Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/GzVi8qvM_sAPyjKqdJuYWdnuJVc.roa
File: GzVi8qvM_sAPyjKqdJuYWdnuJVc.roa (raw, json)
Hash identifier: bpuqWzkEagp9B0ZKqQylVyG36NPDaNcFblf7jqGUC5c=
Subject key identifier: 1B:35:62:F2:AB:CC:FE:C0:0F:CA:32:AA:74:9B:98:59:D9:EE:25:57
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570952078DB62A1F4D66102B17C818975
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/GzVi8qvM_sAPyjKqdJuYWdnuJVc.roa
Signing time: Mon 02 Jan 2023 03:44:59 +0000
ROA not before: Mon 02 Jan 2023 03:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42447
IP address blocks: 93.170.72.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:20:78:db:62:a1:f4:d6:61:02:b1:7c:81:89:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b3562f2abccfec00fca32aa749b9859d9ee2557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d2:81:9c:9a:92:90:9d:29:56:44:6b:50:85:
f7:73:92:03:14:0e:4b:8b:79:13:e8:fc:48:60:68:
cd:7a:57:69:e1:ba:4c:52:2f:69:7b:a2:5f:87:c1:
18:83:7f:ed:22:93:2d:2a:a3:49:f1:6a:f3:b0:4a:
37:3a:f5:11:ef:0a:37:48:fd:45:e2:a7:5c:52:46:
c0:14:bd:c2:47:bd:f6:0f:8c:3b:9e:39:05:68:66:
4c:fa:14:c4:19:dc:fc:79:b8:64:a9:19:8b:ee:bd:
95:cb:e1:3d:ad:85:a6:05:52:c2:f7:fe:28:47:90:
1c:4c:d7:6e:11:99:2c:39:4b:37:d2:e2:4c:b4:ec:
68:a5:37:ed:c5:18:ee:d4:34:30:4f:b7:8a:13:a1:
9e:cd:33:e7:fa:2e:b0:66:89:71:c3:21:a5:28:9e:
36:28:8a:3d:9d:88:54:aa:e3:e0:e3:75:ce:6e:ad:
27:a9:65:c9:fd:89:ea:c8:b3:69:d3:58:5e:01:eb:
0b:2d:5c:45:34:ad:4b:15:1e:06:92:7a:89:1b:d0:
0e:8a:6c:b4:1b:21:66:67:dd:05:68:f6:0f:95:a4:
50:81:8f:e3:49:44:8f:19:d4:ab:9f:04:4d:55:7a:
9d:88:3b:3a:00:82:2b:30:b9:7f:4c:b9:1c:11:e8:
40:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:35:62:F2:AB:CC:FE:C0:0F:CA:32:AA:74:9B:98:59:D9:EE:25:57
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/GzVi8qvM_sAPyjKqdJuYWdnuJVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.72.0/23
Signature Algorithm: sha256WithRSAEncryption
35:38:bb:2a:a1:e9:29:8e:44:54:03:45:55:88:19:32:a8:14:
b3:b8:e9:f6:26:7d:10:a4:7e:2a:57:89:47:19:fc:ef:a9:cd:
25:70:02:55:b4:d7:20:50:ad:ff:82:6b:54:60:2c:9b:85:37:
fb:c4:d1:18:31:0f:9c:e4:27:6e:51:2e:3e:f0:6e:66:a9:50:
bb:60:e1:d0:04:f9:f0:1a:a2:56:22:a6:d5:9c:c7:e4:de:f1:
f0:87:e6:5b:c2:3c:dc:4f:31:e7:51:19:00:4b:07:d1:23:5d:
8b:f9:e2:f4:6a:31:7b:7e:94:78:88:e3:9b:5e:37:c0:cc:68:
17:18:5c:f5:ac:3c:ba:80:70:10:1e:e9:91:db:45:b3:a4:40:
9b:0c:ea:47:a8:67:a1:19:f5:88:74:da:74:49:99:59:49:a5:
75:67:16:54:bd:f2:31:3d:5c:22:67:8d:27:4b:2f:e4:9d:3f:
40:06:9c:3e:69:b8:a6:a9:4c:2b:c4:8a:24:ef:a0:c7:de:61:
06:2f:f1:9b:e4:a9:02:18:de:38:49:4f:87:51:6a:08:00:ad:
05:fd:33:27:cd:f8:35:47:3a:f6:f5:6b:c6:31:22:5a:0c:27:
bd:c6:22:a7:fb:92:d7:f1:06:43:93:56:4b:63:fd:b5:02:69:
36:fe:e5:7f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwlSB422Kh9NZhArF8gYl1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjMwMTAyMDM0NDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjM1NjJmMmFiY2NmZWMwMGZjYTMyYWE3NDliOTg1OWQ5ZWUyNTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNKBnJqSkJ0pVkRrUIX3c5IDFA5L
i3kT6PxIYGjNeldp4bpMUi9pe6Jfh8EYg3/tIpMtKqNJ8WrzsEo3OvUR7wo3SP1F
4qdcUkbAFL3CR732D4w7njkFaGZM+hTEGdz8ebhkqRmL7r2Vy+E9rYWmBVLC9/4o
R5AcTNduEZksOUs30uJMtOxopTftxRju1DQwT7eKE6GezTPn+i6wZolxwyGlKJ42
KIo9nYhUquPg43XObq0nqWXJ/YnqyLNp01heAesLLVxFNK1LFR4GknqJG9AOimy0
GyFmZ90FaPYPlaRQgY/jSUSPGdSrnwRNVXqdiDs6AIIrMLl/TLkcEehA+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBs1YvKrzP7AD8oyqnSbmFnZ7iVXMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvR3pWaThxdk1fc0FQeWpLcWRKdVlXZG51SlZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXapIMA0G
CSqGSIb3DQEBCwUAA4IBAQA1OLsqoekpjkRUA0VViBkyqBSzuOn2Jn0QpH4qV4lH
Gfzvqc0lcAJVtNcgUK3/gmtUYCybhTf7xNEYMQ+c5CduUS4+8G5mqVC7YOHQBPnw
GqJWIqbVnMfk3vHwh+ZbwjzcTzHnURkASwfRI12L+eL0ajF7fpR4iOObXjfAzGgX
GFz1rDy6gHAQHumR20WzpECbDOpHqGehGfWIdNp0SZlZSaV1ZxZUvfIxPVwiZ40n
Sy/knT9ABpw+abimqUwrxIok76DH3mEGL/Gb5KkCGN44SU+HUWoIAK0F/TMnzfg1
Rzr29WvGMSJaDCe9xiKn+5LX8QZDk1ZLY/21Amk2/uV/
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:30 2025 by rpki-client