:bb:1c:12:e9:d6:
23:ab:f0:ec:d1:50:0f:76:ea:e4:55:f5:3d:d3:4a:
72:ba:5f:38:6f:2e:d7:4a:cb:de:01:66:85:b4:03:
2b:5e:6f:bd:7b:b5:ca:04:28:3a:18:52:e9:e6:e6:
41:31:4b:e0:72:8a:01:84:ca:87:0e:84:df:ff:0a:
e5:b2:43:3a:48:67:5f:41:d3:cd:17:b5:b4:c2:dd:
49:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C5:60:5A:87:0B:77:4B:DC:47:7D:79:FE:DD:04:E2:55:A2:4F:54
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1sVgWocLd0vcR315_t0E4lWiT1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.240.0/22
93.171.246.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:ac:a6:88:3a:4e:c8:36:7c:65:3c:ad:69:41:df:ca:15:92:
cb:ad:d8:7a:9d:cd:a0:18:ec:46:0f:1c:59:be:17:04:a0:64:
be:25:9c:3c:7d:13:37:df:dc:eb:4c:46:d1:49:e9:d0:4e:6a:
5e:71:7b:82:7e:d5:92:c2:bd:f9:66:6b:3d:80:51:15:f9:42:
1f:43:31:26:8c:d4:08:a2:bd:70:10:21:68:8b:d8:37:a2:6a:
03:23:44:fe:95:ea:c4:8c:a2:e4:70:f8:f8:5a:ae:be:2e:5c:
c5:2c:38:a1:78:bc:b6:14:33:9f:cc:dc:d7:87:3b:6a:80:64:
76:c2:9f:e6:f3:b9:91:0a:28:7f:65:4c:f9:cd:ff:fd:d1:e6:
c1:33:ee:a1:bb:6b:94:a0:a2:db:ad:61:72:92:e9:4e:88:d5:
f0:bc:d7:ac:0a:b0:a8:f7:45:75:bc:f5:06:d0:c7:42:53:67:
e6:a3:7b:7d:52:fa:d5:7e:d2:13:90:59:d4:d1:f8:c9:ba:35:
52:91:7c:7a:9d:04:eb:7a:0e:84:74:36:25:67:8b:b2:7a:f3:
03:8e:e3:01:82:d4:47:1d:07:f0:7b:07:e6:f5:77:15:a4:97:
6a:b9:15:34:91:aa:87:54:52:4d:18:97:2e:d4:bd:5b:55:7c:
7e:9a:8f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:16 2025 by rpki-client