Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/9o4wGqF91EGHwQA_DWsKBKEsQoE.roa
File: 9o4wGqF91EGHwQA_DWsKBKEsQoE.roa (raw, json)
Hash identifier: +OrY2rAGl7bDeN6SuTtqsPtYSvJ1vnJufFA+KEfs3ks=
Subject key identifier: F6:8E:30:1A:A1:7D:D4:41:87:C1:00:3F:0D:6B:0A:04:A1:2C:42:81
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570954C88D797AF29C239D318D86D0F73
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/9o4wGqF91EGHwQA_DWsKBKEsQoE.roa
Signing time: Mon 02 Jan 2023 03:45:10 +0000
ROA not before: Mon 02 Jan 2023 03:45:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50685
IP address blocks: 93.171.160.0/23 maxlen: 24
146.120.192.0/22 maxlen: 24
93.170.236.0/22 maxlen: 24
146.120.14.0/23 maxlen: 24
146.120.13.0/24 maxlen: 24
95.47.60.0/23 maxlen: 24
2a02:128:9::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:4c:88:d7:97:af:29:c2:39:d3:18:d8:6d:0f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f68e301aa17dd44187c1003f0d6b0a04a12c4281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:df:e5:88:39:c2:fa:aa:00:06:45:57:8b:f5:
84:75:2d:22:99:30:98:4d:85:64:e2:dd:29:3a:9e:
66:30:08:36:f6:c7:2c:75:4f:64:5e:60:11:cd:3f:
fc:27:db:79:14:07:46:ba:98:99:74:a1:37:49:4b:
e2:30:68:38:1b:85:b1:8f:a9:27:2a:41:7c:82:1e:
af:eb:8b:61:6d:7c:45:ba:f0:f8:17:b8:d3:80:eb:
e8:71:4f:b0:c2:46:03:56:6d:14:7c:a3:e4:3a:a6:
ef:c8:fb:ee:b1:8a:a6:7b:67:3d:03:0d:ab:89:b7:
14:9c:c9:17:d4:f6:38:7c:51:96:5e:81:1b:8c:29:
9a:3f:00:0a:a1:48:62:71:60:d3:05:e9:93:96:eb:
68:65:bf:1b:6d:e6:74:65:b1:a7:0e:17:82:7c:b0:
62:30:34:27:7a:17:3b:9b:90:29:57:f7:cf:23:27:
a2:d9:3f:c7:41:79:a4:5b:50:c7:ff:af:dd:26:14:
19:72:c1:28:32:36:1c:97:57:78:8f:f7:92:40:03:
ec:09:d7:f8:05:a7:a0:d0:bb:0c:b8:8b:75:be:b8:
72:a2:f7:e8:57:b3:40:22:7a:3c:53:c8:4b:d7:54:
04:28:8d:8e:26:e6:c5:9d:81:68:2b:7d:78:1a:ad:
41:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:8E:30:1A:A1:7D:D4:41:87:C1:00:3F:0D:6B:0A:04:A1:2C:42:81
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/9o4wGqF91EGHwQA_DWsKBKEsQoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.236.0/22
93.171.160.0/23
95.47.60.0/23
146.120.13.0-146.120.15.255
146.120.192.0/22
IPv6:
2a02:128:9::/48
Signature Algorithm: sha256WithRSAEncryption
81:2d:a7:99:f6:61:bd:32:c8:c2:a1:a5:9d:13:b2:fc:43:a6:
4b:1e:36:cd:bc:72:af:fe:7b:96:f0:de:ca:7a:9e:d3:8d:b8:
c3:cd:c6:f6:4c:a4:aa:34:08:77:f3:79:e3:2b:51:ec:17:c1:
d1:7b:02:b5:d5:75:88:a8:b9:a4:c9:2e:e3:24:47:a7:6c:01:
68:44:c8:d0:d6:d9:df:89:5c:90:bb:e5:23:f8:82:e4:1a:0e:
ee:92:01:0e:f5:87:a3:3c:ac:cc:0b:df:41:d4:79:eb:26:f2:
82:53:5f:e5:0a:4a:ab:b0:18:7b:bb:67:38:95:af:80:08:f8:
8e:3c:03:fd:39:02:d1:54:15:19:c8:10:9c:97:1f:1e:fd:18:
e0:cb:7b:7a:67:42:2f:ce:3f:95:54:16:11:ed:6a:29:a3:3e:
9b:d6:dc:63:4d:5b:4d:d5:25:41:50:ca:a6:3f:87:06:56:89:
14:ee:e1:50:6b:2c:55:a3:cc:85:d2:d7:a6:54:ee:de:3f:2c:
29:21:38:38:7f:c6:9b:32:fc:0d:67:22:0e:d4:79:55:e7:d5:
c2:99:1c:84:3c:6b:14:bc:2a:e9:b0:6b:aa:86:30:eb:72:89:
0d:a5:a5:a0:a5:eb:4d:ea:06:8d:b4:c9:11:bc:fb:43:06:e8:
84:65:d8:16
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgISAYVwlUyI15evKcI50xjYbQ9zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjMwMTAyMDM0NTEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjhlMzAxYWExN2RkNDQxODdjMTAwM2YwZDZiMGEwNGExMmM0MjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/N/liDnC+qoABkVXi/WEdS0imTCY
TYVk4t0pOp5mMAg29scsdU9kXmARzT/8J9t5FAdGupiZdKE3SUviMGg4G4Wxj6kn
KkF8gh6v64thbXxFuvD4F7jTgOvocU+wwkYDVm0UfKPkOqbvyPvusYqme2c9Aw2r
ibcUnMkX1PY4fFGWXoEbjCmaPwAKoUhicWDTBemTlutoZb8bbeZ0ZbGnDheCfLBi
MDQnehc7m5ApV/fPIyei2T/HQXmkW1DH/6/dJhQZcsEoMjYcl1d4j/eSQAPsCdf4
Baeg0LsMuIt1vrhyovfoV7NAIno8U8hL11QEKI2OJubFnYFoK314Gq1BlwIDAQAB
o4ICOjCCAjYwHQYDVR0OBBYEFPaOMBqhfdRBh8EAPw1rCgShLEKBMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvOW80d0dxRjkxRUdId1FBX0RXc0tCS0VzUW9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFAGCCsGAQUFBwEHAQH/BEEwPzAsBAIAATAmAwQCXarsAwQB
XaugAwQBXy88MAwDBACSeA0DBASSeAADBAKSeMAwDwQCAAIwCQMHACoCASgACTAN
BgkqhkiG9w0BAQsFAAOCAQEAgS2nmfZhvTLIwqGlnROy/EOmSx42zbxyr/57lvDe
ynqe0424w83G9kykqjQId/N54ytR7BfB0XsCtdV1iKi5pMku4yRHp2wBaETI0NbZ
34lckLvlI/iC5BoO7pIBDvWHozyszAvfQdR56ybyglNf5QpKq7AYe7tnOJWvgAj4
jjwD/TkC0VQVGcgQnJcfHv0Y4Mt7emdCL84/lVQWEe1qKaM+m9bcY01bTdUlQVDK
pj+HBlaJFO7hUGssVaPMhdLXplTu3j8sKSE4OH/GmzL8DWciDtR5VefVwpkchDxr
FLwq6bBrqoYw63KJDaWloKXrTeoGjbTJEbz7QwbohGXYFg==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:36 2025 by rpki-client