Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/CMOTBDfmabsBtB0K0cjPWcB7PI0.roa
File: CMOTBDfmabsBtB0K0cjPWcB7PI0.roa (raw, json)
Hash identifier: ByP9Jv3RJcGwIT8zl5AOVEhJoiR5+keCOuTOEPaERZM=
Subject key identifier: 08:C3:93:04:37:E6:69:BB:01:B4:1D:0A:D1:C8:CF:59:C0:7B:3C:8D
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 28514204
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/CMOTBDfmabsBtB0K0cjPWcB7PI0.roa
Signing time: Sat 01 Jan 2022 16:10:13 +0000
ROA not before: Sat 01 Jan 2022 16:10:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209922
IP address blocks: 92.38.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 676413956 (0x28514204)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:10:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08c3930437e669bb01b41d0ad1c8cf59c07b3c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:be:13:6a:1d:45:10:81:40:8f:a0:26:27:0f:
6e:64:16:84:a2:e0:a2:0d:21:7e:96:60:08:91:bf:
ad:10:76:97:5a:2c:e4:cf:86:38:80:c7:de:da:39:
3a:d7:10:05:e6:a7:16:6c:31:1b:46:58:52:59:1d:
3f:80:62:2f:0d:d3:7f:ce:89:21:86:55:39:ea:c8:
d5:fd:bb:74:24:03:79:1f:d5:bd:f4:b0:aa:e2:23:
4d:62:44:a5:16:6a:8e:56:82:f8:c6:da:12:c0:2f:
91:cd:76:96:1b:5e:ae:4c:aa:1c:f3:2f:a6:98:94:
01:61:dd:72:dc:cc:68:ca:7e:e3:a3:73:6a:f2:ac:
46:37:48:24:2c:ee:00:7f:c0:e1:fb:19:ef:0d:d1:
2d:61:cb:9a:7b:e2:b5:0a:db:92:d8:51:6f:9c:13:
6a:f1:02:f3:16:9f:3b:e9:e3:76:44:05:42:52:ff:
8c:94:ba:23:26:73:00:7a:69:56:a5:f0:d3:de:2f:
fb:28:41:db:3a:b2:ef:30:3d:e3:2e:6e:d8:a6:96:
b8:05:32:e0:2f:20:38:b2:50:3d:20:76:19:e1:0d:
33:87:99:ca:eb:39:ff:9d:c8:10:5f:1a:9a:30:9a:
34:c1:36:a0:4f:87:04:5b:57:e8:07:a6:45:97:96:
9f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C3:93:04:37:E6:69:BB:01:B4:1D:0A:D1:C8:CF:59:C0:7B:3C:8D
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/CMOTBDfmabsBtB0K0cjPWcB7PI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.93.0/24
Signature Algorithm: sha256WithRSAEncryption
56:3a:fe:7e:bf:b3:82:da:2c:85:cf:8e:01:b1:9d:7c:1f:3d:
74:57:83:af:a2:d7:64:c8:54:3e:b9:ac:c0:bb:ed:7a:2c:85:
5a:b6:28:c4:ff:b1:4f:f9:ae:0e:1e:4f:2d:04:b7:5c:05:6f:
29:1a:9f:4f:b8:b5:d9:f7:0e:ec:41:99:79:77:2f:f8:73:e0:
c3:6f:03:2d:ec:9e:01:11:39:1e:1c:19:66:95:52:3d:be:45:
9d:64:d8:a3:34:4f:a9:e1:1c:ff:99:6a:99:c0:be:c2:95:91:
66:ad:b7:33:37:b7:12:b4:27:98:5d:3e:58:98:e1:e5:8d:d0:
d8:98:2d:68:ba:69:9c:72:61:9d:4f:c3:a1:a7:29:31:f8:b8:
5b:4b:35:70:3f:74:fb:40:c6:4f:76:31:47:71:c3:6c:36:92:
2a:c3:00:51:fd:3f:c7:77:20:49:fd:13:10:0f:38:36:b5:28:
6d:d8:3d:02:9d:06:93:0a:8b:bc:be:ec:2f:46:46:41:9b:6c:
29:a0:bd:a9:99:72:c9:2c:19:24:ed:ae:be:cf:f2:74:17:03:
6d:7f:b8:4e:93:5f:36:a7:14:64:f4:67:af:82:03:01:40:0b:
0c:7f:b0:83:9e:6e:43:ce:8e:77:a0:a4:4e:00:9c:3c:41:5b:
ed:88:dc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:51:14 2025 by rpki-client