Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FN19JoRH9ACePg020-OE258BzbI.roa
File: FN19JoRH9ACePg020-OE258BzbI.roa (raw, json)
Hash identifier: HifI5nU1BDpieq1tgg4MtIIEzbQuvmM6vddIjaduNAA=
Subject key identifier: 14:DD:7D:26:84:47:F4:00:9E:3E:0D:36:D3:E3:84:DB:9F:01:CD:B2
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570955BB7295AC0F0534C62F9DE70044E
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FN19JoRH9ACePg020-OE258BzbI.roa
Signing time: Mon 02 Jan 2023 03:45:14 +0000
ROA not before: Mon 02 Jan 2023 03:45:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57197
IP address blocks: 93.170.90.0/23 maxlen: 24
95.47.122.0/23 maxlen: 24
93.170.44.0/22 maxlen: 24
146.120.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:5b:b7:29:5a:c0:f0:53:4c:62:f9:de:70:04:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14dd7d268447f4009e3e0d36d3e384db9f01cdb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:34:67:32:0e:9c:33:f6:94:71:ff:a2:47:67:
e9:cb:e4:08:c4:6c:1a:f2:4f:4e:44:93:0a:2d:41:
69:6c:2f:bc:c5:42:58:9f:aa:5c:c3:35:81:de:5e:
94:80:c2:5f:ef:27:f0:2e:cf:7e:29:82:32:b1:06:
3e:b4:81:b5:0c:a0:08:5c:79:cf:6d:4f:47:36:0b:
66:a7:23:db:8b:0d:3a:dc:4f:0d:2c:8e:fd:94:da:
7e:d3:38:00:75:7a:15:45:4f:23:f8:6e:3e:61:ab:
b9:14:d4:a7:83:33:60:8b:61:50:25:86:c8:c6:eb:
fb:67:63:67:e6:11:04:33:4c:19:ff:8d:75:6f:04:
92:7e:7d:ea:4c:df:5b:a3:2e:0d:df:b2:16:1f:b7:
03:6b:40:fe:a7:f2:66:38:11:5a:59:40:87:3f:0e:
1c:2d:fe:6d:86:39:29:24:3d:82:d5:90:5b:b3:dc:
02:c0:41:79:cf:29:51:d9:93:b1:34:0c:6b:1a:cb:
6b:20:68:5e:f9:c4:b3:28:44:9d:f9:e5:ac:e3:a1:
30:81:9f:78:50:2a:01:88:b9:93:35:56:41:68:7d:
36:a2:25:a4:4f:54:4f:44:5d:c2:68:54:3b:86:ec:
91:36:a9:05:32:11:3e:62:3a:97:17:7f:f0:dc:bc:
b0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DD:7D:26:84:47:F4:00:9E:3E:0D:36:D3:E3:84:DB:9F:01:CD:B2
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FN19JoRH9ACePg020-OE258BzbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.44.0/22
93.170.90.0/23
95.47.122.0/23
146.120.244.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:43:48:57:7e:01:8e:f2:50:25:8a:8e:a6:01:a3:50:9d:49:
76:18:66:09:78:24:9c:8d:1c:db:3d:94:ac:f1:70:22:c3:c2:
d4:77:6f:62:50:63:ef:23:7f:df:34:3f:af:dd:c2:7b:79:3b:
32:c3:27:5f:8c:b4:d9:89:6d:28:b9:ec:d8:fa:66:50:4f:20:
a3:28:54:c3:a9:d4:69:ba:33:87:6a:08:6e:75:23:6f:c7:27:
2b:f2:1c:44:99:3f:1b:d3:73:99:b3:51:e2:46:a1:44:fe:a2:
ad:e9:24:70:48:b0:0e:c6:a8:40:d4:c7:28:39:af:e5:0e:60:
7a:b2:f2:94:7a:8d:cb:60:30:ed:a3:46:95:58:7c:37:53:64:
a6:ff:da:09:f3:c3:ce:2e:9f:27:83:e3:83:dc:cb:3b:a0:ef:
1c:f5:d2:7a:7f:fa:cc:de:9a:1a:a2:15:4a:3d:d1:4d:1a:e9:
5b:6b:5a:21:fd:3f:c9:c2:f8:33:ef:95:59:1e:3c:ef:8c:67:
1a:47:54:c0:0d:ef:ce:72:ed:14:1e:2a:8c:74:a2:ae:b2:46:
a0:e0:fa:73:f7:06:dc:35:bc:67:70:06:0c:ed:d4:71:f9:ad:
0b:fb:20:60:9e:f8:48:d9:d9:ba:d9:a9:89:3f:15:8f:8c:57:
9f:00:98:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:32 2025 by rpki-client