Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7oSiV-psT85H6fxsVxG95fxUJyw.roa
File: 7oSiV-psT85H6fxsVxG95fxUJyw.roa (raw, json)
Hash identifier: 0QjxUWQCG5LUQOp5XE/W+cCfHJTaqtcbgTm6YY5F5N8=
Subject key identifier: EE:84:A2:57:EA:6C:4F:CE:47:E9:FC:6C:57:11:BD:E5:FC:54:27:2C
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095070B6642F679BA7817241E869BB6
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7oSiV-psT85H6fxsVxG95fxUJyw.roa
Signing time: Mon 02 Jan 2023 03:44:52 +0000
ROA not before: Mon 02 Jan 2023 03:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9058
IP address blocks: 93.170.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:07:0b:66:42:f6:79:ba:78:17:24:1e:86:9b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee84a257ea6c4fce47e9fc6c5711bde5fc54272c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f4:c2:7c:29:2b:95:6e:a7:96:13:41:4f:fd:
ff:9a:63:27:ed:aa:e8:17:ca:a6:49:1c:da:a8:89:
9e:61:da:f8:8a:e5:85:f9:f3:8c:f9:c6:35:c3:cc:
a4:0e:f6:e9:a8:d1:04:87:8e:95:fc:7f:8d:3d:0e:
ca:74:69:0b:84:a8:5b:e9:2c:64:b6:9f:ac:3f:46:
7f:ca:35:d5:1f:ab:05:c9:f3:a9:86:09:fc:c8:e4:
e0:d9:eb:78:2c:ea:0d:af:c7:91:e9:9e:12:af:5d:
1f:d2:59:a5:a5:e5:f2:39:bb:dd:c5:23:c8:6a:e1:
ec:77:c3:c9:93:fc:b8:5c:82:99:24:a1:1a:fd:49:
dc:85:f0:22:c5:b3:70:a5:94:2f:77:ad:cd:04:ca:
db:75:3b:d5:50:30:91:32:4f:bd:35:2c:b6:b3:70:
56:a7:d8:d6:72:64:f1:bf:08:05:23:3e:da:8c:fb:
76:a2:f6:32:9b:67:10:ab:bf:fc:5e:b5:41:8c:3e:
61:61:27:14:de:64:f0:5a:f2:9d:c4:47:3d:5e:18:
7c:92:46:74:d3:71:01:4e:bd:4d:9b:a5:0e:b5:2c:
c5:ce:cd:b0:f2:41:0b:2c:ee:e6:9e:ea:cc:66:91:
de:4c:10:26:60:71:79:8f:da:cc:28:14:ed:4e:13:
56:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:84:A2:57:EA:6C:4F:CE:47:E9:FC:6C:57:11:BD:E5:FC:54:27:2C
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7oSiV-psT85H6fxsVxG95fxUJyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.245.0/24
Signature Algorithm: sha256WithRSAEncryption
80:ef:5b:42:e1:42:32:69:61:0b:fa:99:4e:db:de:12:79:7c:
4e:ae:52:b7:d9:9e:5c:36:6e:8d:b5:c3:50:69:00:02:ca:77:
db:fa:6b:7f:51:ad:b9:83:e5:a3:2c:40:86:ef:8c:e5:a6:b5:
ce:96:ac:84:de:7a:3d:11:54:87:e2:85:39:85:76:b1:c9:04:
cf:fb:8f:59:03:0b:c6:85:c6:15:50:4d:de:29:fe:f6:22:fe:
bd:30:f0:87:f4:7c:b1:f3:6d:ae:02:24:15:18:b7:05:6f:38:
77:4f:2c:67:4a:a4:59:de:23:3c:f9:08:f0:64:f1:9e:19:f2:
c6:26:eb:96:a6:0d:1f:8f:85:d3:7d:3d:c7:4a:61:6e:5e:ad:
2d:3e:06:fd:0a:c2:86:a2:5d:7c:2d:99:d5:02:5f:bb:0c:ff:
95:ce:2c:e0:9b:64:96:e9:c0:12:31:6e:e7:66:2a:bc:c3:ac:
72:dc:e8:8d:d8:c0:a8:a1:65:46:67:32:da:f2:79:eb:10:81:
87:92:78:ff:2d:82:e3:09:a0:2c:21:97:2e:fc:07:cb:2b:df:
d4:09:1a:f5:55:94:fd:94:53:af:16:8e:d0:f7:52:b4:ff:c6:
86:20:78:db:11:87:ca:51:eb:06:fb:20:fc:a6:13:96:3b:15:
14:fb:ee:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:38 2025 by rpki-client