Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Ff4nbqFuhjkNh_Bab694vEPyhBI.roa
File: Ff4nbqFuhjkNh_Bab694vEPyhBI.roa (raw, json)
Hash identifier: tGIARPKNRmT4dBcaKbMB6nFBwc+sFKrwYTXcN2oSW8o=
Subject key identifier: 15:FE:27:6E:A1:6E:86:39:0D:87:F0:5A:6F:AF:78:BC:43:F2:84:12
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0182DAD0C6EEA5178AE9AE03BB643609039C
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Ff4nbqFuhjkNh_Bab694vEPyhBI.roa
Signing time: Fri 26 Aug 2022 15:41:31 +0000
ROA not before: Fri 26 Aug 2022 15:41:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61384
IP address blocks: 93.171.170.0/23 maxlen: 24
93.170.132.0/23 maxlen: 24
93.171.250.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:da:d0:c6:ee:a5:17:8a:e9:ae:03:bb:64:36:09:03:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Aug 26 15:41:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15fe276ea16e86390d87f05a6faf78bc43f28412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e2:a6:01:38:c2:70:1e:52:d4:e3:c7:1d:eb:
01:93:46:08:a3:5a:87:82:99:5c:c2:4e:02:7a:4d:
83:26:90:3d:70:ea:e3:b2:6c:01:d2:55:01:c6:fa:
d4:52:65:20:c5:b0:bf:f9:0d:01:74:06:ba:96:6c:
61:ba:de:25:37:7e:28:23:05:99:57:2f:89:de:ea:
05:e4:5b:d7:b2:50:bc:05:62:90:62:fc:a9:36:98:
c6:27:d5:24:fc:bb:94:ef:8e:90:de:a9:94:c9:cb:
95:2a:ee:c3:e7:16:30:7d:fb:e8:2f:4b:06:59:ee:
8d:20:70:8c:8c:6a:a2:6d:67:8a:3f:0b:d2:98:75:
04:75:27:6b:19:87:2d:f5:af:62:d9:06:34:97:82:
64:7f:73:e6:0e:f8:9c:4f:90:c5:f6:27:a4:77:92:
7d:a0:a9:dc:99:f2:9e:75:65:0e:f2:96:37:25:c6:
a5:5e:4b:3d:7b:f2:a4:c4:4b:7a:a9:e2:39:98:d8:
1e:28:43:ed:6e:14:6c:fd:03:55:bb:84:63:1c:46:
10:35:40:12:0e:48:23:eb:d0:34:f1:c6:7f:61:f7:
da:40:46:d2:36:de:9c:f5:6c:76:03:f3:bd:32:41:
0d:03:65:1f:0f:47:cc:29:cf:63:78:ca:fc:b5:52:
48:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FE:27:6E:A1:6E:86:39:0D:87:F0:5A:6F:AF:78:BC:43:F2:84:12
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Ff4nbqFuhjkNh_Bab694vEPyhBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.132.0/23
93.171.170.0/23
93.171.250.0/23
Signature Algorithm: sha256WithRSAEncryption
39:76:ee:86:7a:b3:b8:28:cd:a1:12:1b:ff:99:8c:aa:2a:74:
99:65:92:3d:2b:b0:90:7e:a6:1c:f2:f1:93:79:a8:84:c5:0b:
83:3c:21:33:77:88:dd:3d:86:36:e4:7c:cc:8e:e0:b5:74:ed:
e8:18:1f:a5:21:ad:46:e2:bb:c7:6c:49:2e:7f:dd:d6:c4:32:
fe:42:96:e6:b4:f7:0f:3f:78:d8:e2:bf:c2:a7:f2:f7:4c:13:
84:c6:ef:5d:13:e5:d2:d6:2b:68:ff:26:a3:16:75:03:c1:54:
c8:ef:da:45:02:85:f6:2b:f1:e6:b5:01:75:75:da:66:b2:52:
61:7b:78:01:04:43:7f:71:81:1f:ea:1b:18:d2:19:12:cc:04:
eb:bb:bc:cf:65:fb:e3:f3:e9:22:a1:6a:98:8a:bd:6d:e0:5f:
f1:ea:e9:bd:5e:37:19:c6:af:45:0c:7d:1e:1d:1b:ab:9c:51:
fe:fd:19:b5:73:e1:91:e8:3a:c8:d3:63:80:9f:84:f5:e8:16:
a5:77:a1:54:4e:8a:40:d0:6c:34:4a:88:26:c6:7e:9b:a2:53:
ec:96:09:58:93:38:85:6f:a8:2c:06:24:a8:69:6d:8a:3a:af:
43:d0:ad:00:3f:2d:1b:17:0a:89:44:7b:1b:93:8d:4d:18:0d:
4b:9d:e6:83
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYLa0MbupReK6a4Du2Q2CQOcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjIwODI2MTU0MTMxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWZlMjc2ZWExNmU4NjM5MGQ4N2YwNWE2ZmFmNzhiYzQzZjI4NDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOKmATjCcB5S1OPHHesBk0YIo1qH
gplcwk4Cek2DJpA9cOrjsmwB0lUBxvrUUmUgxbC/+Q0BdAa6lmxhut4lN34oIwWZ
Vy+J3uoF5FvXslC8BWKQYvypNpjGJ9Uk/LuU746Q3qmUycuVKu7D5xYwffvoL0sG
We6NIHCMjGqibWeKPwvSmHUEdSdrGYct9a9i2QY0l4Jkf3PmDvicT5DF9iekd5J9
oKncmfKedWUO8pY3JcalXks9e/KkxEt6qeI5mNgeKEPtbhRs/QNVu4RjHEYQNUAS
Dkgj69A08cZ/YffaQEbSNt6c9Wx2A/O9MkENA2UfD0fMKc9jeMr8tVJIjQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBX+J26hboY5DYfwWm+veLxD8oQSMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvRmY0bmJxRnVoamtOaF9CYWI2OTR2RVB5aEJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBXaqEAwQB
XauqAwQBXav6MA0GCSqGSIb3DQEBCwUAA4IBAQA5du6GerO4KM2hEhv/mYyqKnSZ
ZZI9K7CQfqYc8vGTeaiExQuDPCEzd4jdPYY25HzMjuC1dO3oGB+lIa1G4rvHbEku
f93WxDL+QpbmtPcPP3jY4r/Cp/L3TBOExu9dE+XS1ito/yajFnUDwVTI79pFAoX2
K/HmtQF1ddpmslJhe3gBBEN/cYEf6hsY0hkSzATru7zPZfvj8+kioWqYir1t4F/x
6um9XjcZxq9FDH0eHRurnFH+/Rm1c+GR6DrI02OAn4T16Bald6FUTopA0Gw0Sogm
xn6bolPslglYkziFb6gsBiSoaW2KOq9D0K0APy0bFwqJRHsbk41NGA1LneaD
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:32 2025 by rpki-client