Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/6IWg2-VcjedQFu7QjWoO_tl_NTc.roa
File: 6IWg2-VcjedQFu7QjWoO_tl_NTc.roa (raw, json)
Hash identifier: EoP+p9AyC0TwtJRyeHerdAahWa/AI0Km5yqnJskw/dI=
Subject key identifier: E8:85:A0:DB:E5:5C:8D:E7:50:16:EE:D0:8D:6A:0E:FE:D9:7F:35:37
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570957528356A9AEFC74A02E0BAC592A8
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/6IWg2-VcjedQFu7QjWoO_tl_NTc.roa
Signing time: Mon 02 Jan 2023 03:45:21 +0000
ROA not before: Mon 02 Jan 2023 03:45:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61277
IP address blocks: 93.171.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:75:28:35:6a:9a:ef:c7:4a:02:e0:ba:c5:92:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e885a0dbe55c8de75016eed08d6a0efed97f3537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ba:4a:7e:74:ee:be:26:fb:7b:51:07:93:ba:
dd:bc:2a:b7:41:15:13:c3:53:ca:15:1d:7e:be:0f:
9f:73:e7:5a:a1:69:a5:b3:9b:a6:cf:14:ec:ba:fe:
c8:00:4f:2a:b9:59:17:69:9f:f7:a0:b5:69:ab:65:
4d:e4:c0:1c:de:9e:a2:77:74:f4:05:7e:c1:60:42:
90:7b:51:07:dc:33:3f:40:2f:36:c8:b6:b4:ea:c5:
34:13:89:8f:33:10:63:e2:f8:25:14:37:40:ae:92:
f2:58:ea:e0:ec:a1:2a:4d:96:4e:d7:8f:db:2f:62:
a3:ad:83:28:13:61:3d:49:16:49:98:b3:fb:7c:47:
56:60:20:8b:83:4f:6d:60:74:91:a1:e5:ff:de:89:
c9:9e:b0:d2:1d:bb:1a:95:a7:54:66:b5:35:1a:2b:
c9:5d:f5:eb:67:49:c7:24:44:25:23:3d:51:b9:03:
e0:ed:c6:df:4a:28:5e:eb:fc:ae:6f:5c:59:3f:05:
b6:41:21:02:6a:56:b6:d8:d8:ec:19:1b:ca:62:86:
91:6b:f6:05:8c:17:25:f3:67:ae:02:bd:8f:c0:b0:
a1:60:db:59:fc:d6:67:b3:b0:fa:b2:de:b7:62:72:
43:9a:5b:48:39:50:f9:06:b5:e9:9a:d9:c8:b6:0c:
ee:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:85:A0:DB:E5:5C:8D:E7:50:16:EE:D0:8D:6A:0E:FE:D9:7F:35:37
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/6IWg2-VcjedQFu7QjWoO_tl_NTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.207.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:79:ab:e6:79:bc:9b:a1:09:e0:fa:0a:f0:72:a6:16:84:33:
b7:b9:2a:88:f3:24:6b:6c:f6:90:c1:f3:02:3c:af:45:c5:2c:
61:a1:61:92:3f:2c:21:12:4c:95:f2:67:9a:c1:91:3f:0a:ee:
77:4c:e1:ce:63:44:9c:bb:2e:d3:12:3f:77:28:75:c0:68:60:
9e:8c:69:5f:81:fb:72:4b:8d:7b:82:16:e2:db:cc:3d:18:88:
5c:34:29:1c:08:fb:94:a9:67:d4:87:4f:b2:b7:a1:e1:3e:b8:
00:a9:01:da:c1:bb:25:08:a9:31:40:d9:bc:06:3a:9e:34:4c:
36:92:07:6a:71:32:f4:e3:c6:07:49:12:7b:ea:46:9b:f0:dc:
eb:b9:d9:f3:de:d1:f9:fa:04:7c:09:ab:17:e9:03:79:6a:19:
13:06:e5:57:c7:89:9f:99:93:0e:87:9c:87:0b:fd:20:58:fd:
a6:89:d7:34:69:2a:b2:e2:37:4c:08:96:66:48:d0:38:68:77:
e6:05:fd:2f:4b:f9:fa:98:b4:36:45:4d:91:f5:70:24:21:01:
a4:b1:cb:17:77:39:dd:32:d1:87:0e:52:dd:42:ee:78:6a:ca:
2b:2a:9d:e2:3a:5d:29:ba:b7:09:39:3c:bd:3a:a3:90:f1:bb:
d6:65:36:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:38:53 2025 by rpki-client