Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/N635pe3AxAZkwK5DZuuRSnb9T3c.roa
File: N635pe3AxAZkwK5DZuuRSnb9T3c.roa (raw, json)
Hash identifier: 1JCS0FoRqb4hklvp7IWGtsxOrDjxsWll95BE3H2EdXM=
Subject key identifier: 37:AD:F9:A5:ED:C0:C4:06:64:C0:AE:43:66:EB:91:4A:76:FD:4F:77
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 286127D2
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/N635pe3AxAZkwK5DZuuRSnb9T3c.roa
Signing time: Sat 01 Jan 2022 16:10:21 +0000
ROA not before: Sat 01 Jan 2022 16:10:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212303
IP address blocks: 93.170.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 677455826 (0x286127d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:10:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37adf9a5edc0c40664c0ae4366eb914a76fd4f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e1:b9:b2:db:30:c3:f7:39:d1:b9:bf:1f:5d:
98:b0:4e:3d:86:37:d7:ae:22:00:cb:c1:66:66:2e:
13:91:71:7d:bd:10:d4:24:92:bb:49:19:7c:f5:5d:
15:ea:33:65:ab:35:c7:b1:97:dc:32:6f:f3:d2:d6:
18:da:9f:29:46:01:df:b1:31:19:9b:11:05:c9:0e:
9b:8a:1d:48:b5:4b:10:38:36:ac:c9:81:4f:c9:95:
09:0b:af:15:98:af:58:75:68:3f:5b:5c:6c:92:c4:
e2:62:d9:11:f5:c7:19:bf:52:f7:0f:b2:15:3d:c0:
83:77:fc:a1:65:c6:2c:7d:fa:68:21:0b:ba:ca:87:
a2:3e:86:75:b4:ca:1d:16:fc:ca:59:44:35:1b:e1:
3c:da:81:92:bc:8c:74:1f:1b:f3:e7:0d:ae:0a:7e:
3c:a3:7d:8f:c4:af:61:3c:1f:06:a3:41:ff:cb:55:
04:c4:b0:39:d1:5f:d6:18:89:d4:48:e5:68:3c:2c:
91:f4:49:db:6e:60:1b:9a:65:c2:b0:ae:7a:20:87:
a4:02:4d:7f:e4:aa:50:09:51:92:8b:c1:aa:16:6f:
c2:ca:e0:64:12:03:7f:ed:ff:1f:0e:19:e1:36:00:
69:ec:6d:6e:ef:76:70:0f:e6:64:f2:d9:24:b5:35:
d4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AD:F9:A5:ED:C0:C4:06:64:C0:AE:43:66:EB:91:4A:76:FD:4F:77
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/N635pe3AxAZkwK5DZuuRSnb9T3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.254.0/24
Signature Algorithm: sha256WithRSAEncryption
39:1f:2b:5e:cc:78:c7:ef:05:9b:e7:86:84:3d:95:77:61:71:
89:3b:22:27:12:d9:14:e3:5c:bb:76:5a:b9:08:8f:9c:9c:b7:
83:9d:a9:76:db:dc:40:af:7f:d2:ee:9c:65:d0:1c:d5:28:9f:
54:00:32:50:62:b8:ff:97:d0:7e:42:9d:64:64:f2:82:0e:a8:
d5:56:cb:82:25:91:e2:56:e5:c0:de:0c:8f:f9:b3:6e:ec:96:
d9:25:44:7c:29:90:64:6f:e0:07:a5:af:b3:c2:65:c0:be:cc:
17:44:fd:15:2c:36:41:ce:9a:61:65:c0:57:a1:07:9b:d4:b2:
cb:29:c8:d7:c6:cd:fb:d6:6c:52:ff:47:17:26:76:e8:16:7a:
df:b0:0e:a7:a3:26:a3:67:09:bf:99:84:75:f0:f3:17:e6:58:
e2:01:a8:7f:c9:c6:9e:eb:55:2b:fb:dd:51:90:f6:9a:b8:60:
12:df:28:11:62:4a:a7:bb:ca:fa:6e:07:95:03:91:74:a9:39:
74:57:3e:87:11:42:31:67:1f:1e:b3:b4:e3:2f:16:73:fe:be:
89:9b:62:b5:54:80:91:3a:ff:9c:27:53:eb:5f:66:92:89:e2:
33:05:ce:ed:3b:13:0f:db:4a:51:9d:05:c8:01:ad:aa:bd:e1:
e1:81:01:87
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEKGEn0jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDkxMjJjMzU0MzhhNGViMjYyMzNmZGM2ZTRiYjFkZjJkYWFlZjQyMB4XDTIyMDEw
MTE2MTAyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzdhZGY5YTVlZGMw
YzQwNjY0YzBhZTQzNjZlYjkxNGE3NmZkNGY3NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMjhubLbMMP3OdG5vx9dmLBOPYY3164iAMvBZmYuE5Fxfb0Q
1CSSu0kZfPVdFeozZas1x7GX3DJv89LWGNqfKUYB37ExGZsRBckOm4odSLVLEDg2
rMmBT8mVCQuvFZivWHVoP1tcbJLE4mLZEfXHGb9S9w+yFT3Ag3f8oWXGLH36aCEL
usqHoj6GdbTKHRb8yllENRvhPNqBkryMdB8b8+cNrgp+PKN9j8SvYTwfBqNB/8tV
BMSwOdFf1hiJ1EjlaDwskfRJ225gG5plwrCueiCHpAJNf+SqUAlRkovBqhZvwsrg
ZBIDf+3/Hw4Z4TYAaextbu92cA/mZPLZJLU11OcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ3rfml7cDEBmTArkNm65FKdv1PdzAfBgNVHSMEGDAWgBR0kSLDVDik6yYj
P9xuS7HfLarvQjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8x
L042MzVwZTNBeEFaa3dLNURadXVSU25iOVQzYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
MThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8xL2RKRWl3MVE0cE9z
bUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF2q/jANBgkqhkiG9w0BAQsFAAOC
AQEAOR8rXsx4x+8Fm+eGhD2Vd2FxiTsiJxLZFONcu3ZauQiPnJy3g52pdtvcQK9/
0u6cZdAc1SifVAAyUGK4/5fQfkKdZGTygg6o1VbLgiWR4lblwN4Mj/mzbuyW2SVE
fCmQZG/gB6Wvs8JlwL7MF0T9FSw2Qc6aYWXAV6EHm9SyyynI18bN+9ZsUv9HFyZ2
6BZ637AOp6Mmo2cJv5mEdfDzF+ZY4gGof8nGnutVK/vdUZD2mrhgEt8oEWJKp7vK
+m4HlQORdKk5dFc+hxFCMWcfHrO04y8Wc/6+iZtitVSAkTr/nCdT619mkoniMwXO
7TsTD9tKUZ0FyAGtqr3h4YEBhw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:36:39 2025 by rpki-client