Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/65772d48IXgSbIfKn4LnU37YBp0.roa
File: 65772d48IXgSbIfKn4LnU37YBp0.roa (raw, json)
Hash identifier: mJ8LaNgFjLCOdgRAXqAe9RpsOzYVyBTIiXyBWh3YoOQ=
Subject key identifier: EB:9E:FB:D9:DE:3C:21:78:12:6C:87:CA:9F:82:E7:53:7E:D8:06:9D
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570957312340F5C7F37540BD7A46016D1
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/65772d48IXgSbIfKn4LnU37YBp0.roa
Signing time: Mon 02 Jan 2023 03:45:20 +0000
ROA not before: Mon 02 Jan 2023 03:45:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61240
IP address blocks: 93.170.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:73:12:34:0f:5c:7f:37:54:0b:d7:a4:60:16:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb9efbd9de3c2178126c87ca9f82e7537ed8069d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:46:6a:f4:e9:c0:f7:ae:ad:63:f3:40:56:15:
7e:fa:ff:10:23:a1:6a:6b:07:00:40:be:45:50:45:
b5:d2:9b:37:a3:83:4b:bd:eb:61:1a:c3:79:3a:c2:
4b:e9:dc:b6:bf:25:8d:06:a6:22:9a:34:bb:f8:47:
84:f7:50:27:70:eb:63:fe:f3:79:15:fc:91:8d:1f:
78:78:5b:c0:27:60:38:49:1a:9b:0e:c3:1c:c9:ce:
b7:a6:d7:e0:a7:02:14:5a:86:40:e6:92:e6:9e:5e:
af:e8:67:e4:cd:5c:3d:e1:d0:26:3b:9a:78:bd:c8:
22:63:7d:7d:f3:46:50:00:26:88:94:90:a1:c6:e0:
c3:48:e6:70:51:12:36:01:01:37:de:4e:e2:f4:6b:
f1:c7:c7:4e:05:5d:f3:b2:14:0c:66:59:c7:37:e3:
b3:6b:ee:0b:02:45:95:a3:78:2d:82:22:d2:3a:da:
d0:51:ed:6a:8a:0c:79:4d:a6:29:2f:0c:29:b9:f2:
7f:24:06:26:a0:f2:d9:87:a9:69:05:c2:d7:9d:51:
fa:be:f6:b9:0d:7f:64:83:37:c5:96:6b:95:3a:ba:
97:8c:c5:bc:34:60:00:e0:b6:e7:e8:d1:bb:b6:1e:
85:8c:d3:d4:81:93:8f:f3:7b:1f:10:1b:1f:5c:99:
91:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9E:FB:D9:DE:3C:21:78:12:6C:87:CA:9F:82:E7:53:7E:D8:06:9D
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/65772d48IXgSbIfKn4LnU37YBp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.140.0/24
Signature Algorithm: sha256WithRSAEncryption
34:e9:90:d5:92:9f:6a:2a:5b:08:87:91:69:65:df:a9:eb:8a:
4b:5f:f7:ad:a0:4c:8b:75:e0:45:cf:e2:e2:ee:3c:a7:04:d5:
d2:63:a3:43:c8:fd:aa:8c:3e:b7:9a:5f:97:0b:be:8d:81:bb:
29:c5:e2:67:c7:89:e7:a0:e3:40:08:fd:7f:47:76:f6:d1:f4:
28:83:d9:d0:d5:26:89:60:57:53:58:aa:74:7d:09:f5:36:67:
4b:2d:6f:ae:18:d7:2e:11:21:1a:67:f3:76:e2:aa:2a:0d:f9:
9d:54:a6:b9:8f:a5:1b:6c:a2:1c:42:8e:9a:42:05:cd:ea:fc:
9c:a4:dc:85:66:5c:84:b6:6e:6f:47:68:1c:54:7f:41:11:ee:
fa:dd:20:23:38:6e:46:bd:ac:70:c2:81:ef:44:b2:04:7e:b5:
27:ef:a6:0b:63:5d:80:56:10:ce:e6:09:a8:c4:8d:2d:e5:27:
ff:43:ca:81:52:a4:33:2b:7b:f6:ad:32:78:42:1c:4a:49:14:
73:97:df:ef:8f:84:4c:fb:4b:2e:4e:f9:7e:47:58:13:b9:93:
58:60:3a:2b:4d:88:fb:e3:57:85:3e:97:4a:95:55:44:7f:1a:
f4:6e:79:7c:f4:8e:8e:10:e9:6a:71:4e:74:34:f2:ff:aa:f8:
f2:0f:77:4f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwlXMSNA9cfzdUC9ekYBbRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjMwMTAyMDM0NTIwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjllZmJkOWRlM2MyMTc4MTI2Yzg3Y2E5ZjgyZTc1MzdlZDgwNjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEZq9OnA966tY/NAVhV++v8QI6Fq
awcAQL5FUEW10ps3o4NLvethGsN5OsJL6dy2vyWNBqYimjS7+EeE91AncOtj/vN5
FfyRjR94eFvAJ2A4SRqbDsMcyc63ptfgpwIUWoZA5pLmnl6v6GfkzVw94dAmO5p4
vcgiY31980ZQACaIlJChxuDDSOZwURI2AQE33k7i9Gvxx8dOBV3zshQMZlnHN+Oz
a+4LAkWVo3gtgiLSOtrQUe1qigx5TaYpLwwpufJ/JAYmoPLZh6lpBcLXnVH6vva5
DX9kgzfFlmuVOrqXjMW8NGAA4Lbn6NG7th6FjNPUgZOP83sfEBsfXJmR8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOue+9nePCF4EmyHyp+C51N+2AadMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvNjU3NzJkNDhJWGdTYklmS240TG5VMzdZQnAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXaqMMA0G
CSqGSIb3DQEBCwUAA4IBAQA06ZDVkp9qKlsIh5FpZd+p64pLX/etoEyLdeBFz+Li
7jynBNXSY6NDyP2qjD63ml+XC76NgbspxeJnx4nnoONACP1/R3b20fQog9nQ1SaJ
YFdTWKp0fQn1NmdLLW+uGNcuESEaZ/N24qoqDfmdVKa5j6UbbKIcQo6aQgXN6vyc
pNyFZlyEtm5vR2gcVH9BEe763SAjOG5GvaxwwoHvRLIEfrUn76YLY12AVhDO5gmo
xI0t5Sf/Q8qBUqQzK3v2rTJ4QhxKSRRzl9/vj4RM+0suTvl+R1gTuZNYYDorTYj7
41eFPpdKlVVEfxr0bnl89I6OEOlqcU50NPL/qvjyD3dP
-----END CERTIFICATE-----
Generated at Sat Apr 12 15:12:37 2025 by rpki-client