Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/SfaFwXmmrlahsQ0NJ8vq9QZWtNY.roa
File: SfaFwXmmrlahsQ0NJ8vq9QZWtNY.roa (raw, json)
Hash identifier: Zi8F1NrgF8AjJhju+OxNP1etgzVAz/uGQqw6THUu7c0=
Subject key identifier: 49:F6:85:C1:79:A6:AE:56:A1:B1:0D:0D:27:CB:EA:F5:06:56:B4:D6
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 284B458A
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/SfaFwXmmrlahsQ0NJ8vq9QZWtNY.roa
Signing time: Sat 01 Jan 2022 16:10:06 +0000
ROA not before: Sat 01 Jan 2022 16:10:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209179
IP address blocks: 92.253.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 676021642 (0x284b458a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:10:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=49f685c179a6ae56a1b10d0d27cbeaf50656b4d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d9:e1:94:6a:32:98:58:de:bb:87:f9:78:5b:
68:63:f6:67:51:5d:90:47:d3:03:9f:fa:dd:9e:af:
f9:e6:e8:9c:5b:13:46:98:e1:02:f6:97:01:28:23:
fa:bf:7c:c6:63:53:ac:22:af:a6:38:10:af:d6:57:
23:4b:d9:91:f5:cb:78:de:6c:e2:95:7e:d6:2b:ee:
96:74:09:ca:f6:b9:c7:3b:7c:35:cd:d1:ef:31:bf:
3f:06:25:0d:2d:d0:ab:e2:b9:ad:d6:b9:96:f4:33:
a6:7a:ec:c7:74:26:74:2c:a8:3c:11:f2:36:db:1d:
c8:43:72:01:c2:81:3f:ee:a8:83:e6:dd:70:80:62:
8f:28:00:d3:c4:68:5a:0e:ec:a6:4a:61:a7:8d:ab:
e8:6f:bd:7f:83:cc:a6:d4:78:ea:49:56:98:8e:c6:
0c:5b:f0:5c:47:14:b8:25:20:ec:fd:51:5e:b9:85:
7e:4e:31:f1:cf:63:29:99:22:d4:66:57:5e:3a:99:
d3:1f:5e:33:fd:fb:18:61:83:72:ee:34:d0:33:f5:
fd:3d:25:ca:7c:a4:64:32:8a:4e:7c:22:f6:26:31:
e8:16:95:68:60:5e:54:d2:a7:f7:6a:96:37:91:d0:
d8:42:c0:f4:4c:80:f0:07:96:c2:c6:a0:14:0d:89:
c9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F6:85:C1:79:A6:AE:56:A1:B1:0D:0D:27:CB:EA:F5:06:56:B4:D6
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/SfaFwXmmrlahsQ0NJ8vq9QZWtNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.253.203.0/24
Signature Algorithm: sha256WithRSAEncryption
03:f2:2a:28:60:2a:83:4c:80:13:d6:43:07:64:f9:7c:2f:e3:
00:05:dd:af:6a:3c:16:bd:ea:f4:af:1e:47:93:31:47:86:c4:
5b:72:42:c8:4e:51:22:5e:bf:05:0a:71:9e:b1:e5:da:54:ea:
bf:f1:83:02:4e:ad:43:11:94:e6:d1:0c:74:f9:62:9f:a5:ae:
d1:3d:91:a6:13:87:a5:58:b9:5a:01:19:8a:42:69:c9:cf:7b:
9e:e1:c2:81:d7:87:13:e0:e4:d9:fa:cd:42:65:87:6b:cd:85:
ea:ad:0f:44:2d:ba:2a:f4:49:b9:51:49:0a:b9:19:f2:b6:43:
aa:cc:78:f1:f3:12:20:dd:8d:8e:63:7a:20:b6:3b:ee:77:72:
e2:f3:d9:bc:55:9d:2c:3a:b5:4c:5c:b8:5d:ec:c1:48:d7:c6:
af:a6:f9:2a:bd:ac:35:8a:78:35:53:0e:41:ce:ba:49:b5:40:
07:48:23:f2:d9:f8:eb:ba:bc:c1:73:4a:a3:81:89:f3:5a:0c:
cf:b0:fb:d9:6f:7f:3b:10:47:f2:87:dd:bc:68:74:8e:f9:8b:
f4:e8:7e:7c:2f:33:90:6b:c7:89:b7:7d:d1:cd:ef:9c:b9:6c:
ce:e9:9a:e3:f6:36:28:f4:91:15:43:45:b6:26:16:19:24:38:
2d:9d:8b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:55:57 2025 by rpki-client