Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/U9OHRB8JskZ4kpVCyyutcTNCKFQ.roa
File: U9OHRB8JskZ4kpVCyyutcTNCKFQ.roa (raw, json)
Hash identifier: nRVEbmer/q4eOapzO31Yam7QzGufHB76RQ5Zmguv6W4=
Subject key identifier: 53:D3:87:44:1F:09:B2:46:78:92:95:42:CB:2B:AD:71:33:42:28:54
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570952D3941B3D25D454C95FFA698E4E3
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/U9OHRB8JskZ4kpVCyyutcTNCKFQ.roa
Signing time: Mon 02 Jan 2023 03:45:02 +0000
ROA not before: Mon 02 Jan 2023 03:45:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44359
IP address blocks: 93.171.76.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:2d:39:41:b3:d2:5d:45:4c:95:ff:a6:98:e4:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53d387441f09b24678929542cb2bad7133422854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9a:45:c0:ef:0d:67:0b:0b:1e:5f:95:4b:8f:
b2:6a:f2:fa:de:39:e6:9f:6e:55:c3:1b:9f:4a:87:
59:29:9f:ab:17:d1:77:43:57:20:d6:6e:4a:35:8e:
e8:3a:35:c8:47:41:b6:34:25:50:c8:49:68:c8:57:
bc:6e:ec:92:bf:85:72:16:cf:c5:5a:f4:58:90:9b:
73:f7:46:f6:a4:55:b9:7b:fc:aa:be:03:95:ef:c1:
08:e8:9c:5a:10:b6:00:d8:5e:5e:04:64:52:d7:e8:
97:ba:93:d4:9b:7d:b0:00:11:43:79:b7:ec:a1:07:
d1:a2:47:cc:7c:df:c3:fd:bf:54:4d:60:86:cc:31:
52:10:13:d1:66:1c:34:0e:00:f6:aa:ea:cd:ff:26:
3b:ec:10:6e:e6:a7:3c:dd:9c:55:00:4a:bc:3c:aa:
15:4b:e4:f9:1e:33:02:28:c4:4b:a6:b7:0d:51:6a:
84:59:de:bc:99:67:fc:64:1a:d6:fb:e9:4f:b1:25:
b3:8e:3f:35:db:c6:8c:d4:6e:db:9c:f3:9a:23:97:
74:7b:68:c7:47:29:70:fe:a2:b2:e8:e9:75:23:0d:
f6:28:e9:55:ee:78:1e:8a:84:53:ed:6a:b0:ed:cf:
74:09:24:aa:cb:92:d4:93:12:4b:11:d3:cb:25:53:
0d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D3:87:44:1F:09:B2:46:78:92:95:42:CB:2B:AD:71:33:42:28:54
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/U9OHRB8JskZ4kpVCyyutcTNCKFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.76.0/23
Signature Algorithm: sha256WithRSAEncryption
30:52:1f:3c:67:36:6b:28:43:25:15:4b:0e:0f:f0:e5:96:1d:
6b:49:cd:f5:4e:e2:fa:8f:12:79:34:9a:5f:3f:4f:27:ba:c7:
c3:33:a6:77:07:55:3d:ae:df:dd:65:96:1b:b8:07:4f:c2:eb:
73:e0:6b:20:a1:40:20:7c:ff:80:85:32:f3:40:90:10:1d:f8:
66:fa:80:34:ff:f5:24:6c:c0:40:43:a4:33:ad:dc:38:58:58:
b1:ef:0b:b8:46:1e:41:de:c2:5c:67:92:a5:6c:51:55:79:95:
42:b1:43:c8:ee:c0:0d:cd:b8:cb:c8:20:02:05:dc:80:c5:b8:
40:88:19:ca:c3:a3:5f:0e:ae:34:21:47:0e:03:fa:2c:0b:27:
46:2c:2b:f4:b3:c8:b9:93:ca:23:20:7b:ba:e6:ef:b7:19:9b:
15:87:ed:db:47:6d:7b:85:e2:bc:8e:90:ea:9c:bf:6f:19:83:
60:c5:bb:20:66:09:5f:c3:b1:53:1f:c7:9a:e9:22:59:33:45:
9d:af:40:78:39:23:39:f0:0b:c0:f2:0d:05:e1:e8:ec:74:98:
d2:b2:2d:72:20:ac:60:ac:61:41:c5:6a:bf:a7:23:43:67:09:
1c:73:58:9c:09:8e:37:46:9b:31:8b:e4:da:2c:fb:19:f6:5b:
50:3b:77:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:43 2025 by rpki-client