Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HSHNI-i5Qx1XmuVrQmIZ8IJ6g_Q.roa
File: HSHNI-i5Qx1XmuVrQmIZ8IJ6g_Q.roa (raw, json)
Hash identifier: 5UKxzJzy+J+01bVdKCJIqv3Pt6k5HAAnFhcnSTpazO8=
Subject key identifier: 1D:21:CD:23:E8:B9:43:1D:57:9A:E5:6B:42:62:19:F0:82:7A:83:F4
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095444CC9F70753B1F0BFD0C97BCE1E
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HSHNI-i5Qx1XmuVrQmIZ8IJ6g_Q.roa
Signing time: Mon 02 Jan 2023 03:45:08 +0000
ROA not before: Mon 02 Jan 2023 03:45:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49551
IP address blocks: 93.171.44.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:44:4c:c9:f7:07:53:b1:f0:bf:d0:c9:7b:ce:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d21cd23e8b9431d579ae56b426219f0827a83f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:08:58:b4:36:9e:22:46:a8:c2:36:e0:2a:84:
24:cb:9f:61:ec:4e:40:77:d0:f3:3d:37:06:61:0e:
d4:c3:51:05:06:64:84:a2:33:ed:d5:6a:64:51:e6:
85:a5:7e:f1:26:a2:eb:b1:8c:c8:3c:d0:43:6e:79:
3f:02:d0:c1:56:eb:7b:0d:af:85:61:15:15:27:7c:
cc:a4:6f:c4:04:e9:ff:87:66:9a:58:05:7b:90:1b:
73:ba:1b:a9:bb:6e:ed:22:cf:2a:d3:18:78:d4:2b:
c2:b0:79:79:5e:b2:4b:c8:f5:7c:91:8f:69:84:fa:
16:b7:9c:2c:39:36:9c:12:63:ba:22:8b:d8:4d:30:
a8:14:37:c0:ff:8d:cf:88:19:57:74:21:97:3f:37:
0b:d4:0b:2a:89:56:1a:79:ea:bd:a9:1d:71:3c:56:
67:91:5c:d1:d3:b3:57:69:3c:22:60:9f:0a:8b:c9:
d4:b0:1e:c4:7f:fd:51:86:2a:f8:f3:34:60:d1:ac:
62:29:0c:b2:54:1a:0c:92:d4:6e:8a:3a:5b:c6:98:
d2:ca:04:8a:cb:ce:ae:97:c6:99:5e:95:4e:02:10:
bd:9b:6e:9b:4e:ea:dd:81:fb:5e:7d:ab:8e:eb:8f:
8a:91:2a:14:29:0c:1b:b1:63:54:5c:a5:31:dc:6c:
bd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:21:CD:23:E8:B9:43:1D:57:9A:E5:6B:42:62:19:F0:82:7A:83:F4
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HSHNI-i5Qx1XmuVrQmIZ8IJ6g_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.44.0/22
Signature Algorithm: sha256WithRSAEncryption
68:f4:5e:99:07:27:33:a5:c3:a7:b0:c6:9d:6c:3b:85:87:bf:
7e:79:22:70:f0:d6:00:aa:57:cc:98:32:cd:00:65:ad:36:19:
ac:dc:1f:cf:87:f2:d1:6b:1c:fc:9b:8c:cf:8e:7e:0a:b9:07:
96:86:5d:34:59:7e:55:69:f8:ae:04:1d:6e:45:4d:19:40:2a:
fc:c2:e6:7a:22:cb:18:6b:0d:75:19:fa:be:87:92:48:3a:a4:
12:93:a4:62:10:a3:cd:63:85:e3:ff:2f:f2:a3:24:46:7a:65:
1f:d0:fb:ee:2a:00:a3:70:42:9a:ea:67:d6:44:ca:2f:82:64:
96:1b:8b:ef:05:53:0c:ed:06:71:90:c4:60:f6:7a:75:4b:c6:
fd:09:f7:fe:1b:9a:ef:40:47:02:88:0a:d7:00:06:e8:92:80:
fb:f0:a5:84:50:d8:88:c6:da:23:71:ac:54:7b:4b:40:a8:c6:
0f:d8:15:53:bf:fa:94:b5:9e:98:f6:aa:dd:0b:ea:29:56:d7:
e1:c4:f7:93:2f:51:82:42:85:0d:98:07:0d:e8:1e:c9:31:63:
1d:5b:17:14:bb:bc:e2:7e:61:9e:e7:0a:6e:fb:e8:cc:ec:e9:
b8:51:d6:df:57:2e:dc:7a:5f:20:02:47:cf:f9:01:1d:59:fc:
55:42:f3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 06:37:58 2025 by rpki-client