Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/5O-efv0E8H8ib-KcHA4u_M65eNI.roa
File: 5O-efv0E8H8ib-KcHA4u_M65eNI.roa (raw, json)
Hash identifier: 9GR2u9su/NvTvGYz9lb3PFEIauRCJeRlA/tKtAMKGNw=
Subject key identifier: E4:EF:9E:7E:FD:04:F0:7F:22:6F:E2:9C:1C:0E:2E:FC:CE:B9:78:D2
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570957AB747A3806D7D1C78D852C8A93F
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/5O-efv0E8H8ib-KcHA4u_M65eNI.roa
Signing time: Mon 02 Jan 2023 03:45:22 +0000
ROA not before: Mon 02 Jan 2023 03:45:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61965
IP address blocks: 93.170.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:7a:b7:47:a3:80:6d:7d:1c:78:d8:52:c8:a9:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4ef9e7efd04f07f226fe29c1c0e2efcceb978d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a6:5e:72:50:57:d4:64:65:40:d7:6b:69:39:
9a:e8:7c:f8:e4:95:06:43:92:bc:25:cb:59:95:f5:
cf:89:c6:ba:0f:d7:0d:55:31:a0:32:82:55:75:e0:
73:76:b7:b2:45:2d:39:fb:c7:42:d1:a2:32:bc:53:
1f:64:5a:98:a8:c9:5c:94:7a:8c:a1:29:4a:a1:76:
b2:25:e5:12:05:44:33:fb:a6:c1:e2:a0:d4:86:d0:
b7:21:59:ea:6f:3b:61:e1:b0:16:68:3e:49:a8:b6:
50:a8:26:6f:17:80:41:3e:92:63:88:02:b6:ca:f7:
e3:f7:1b:d6:cb:6b:8e:a0:45:9b:4d:72:1b:d7:69:
b2:13:8f:51:1b:b1:3b:9b:ca:cd:c5:6b:29:c1:f7:
9d:85:29:75:fa:ea:2f:7d:14:ba:12:53:19:ae:05:
98:da:74:e9:dd:9e:8c:4c:f5:e4:fa:f1:96:87:b1:
2d:0b:17:a9:e4:f8:a3:4f:70:35:69:7b:c1:c9:f0:
9b:b6:b9:fe:8f:83:82:a0:1f:6e:c4:8b:ce:f1:b6:
09:70:73:24:1d:38:3d:dd:77:00:2b:77:65:90:22:
e3:9e:02:30:1d:bd:30:99:0f:65:64:49:dd:0e:37:
b4:24:af:6c:22:85:fe:50:fc:dc:4f:64:8f:69:89:
47:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EF:9E:7E:FD:04:F0:7F:22:6F:E2:9C:1C:0E:2E:FC:CE:B9:78:D2
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/5O-efv0E8H8ib-KcHA4u_M65eNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.75.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:3e:ba:93:9c:11:0f:29:11:b8:ac:36:3c:bc:ab:fc:14:9f:
1c:f2:05:a2:eb:bc:9f:0b:10:90:b0:8c:d2:f0:19:ae:57:7d:
f0:69:10:0e:96:85:9a:b7:9c:29:8b:12:46:5c:82:9b:63:63:
39:87:a6:00:27:5b:d2:4b:0f:0e:f2:e6:c4:0c:44:78:62:2d:
c8:06:ee:96:75:ac:3d:79:4f:e9:eb:c9:85:1b:1b:ad:5e:87:
64:2c:b3:eb:e0:aa:12:71:9a:1e:22:e1:4d:b6:ec:4d:f9:23:
0a:e1:12:db:cb:f7:80:79:12:77:25:03:45:37:9a:e7:87:df:
3f:2a:9e:84:6b:73:6f:30:26:30:19:a3:46:19:03:16:8e:f6:
c0:72:48:42:cc:66:21:6f:6d:af:60:31:9e:fa:5a:1f:13:24:
d3:90:c5:93:d3:ff:d8:5a:24:7b:dd:f4:b9:5e:7e:ad:44:14:
8c:01:af:0c:ab:82:ae:61:65:6f:f2:81:54:16:8f:61:35:46:
b6:f3:a5:24:bc:fe:dd:b8:f7:0f:d5:4c:70:88:a5:43:bf:77:
ee:b2:da:2d:dd:8f:89:4f:9b:7e:7e:83:85:20:df:8f:62:73:
be:1f:fb:20:8b:04:2c:41:d1:fb:71:3e:43:b8:14:7e:93:5f:
68:5e:ff:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:33 2025 by rpki-client