Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7yzCWd_coQ7WWsIpxCwW-iJn1J0.roa
File: 7yzCWd_coQ7WWsIpxCwW-iJn1J0.roa (raw, json)
Hash identifier: m1RfBIdRzg82Yl8EkQeD2FFSJW1nuTgJ34ECD0ItW8g=
Subject key identifier: EF:2C:C2:59:DF:DC:A1:0E:D6:5A:C2:29:C4:2C:16:FA:22:67:D4:9D
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018451FC79333AF4026CF4B30C7F92B233B5
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7yzCWd_coQ7WWsIpxCwW-iJn1J0.roa
Signing time: Mon 07 Nov 2022 12:06:51 +0000
ROA not before: Mon 07 Nov 2022 12:06:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12365
IP address blocks: 93.170.224.0/21 maxlen: 24
93.170.224.0/22 maxlen: 24
93.170.228.0/22 maxlen: 24
92.38.96.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:51:fc:79:33:3a:f4:02:6c:f4:b3:0c:7f:92:b2:33:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Nov 7 12:06:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef2cc259dfdca10ed65ac229c42c16fa2267d49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:bd:4c:95:6f:95:b2:27:78:c5:36:e1:c2:06:
d9:e1:31:81:a6:ef:ac:6b:06:5f:22:c2:b9:55:99:
a6:33:3f:c8:44:18:e4:86:17:2a:94:0e:29:95:49:
d6:10:9d:bb:97:04:d5:57:ee:34:64:ed:fe:ef:bb:
da:9d:07:cb:ef:d6:75:67:48:b3:9a:63:36:07:f7:
9b:4d:51:88:6a:bb:1e:4a:44:85:b7:0d:e8:b4:90:
18:0b:17:ff:19:fe:cc:2d:9a:7c:5a:89:97:97:c0:
ca:5b:56:5d:e2:4f:2d:e3:3f:fd:35:41:5a:93:8b:
c3:de:8c:b9:88:ed:78:78:88:5b:8d:80:bd:0e:16:
da:07:eb:78:b9:b7:e9:22:ec:d9:4b:7b:bd:35:46:
4a:b9:f0:d8:0c:65:59:98:0c:e9:6c:20:23:4d:0a:
b2:9b:2a:6d:1e:7c:0e:6b:b1:69:94:d6:32:de:89:
ae:92:9d:6b:2c:15:2f:7f:03:02:1c:cb:6b:78:cd:
0e:14:8a:39:a4:51:8e:d3:5a:65:54:52:12:90:d7:
e5:9d:d1:c6:5c:4c:89:94:c4:38:ef:1c:27:a9:9e:
b3:c5:24:d9:0f:41:25:fd:ee:f5:e2:ee:e5:d1:8d:
fa:1d:b4:46:bb:0e:5e:7d:e0:d1:b3:7d:95:07:5a:
b2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:2C:C2:59:DF:DC:A1:0E:D6:5A:C2:29:C4:2C:16:FA:22:67:D4:9D
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7yzCWd_coQ7WWsIpxCwW-iJn1J0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.96.0/19
93.170.224.0/21
Signature Algorithm: sha256WithRSAEncryption
4d:34:11:99:cb:64:f3:a0:1b:07:c6:0b:c4:ae:35:1e:a5:15:
c5:8f:be:86:78:48:91:25:aa:cf:f6:d3:e5:08:89:61:ee:9e:
a6:57:e8:03:cb:85:52:af:9e:20:a2:ee:03:86:84:1c:51:36:
b6:e3:b0:4c:94:72:e1:12:63:31:28:53:5c:da:62:a2:db:fe:
5b:81:07:6f:a4:84:9a:b2:ee:1e:5c:68:ac:3a:ec:64:5e:12:
ac:5b:a6:6b:da:8e:0e:4a:5b:7f:a6:77:cd:a4:59:3e:a1:44:
5c:7e:3a:09:7a:26:e5:75:b5:77:5e:bf:d6:42:7c:6c:3c:9a:
b6:74:97:31:6e:65:ce:8c:09:89:20:a8:ef:49:66:21:c8:47:
ff:a2:7e:f6:b7:32:00:06:f8:f2:2d:85:ea:c1:d8:8f:52:b3:
73:06:15:7e:9f:d4:a3:58:3f:a7:34:29:95:10:af:ec:ca:87:
c4:a1:8e:9d:63:c0:8f:a7:9a:5e:09:6e:39:fb:8a:d6:61:0b:
43:a8:00:f2:9a:88:23:93:01:52:76:52:a4:bf:21:0c:51:7f:
ed:70:58:aa:06:0c:72:0a:87:b1:cd:39:ca:17:3f:88:94:e4:
a7:d4:97:92:87:49:cf:5c:d6:46:eb:76:1a:96:3a:7d:45:fb:
9b:62:37:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:25 2025 by rpki-client