Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/KuXsYsuMdWTq12ipIzBFdG_aG3g.roa
File: KuXsYsuMdWTq12ipIzBFdG_aG3g.roa (raw, json)
Hash identifier: l9h0vmBITY5FGPc7xsON81YTldR+cHMqk1/USP+dMV0=
Subject key identifier: 2A:E5:EC:62:CB:8C:75:64:EA:D7:68:A9:23:30:45:74:6F:DA:1B:78
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0189D5896936DE9021D82A76282F722D2D27
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/KuXsYsuMdWTq12ipIzBFdG_aG3g.roa
Signing time: Tue 08 Aug 2023 14:24:59 +0000
ROA not before: Tue 08 Aug 2023 14:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212392
IP address blocks: 93.171.248.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d5:89:69:36:de:90:21:d8:2a:76:28:2f:72:2d:2d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Aug 8 14:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ae5ec62cb8c7564ead768a9233045746fda1b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f9:e4:95:0a:9a:1e:c2:b4:8a:b8:30:f7:c3:
4c:fb:9b:44:f8:ed:16:57:36:6d:0e:0a:d1:d5:b3:
65:5f:c2:c6:75:0f:ca:cb:58:5e:33:8c:49:75:59:
d6:6f:2a:ac:b2:6f:8b:aa:d6:20:b3:d2:96:cc:7b:
15:07:4b:a8:d6:d2:9c:73:16:90:bb:64:51:7b:bd:
30:4c:e9:3b:4b:a3:49:4c:6a:f6:c7:2e:5c:13:a5:
d0:35:a8:56:2e:8e:88:fb:df:ee:99:fb:3f:ff:3a:
47:51:e5:52:49:1e:ca:a3:97:a1:69:48:5b:9d:56:
64:9c:0a:c5:12:a5:2f:9c:f7:77:03:d5:5c:46:17:
e6:b7:9e:43:76:66:ab:d9:7a:7d:57:41:37:58:ad:
39:4e:b2:3e:f7:59:53:83:75:fc:5e:56:15:a9:a4:
fb:eb:c4:a4:95:b8:59:58:eb:12:20:7f:20:89:4e:
02:4d:29:7b:8a:10:a6:ef:ed:27:2d:3b:47:f0:5e:
f5:e4:dd:70:32:3b:49:56:a2:28:3e:f1:32:e0:05:
a3:33:59:8d:be:e8:96:55:9f:5b:03:4d:41:67:13:
78:9d:01:49:88:44:cb:6c:d9:8c:f2:da:8b:ed:86:
54:54:cd:17:67:98:f9:05:df:8d:31:c0:c2:b0:2a:
2d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E5:EC:62:CB:8C:75:64:EA:D7:68:A9:23:30:45:74:6F:DA:1B:78
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/KuXsYsuMdWTq12ipIzBFdG_aG3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.248.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:ef:40:bd:05:d7:66:68:80:65:65:f6:3c:d2:f0:3f:8c:53:
87:60:86:f7:c6:f9:32:84:51:36:07:5f:f7:c9:b0:a7:d5:48:
90:ea:89:02:a1:3f:4a:d2:95:e4:b2:23:60:45:1c:05:5b:3b:
05:c0:93:b6:05:06:45:da:ba:ba:75:85:ae:5f:18:3c:2b:32:
a0:73:34:f4:12:d5:42:cc:cf:6a:5b:7d:73:ff:29:a5:2f:14:
c8:9d:68:9b:93:c2:b2:86:49:84:0a:e6:2e:8c:ea:23:bb:4e:
5f:16:da:65:ea:6d:10:60:13:80:71:53:56:d0:dc:c8:44:64:
b1:a4:68:0f:b8:c9:7d:88:76:86:f6:fd:6c:b8:e0:7b:83:50:
a5:36:d8:50:60:d0:cf:89:ee:aa:25:b6:4b:a7:b8:4b:b2:45:
e9:df:26:df:2a:02:d9:50:8a:f6:e5:83:ab:53:da:8a:84:27:
b5:89:bb:d7:bb:ee:2b:6e:36:ef:c0:6a:80:ff:26:87:e2:a0:
1b:b8:df:cc:b7:d0:4d:48:84:00:39:a2:78:3c:43:ac:ad:53:
e3:85:86:f4:c8:0c:db:57:ed:25:53:f8:cd:79:8f:cd:ee:ab:
f5:c4:2a:19:27:1e:ad:1e:3d:8b:a2:40:9b:89:9f:bf:b3:4a:
63:9e:f2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:42 2025 by rpki-client