Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7TUJ8JD5ujjcD5YiFOmyk827_mI.roa
File: 7TUJ8JD5ujjcD5YiFOmyk827_mI.roa (raw, json)
Hash identifier: +5J1XsD2Sz/HDX5MI9kP/rG3AJrNH+pRgIS8iJ+c0Fs=
Subject key identifier: ED:35:09:F0:90:F9:BA:38:DC:0F:96:22:14:E9:B2:93:CD:BB:FE:62
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018B13854B43B77537F4CB699F1AA4D826ED
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7TUJ8JD5ujjcD5YiFOmyk827_mI.roa
Signing time: Mon 09 Oct 2023 08:19:44 +0000
ROA not before: Mon 09 Oct 2023 08:19:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212913
IP address blocks: 93.170.123.0/24 maxlen: 24
95.46.114.0/24 maxlen: 24
31.148.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:13:85:4b:43:b7:75:37:f4:cb:69:9f:1a:a4:d8:26:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Oct 9 08:19:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed3509f090f9ba38dc0f962214e9b293cdbbfe62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a1:c1:0a:08:20:df:e0:7e:41:f8:ce:0c:43:
05:4d:ad:1f:a9:f0:31:06:ab:bb:e9:86:c5:9c:0e:
c9:d3:4d:39:a4:fd:d4:7b:aa:6f:6a:6a:f8:a0:2f:
1f:20:0c:25:92:09:ad:e4:ac:14:40:58:fc:0b:ac:
ec:67:a5:62:1e:36:54:bf:a5:a0:51:66:9b:f6:5f:
d8:d4:66:fc:96:77:98:09:6f:27:5e:6b:dd:0c:41:
0e:e9:64:ce:ad:1b:a5:17:27:1d:85:72:ee:02:0e:
f6:9e:a1:a8:2f:53:94:1c:73:2b:b0:0f:4d:0b:5c:
68:00:21:c1:b0:12:57:0d:a9:d9:fc:76:52:45:ca:
83:8c:2a:f2:73:4f:c3:e0:36:e5:9a:81:ad:52:39:
29:85:21:cd:93:8b:38:f8:d8:4b:66:b3:90:45:e1:
d7:ef:38:cb:02:94:c8:d8:7d:d5:a1:c6:af:41:0e:
cd:f1:db:0d:08:e8:3e:ab:9b:9b:48:1f:0c:fa:02:
1c:ae:6d:85:d9:37:63:6a:8f:de:fd:4b:97:d5:cc:
f5:d1:5d:e5:97:a3:c5:4d:5e:e8:2d:80:92:1c:39:
64:c4:c6:30:5c:74:07:1c:18:e3:a2:b1:2d:c1:9f:
c5:f3:fd:d4:90:15:02:12:a3:71:44:50:0e:3b:80:
e5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:35:09:F0:90:F9:BA:38:DC:0F:96:22:14:E9:B2:93:CD:BB:FE:62
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7TUJ8JD5ujjcD5YiFOmyk827_mI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.99.0/24
93.170.123.0/24
95.46.114.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:3d:3a:95:9a:85:7d:db:03:d0:d4:10:c4:15:ee:af:2c:9b:
ef:3a:ab:c4:f0:44:a4:01:de:be:3e:a9:c0:1b:ca:72:83:fa:
ae:27:e5:31:d4:84:ea:b3:f8:9e:ad:7d:d7:dc:4c:09:d6:da:
ee:8c:f8:82:c8:4f:16:21:8f:58:72:74:b5:29:b8:31:95:3f:
a7:70:70:25:b2:3f:20:31:89:37:24:03:25:24:81:5f:e8:d1:
00:02:15:0e:a6:31:fc:69:48:70:df:88:ea:73:2f:9b:28:1f:
b0:97:49:11:31:ce:02:f0:5a:48:f3:65:7d:32:3d:0e:c6:f0:
25:bf:f1:06:4c:c8:d4:2f:67:5c:f6:2e:8c:17:c0:6c:d3:d8:
13:ea:4a:f3:1f:c8:14:e4:40:9d:67:87:4b:ed:27:32:16:ff:
d6:31:92:f4:01:34:c5:42:3c:f9:77:55:64:28:67:78:97:fb:
1b:ae:2b:cf:c4:db:95:7e:55:12:fc:18:4d:31:fd:59:cf:cb:
5b:1a:ab:69:1a:53:9c:a8:b7:ff:55:46:52:a6:e9:20:7b:04:
1b:92:9b:fb:2d:57:2a:8a:ca:b5:84:01:8a:7c:3e:7f:dc:cf:
7f:38:66:b8:02:2b:66:6f:8b:7e:34:08:ba:3e:a7:b1:33:6e:
9f:e9:a7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:48:44 2025 by rpki-client