Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8XzS5OLbLU7FJdcdhV_6AnY7vZY.roa
File: 8XzS5OLbLU7FJdcdhV_6AnY7vZY.roa (raw, json)
Hash identifier: +2rQ3myhwZHhqVoNX0EYVzHlj257zpHx66N5MRdEeEE=
Subject key identifier: F1:7C:D2:E4:E2:DB:2D:4E:C5:25:D7:1D:85:5F:FA:02:76:3B:BD:96
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0181EDE188B43BA1C45471C29F0DC4A117CB
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8XzS5OLbLU7FJdcdhV_6AnY7vZY.roa
Signing time: Mon 11 Jul 2022 15:29:49 +0000
ROA not before: Mon 11 Jul 2022 15:29:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60777
IP address blocks: 93.170.0.0/24 maxlen: 24
95.47.126.0/24 maxlen: 24
95.47.136.0/24 maxlen: 24
93.170.25.0/24 maxlen: 24
95.46.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ed:e1:88:b4:3b:a1:c4:54:71:c2:9f:0d:c4:a1:17:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jul 11 15:29:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f17cd2e4e2db2d4ec525d71d855ffa02763bbd96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:67:c7:ce:af:49:59:5b:99:f6:56:85:08:34:
c0:58:f4:e7:12:cb:8e:aa:55:77:32:e3:bf:a5:df:
6f:fb:6c:65:62:26:31:31:19:2f:cc:24:88:be:01:
2a:92:19:82:db:83:ab:7e:87:44:2f:83:a4:f6:e3:
07:5f:7e:45:2b:3b:95:c2:27:c1:4e:59:a3:e6:8c:
98:01:d7:7e:3b:03:da:3d:a7:3c:9d:1f:dd:9d:56:
70:df:ce:d3:23:0b:4d:f4:be:f2:f7:a2:8f:55:0c:
4c:34:5e:f9:c7:d6:66:5d:cd:6c:92:9f:f6:cf:bb:
41:a6:ab:f7:1f:ae:0f:fa:c0:0e:89:e7:11:71:ef:
17:63:7d:c7:e0:fc:97:1b:b9:5a:d9:12:6e:be:2f:
8c:67:49:97:b0:ed:63:13:f0:0f:84:76:86:39:84:
2f:de:85:93:c1:5b:ee:37:49:74:a5:f1:b3:74:38:
f2:73:de:9e:14:95:95:f7:82:29:a5:7c:cc:0e:20:
3b:27:b4:0b:fd:c8:bf:40:f8:ed:a7:2e:50:65:26:
6a:7a:a6:3f:ab:9b:d7:75:11:fd:17:fb:29:55:a1:
61:6d:1a:61:73:70:7e:0f:7b:e4:5b:11:d6:bb:e7:
5e:33:53:d7:7c:4e:66:60:47:05:05:43:04:52:ad:
c3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7C:D2:E4:E2:DB:2D:4E:C5:25:D7:1D:85:5F:FA:02:76:3B:BD:96
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8XzS5OLbLU7FJdcdhV_6AnY7vZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.0.0/24
93.170.25.0/24
95.46.108.0/24
95.47.126.0/24
95.47.136.0/24
Signature Algorithm: sha256WithRSAEncryption
44:40:2c:17:12:9a:d4:95:c0:2f:91:42:c9:29:90:6b:df:44:
16:b0:a4:18:97:8f:18:18:a7:54:2a:55:7b:d1:35:be:04:fc:
8f:ff:42:49:a7:de:5d:4c:b3:f6:65:58:04:b4:cc:9b:00:46:
8d:29:89:68:56:97:8e:29:51:b9:fb:ce:29:a4:11:13:eb:ee:
b6:2d:e4:23:34:3a:3a:2c:79:4f:d2:71:81:9e:20:b3:9d:a1:
f4:bc:10:68:17:0e:04:59:8f:57:9c:34:0a:8a:a0:41:00:cc:
f1:3f:96:b9:41:43:88:d1:8b:58:bf:cd:2f:ef:d0:dd:30:bb:
f8:6e:49:59:29:64:1d:7f:c2:e8:65:78:48:71:b6:bd:60:78:
f5:ea:b3:82:0b:31:a8:6b:db:01:2e:a7:bd:d5:36:9f:e5:6e:
63:de:9e:8b:d1:14:63:f3:b9:14:ff:6f:08:8f:ba:d1:8a:2b:
6a:b5:fa:3e:e1:b2:7b:67:0b:a0:76:09:cb:65:71:6a:ff:ed:
c6:88:2a:43:c1:c5:20:9a:e5:ad:30:5d:ce:cc:80:f7:93:4b:
48:44:c1:ec:99:f8:95:29:64:76:e2:18:fb:31:0c:7d:c9:07:
ad:2e:83:a5:c8:eb:3b:d7:5d:a8:5e:19:43:e0:e3:8d:fc:c1:
41:b2:bd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:30 2025 by rpki-client