Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/O9JOmFdyQ24rlTLhDPx--EfANnA.roa
File: O9JOmFdyQ24rlTLhDPx--EfANnA.roa (raw, json)
Hash identifier: 0o5w/NxMWlYUE7IhlIwgA32nCRHLMuYFApJtD2b5J64=
Subject key identifier: 3B:D2:4E:98:57:72:43:6E:2B:95:32:E1:0C:FC:7E:F8:47:C0:36:70
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 2804DC7C
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/O9JOmFdyQ24rlTLhDPx--EfANnA.roa
Signing time: Sat 01 Jan 2022 16:09:26 +0000
ROA not before: Sat 01 Jan 2022 16:09:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61989
IP address blocks: 93.170.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 671407228 (0x2804dc7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3bd24e985772436e2b9532e10cfc7ef847c03670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e2:4f:56:6f:73:bd:c7:52:35:3c:fb:b0:de:
d7:61:fe:5c:b6:5b:4f:ad:d3:a7:ee:34:1b:13:ca:
f1:ca:9c:1c:7a:d9:a8:b0:fa:58:24:04:6e:55:6f:
93:bc:01:ee:b6:ed:04:9d:0a:8e:09:11:32:13:dd:
70:0d:9a:f4:81:69:75:3c:a1:76:8f:ee:ed:07:cd:
27:77:9e:e1:78:e4:e8:d5:99:05:33:4d:aa:b8:06:
d5:bb:79:33:df:d6:72:70:54:69:cd:b0:07:c5:ca:
f1:6c:6f:af:65:ed:12:a3:3e:6a:88:ac:10:fa:aa:
f3:6d:09:33:67:9e:83:2b:8d:fb:dd:ab:f1:33:2d:
d4:60:31:c8:43:c1:cf:14:ae:16:15:4b:b2:27:e0:
7f:24:6a:ad:6e:e2:24:d4:41:c6:bb:f1:85:57:e2:
b1:4b:3c:9f:a7:e9:77:e7:d2:47:f1:f6:99:fb:0d:
c4:be:b2:0c:9b:b9:1c:b3:89:7e:43:ca:0c:07:dc:
f3:85:28:37:f7:68:33:8f:34:73:e5:90:74:77:7c:
cf:a0:94:21:33:48:01:2a:8e:70:56:24:27:d5:3b:
bc:44:5e:67:56:34:0a:ff:9e:a4:48:6f:e0:7a:0c:
f7:0d:ec:13:26:fc:b6:c7:0b:e9:5c:96:dd:97:f6:
d9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D2:4E:98:57:72:43:6E:2B:95:32:E1:0C:FC:7E:F8:47:C0:36:70
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/O9JOmFdyQ24rlTLhDPx--EfANnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.83.0/24
Signature Algorithm: sha256WithRSAEncryption
69:5f:2c:04:d1:21:ae:80:48:55:60:e3:4a:c6:a2:17:2c:88:
85:79:a0:6a:f0:65:1f:f8:a6:e5:4e:95:b7:6a:53:9b:00:d5:
88:31:58:3b:3c:9c:ee:0e:18:c3:5d:46:4f:66:b9:56:14:0a:
5c:f3:eb:e3:ea:2b:ca:55:bb:7c:17:cf:1d:8e:e1:cb:e8:7b:
af:92:d3:64:3c:03:20:c6:5b:72:dd:aa:7d:fb:c6:43:2d:1d:
0d:79:45:c5:0a:1c:d9:e1:60:c1:7b:a4:5e:a3:54:68:30:f7:
55:34:e1:10:78:42:94:f4:d1:b0:b7:73:46:a2:c0:14:b9:42:
37:13:08:f5:e5:2d:3d:42:d9:c4:ce:27:48:67:6f:f2:85:aa:
07:ed:55:11:46:06:84:2d:32:91:7f:d4:64:89:ff:16:9a:c3:
d8:24:36:b2:c3:c6:eb:af:fb:b6:e0:71:06:98:59:0d:0a:2d:
37:78:71:8f:e2:3f:0f:50:6f:04:06:39:cf:4d:15:1d:76:64:
ec:ec:eb:34:f2:cb:97:96:c9:55:f9:1c:63:0d:b8:75:a2:32:
53:ac:ac:90:c2:6d:9c:dd:81:61:62:9f:a4:aa:a9:05:42:a4:
29:47:ac:4f:0d:9b:5c:f9:8d:c0:b2:05:95:e1:13:d1:a1:e4:
94:c7:48:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:51:16 2025 by rpki-client