Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FxdKKhn7vRijK5-KJcacDDM1qpc.roa
File: FxdKKhn7vRijK5-KJcacDDM1qpc.roa (raw, json)
Hash identifier: F8WFhkHce6N0FO7ezr2r9XNLY+wAGobIPuAmB3Hvz2M=
Subject key identifier: 17:17:4A:2A:19:FB:BD:18:A3:2B:9F:8A:25:C6:9C:0C:33:35:AA:97
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0187FBA41DF23F17C0A1D6603FFA9A3A18AA
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FxdKKhn7vRijK5-KJcacDDM1qpc.roa
Signing time: Mon 08 May 2023 13:54:09 +0000
ROA not before: Mon 08 May 2023 13:54:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201069
IP address blocks: 93.170.187.0/24 maxlen: 24
93.170.96.0/24 maxlen: 24
95.47.119.0/24 maxlen: 24
93.171.218.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fb:a4:1d:f2:3f:17:c0:a1:d6:60:3f:fa:9a:3a:18:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: May 8 13:54:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17174a2a19fbbd18a32b9f8a25c69c0c3335aa97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8b:27:55:af:ba:d9:34:ed:e8:ec:2a:7a:df:
87:28:4b:bd:8d:14:86:db:b5:57:ac:a9:c6:72:60:
c0:1e:f4:6b:6c:51:d8:26:9c:14:f4:e5:dd:c6:06:
60:af:87:de:c3:ab:71:34:63:17:0c:c4:90:be:5f:
af:d9:5c:3f:ed:7f:03:3d:cd:ad:38:12:af:47:7a:
06:04:5f:f6:b9:68:0b:2b:82:fa:29:7a:9f:20:e7:
93:85:e1:19:3a:77:75:de:02:d9:1a:fd:33:b4:95:
73:a4:1d:1a:74:f2:99:e9:5b:0c:fc:4e:13:7e:d0:
fe:ae:fc:94:32:a1:fd:c4:89:85:b7:de:be:f9:c9:
c7:3b:ec:e1:02:76:ce:9e:93:ae:f0:0b:b8:f3:07:
13:4a:ff:0e:63:5b:26:e1:d0:3e:bc:3b:d4:8d:62:
d3:ef:3a:89:48:83:99:1d:b4:a7:dc:75:82:a4:33:
e9:4c:f2:ec:ac:76:49:8c:4b:8c:fe:43:14:a9:fc:
9a:9a:d3:da:f5:fb:3c:66:3b:e4:2b:45:d0:df:93:
c0:e2:6f:5b:a4:82:03:0c:90:67:a3:9d:96:82:cd:
6c:91:bd:9e:28:d4:72:62:b8:2c:37:57:1f:61:e3:
ea:91:da:bc:91:04:96:c6:a1:60:0e:14:b4:3f:70:
49:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:17:4A:2A:19:FB:BD:18:A3:2B:9F:8A:25:C6:9C:0C:33:35:AA:97
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FxdKKhn7vRijK5-KJcacDDM1qpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.96.0/24
93.170.187.0/24
93.171.218.0/24
95.47.119.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:61:bc:df:95:3a:67:9e:2f:29:54:5c:c7:0f:06:9e:01:26:
2a:ac:8d:50:e0:e6:7e:d8:a6:52:64:25:8f:56:ad:21:48:75:
1a:2e:69:15:23:76:de:65:76:12:1f:9c:32:4f:d6:7d:43:d8:
a5:4a:7f:65:8d:d2:10:86:11:6c:e2:ef:20:d6:9d:ec:8f:30:
fd:4e:cf:f6:35:1e:f5:77:8a:7d:ad:a1:70:29:74:cd:c8:21:
37:09:5f:92:7d:56:6e:db:c0:a2:db:51:08:64:b7:26:10:8a:
13:86:94:a2:c6:88:d6:5b:19:f5:80:e0:de:8e:18:10:d7:29:
23:b1:7f:65:80:1b:11:ff:3b:23:6d:5c:13:de:b9:91:b2:fc:
55:6f:54:85:4a:23:89:f4:41:c8:75:c2:24:68:d8:b5:c3:04:
08:45:fa:aa:60:d8:4e:67:6f:bf:94:2a:74:bc:67:95:99:85:
02:85:70:b0:33:28:3c:20:98:07:e6:52:6c:11:36:6f:d7:d7:
58:02:50:67:10:ba:65:31:31:47:59:25:75:0a:cd:07:ee:a6:
6d:63:d7:4c:56:d8:75:29:0c:e5:56:b9:77:52:87:91:d6:4c:
ee:86:e2:af:59:54:e9:22:0a:92:58:6c:5d:1b:b8:dc:e2:52:
84:b6:44:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:48:32 2025 by rpki-client