Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HSm6Ol1cyCt0gUQOSe6wY3sQ-FI.roa
File: HSm6Ol1cyCt0gUQOSe6wY3sQ-FI.roa (raw, json)
Hash identifier: n4dESMyJobQ2rYoB1OXIH1xFdLbUzINJBa1aKwXpf8Q=
Subject key identifier: 1D:29:BA:3A:5D:5C:C8:2B:74:81:44:0E:49:EE:B0:63:7B:10:F8:52
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0185709539FDE9DCF3F6244CE4A3ACF7669E
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HSm6Ol1cyCt0gUQOSe6wY3sQ-FI.roa
Signing time: Mon 02 Jan 2023 03:45:05 +0000
ROA not before: Mon 02 Jan 2023 03:45:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48323
IP address blocks: 93.170.128.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:39:fd:e9:dc:f3:f6:24:4c:e4:a3:ac:f7:66:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d29ba3a5d5cc82b7481440e49eeb0637b10f852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:85:17:8a:0a:5d:eb:e0:c9:9a:0d:df:df:17:
65:fd:1c:d9:63:62:e9:e5:79:8e:82:e9:91:84:d3:
17:7f:b6:63:f7:c4:87:df:a2:d0:fe:f9:02:3f:89:
eb:7e:00:67:90:4b:ca:ba:92:51:ff:43:70:f1:b5:
87:37:f4:a5:50:02:74:31:18:b0:73:ac:5d:93:b7:
fc:30:c2:79:cb:78:2a:9e:35:ba:a4:a0:3c:14:1e:
15:b1:05:2b:13:e6:76:0c:54:c4:c2:c8:74:d9:73:
a8:58:d8:8a:c2:4d:4c:bf:99:16:0b:ac:bd:6b:92:
6b:9b:01:46:b1:6b:02:d9:e6:8f:a2:69:c3:cf:a7:
40:da:bb:c3:ee:bd:f7:70:d8:37:4f:08:a4:c9:84:
46:8b:cf:15:b1:e6:27:f0:38:48:40:86:43:33:95:
f3:ae:6c:b5:4e:05:9a:ed:7e:23:4c:3f:20:22:b8:
4d:a7:cb:73:2f:3d:73:64:df:05:0b:7e:ac:29:3c:
70:04:c9:ac:56:31:c3:33:20:7d:91:3e:b3:db:de:
10:d4:91:17:54:9a:b0:7c:fc:df:c1:24:fe:53:cd:
e6:91:6e:4c:14:3c:94:b6:36:27:b2:96:7d:99:54:
7c:51:da:36:23:42:21:61:c6:a9:fa:60:72:9c:16:
29:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:29:BA:3A:5D:5C:C8:2B:74:81:44:0E:49:EE:B0:63:7B:10:F8:52
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HSm6Ol1cyCt0gUQOSe6wY3sQ-FI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.128.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:2a:f9:81:f1:bc:ff:c0:b8:a2:9c:ee:72:23:d3:90:2d:7a:
da:3d:0a:69:63:ea:71:ff:91:88:0f:a6:fd:b0:db:c3:ab:60:
91:fb:4b:c9:03:d5:36:21:b4:f9:15:26:f1:29:1a:6b:8d:3d:
e9:e4:cf:c1:e3:1e:f6:24:38:aa:cb:71:9e:74:50:81:1e:a9:
35:13:a1:34:14:1b:85:ff:68:d0:fa:ae:c5:21:4c:a3:75:cf:
d5:78:9b:62:36:01:48:53:57:55:9b:74:49:d1:e1:40:e6:55:
a9:96:3e:5b:29:da:4a:d2:c4:8c:4a:91:fb:b9:90:17:d3:29:
9b:9c:6e:6e:5c:b8:16:ae:db:da:5a:bc:95:6d:56:00:ae:8c:
54:e2:2d:7a:ea:46:ac:3d:9b:ae:68:35:b5:0a:48:bb:3d:cd:
94:17:88:0d:b4:df:62:80:20:d1:3a:99:03:6d:ed:a4:c6:4c:
6f:6b:94:35:35:7b:db:68:c7:af:a9:06:a7:c1:a3:83:0e:b0:
f9:4b:04:b4:5b:d5:29:c5:37:18:78:25:34:d8:7e:69:38:ad:
66:48:1e:41:02:11:30:0c:f1:41:eb:38:d6:be:4c:39:62:d2:
42:a6:f0:31:4f:67:4b:97:94:9e:2d:82:88:6c:d3:84:ff:cc:
30:b7:f7:34
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwlTn96dzz9iRM5KOs92aeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjMwMTAyMDM0NTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDI5YmEzYTVkNWNjODJiNzQ4MTQ0MGU0OWVlYjA2MzdiMTBmODUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoUXigpd6+DJmg3f3xdl/RzZY2Lp
5XmOgumRhNMXf7Zj98SH36LQ/vkCP4nrfgBnkEvKupJR/0Nw8bWHN/SlUAJ0MRiw
c6xdk7f8MMJ5y3gqnjW6pKA8FB4VsQUrE+Z2DFTEwsh02XOoWNiKwk1Mv5kWC6y9
a5JrmwFGsWsC2eaPomnDz6dA2rvD7r33cNg3TwikyYRGi88VseYn8DhIQIZDM5Xz
rmy1TgWa7X4jTD8gIrhNp8tzLz1zZN8FC36sKTxwBMmsVjHDMyB9kT6z294Q1JEX
VJqwfPzfwST+U83mkW5MFDyUtjYnspZ9mVR8Udo2I0IhYcap+mBynBYp4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB0pujpdXMgrdIFEDknusGN7EPhSMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvSFNtNk9sMWN5Q3QwZ1VRT1NlNndZM3NRLUZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXaqAMA0G
CSqGSIb3DQEBCwUAA4IBAQB7KvmB8bz/wLiinO5yI9OQLXraPQppY+px/5GID6b9
sNvDq2CR+0vJA9U2IbT5FSbxKRprjT3p5M/B4x72JDiqy3GedFCBHqk1E6E0FBuF
/2jQ+q7FIUyjdc/VeJtiNgFIU1dVm3RJ0eFA5lWplj5bKdpK0sSMSpH7uZAX0ymb
nG5uXLgWrtvaWryVbVYAroxU4i166kasPZuuaDW1Cki7Pc2UF4gNtN9igCDROpkD
be2kxkxva5Q1NXvbaMevqQanwaODDrD5SwS0W9UpxTcYeCU02H5pOK1mSB5BAhEw
DPFB6zjWvkw5YtJCpvAxT2dLl5SeLYKIbNOE/8wwt/c0
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:43:55 2025 by rpki-client