Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/UnNmscWzdBRZDa8YTcWShtKqE0o.roa
File: UnNmscWzdBRZDa8YTcWShtKqE0o.roa (raw, json)
Hash identifier: 8A7E/AkVb/iNcJ2HiSHi9ptjFz9KDsTShAQyxsnroLA=
Subject key identifier: 52:73:66:B1:C5:B3:74:14:59:0D:AF:18:4D:C5:92:86:D2:AA:13:4A
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27672B66
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/UnNmscWzdBRZDa8YTcWShtKqE0o.roa
Signing time: Sat 01 Jan 2022 16:07:56 +0000
ROA not before: Sat 01 Jan 2022 16:07:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29363
IP address blocks: 93.170.192.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 661072742 (0x27672b66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:07:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=527366b1c5b37414590daf184dc59286d2aa134a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:88:f8:36:f1:55:2f:80:8b:d4:85:07:4a:29:
ff:6f:fc:7f:b0:b8:79:72:36:37:65:31:6b:6c:6e:
a8:52:2e:88:90:8e:41:96:31:dd:24:cd:42:a8:4d:
b3:bd:92:ae:73:e5:9c:99:eb:68:63:0d:b4:f4:4f:
53:07:d5:be:2c:e8:48:34:61:4f:79:af:45:49:74:
51:3e:c6:1e:32:e1:5b:88:dd:65:9e:f8:89:b8:1c:
e2:bf:af:75:c0:c1:4e:78:98:03:51:c5:39:bb:86:
0c:c7:89:1b:ad:06:41:a6:39:b1:7f:43:a5:6a:d5:
f6:2f:9b:b5:b1:09:a4:71:1d:5e:8c:d2:b0:8b:1e:
f4:bf:34:8f:09:32:5b:64:0b:bd:7a:b4:c7:3a:1c:
02:49:c0:15:79:93:62:70:ae:56:0f:a1:48:8e:ad:
a9:8d:e6:3d:10:c7:c9:7a:7f:a4:67:72:b4:1f:c6:
34:88:06:65:c0:ca:10:3d:83:bd:b6:ea:8f:b7:2f:
70:44:c1:d7:1b:1a:8e:58:cb:07:2c:4c:1a:10:f2:
58:66:bd:27:73:e1:b9:5c:96:bf:44:29:b6:70:ae:
d8:58:30:22:97:4a:35:95:6e:21:7a:4e:06:f9:31:
b6:27:63:9c:21:68:45:3b:7c:76:9b:ce:7a:d2:0e:
99:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:73:66:B1:C5:B3:74:14:59:0D:AF:18:4D:C5:92:86:D2:AA:13:4A
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/UnNmscWzdBRZDa8YTcWShtKqE0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.192.0/21
Signature Algorithm: sha256WithRSAEncryption
26:af:b6:23:42:91:47:ac:8d:e0:1d:ee:b7:3b:4e:15:a7:d7:
b8:8e:d0:74:7d:be:14:03:67:ab:a7:49:0c:98:39:3d:72:6e:
79:1b:df:67:0d:9a:73:3e:43:cc:b6:4d:3e:d2:ee:1e:0d:1f:
b1:e7:b3:c5:66:f6:76:43:b6:ba:43:da:f4:45:f4:f3:75:01:
b4:fa:81:14:cf:71:85:54:46:5c:2e:30:d2:34:1e:a6:57:f4:
86:a0:92:60:eb:42:4d:0f:f2:d3:84:69:65:f8:b6:bc:e4:17:
d3:5b:44:75:70:ba:71:74:69:3d:a7:75:df:66:c4:8d:5e:6b:
a4:3d:4a:c0:dd:3c:b1:08:06:e1:22:25:11:eb:8f:6f:62:7f:
0d:fd:ae:f2:54:da:61:6f:f7:be:75:98:0f:fa:ce:f5:84:da:
ce:9b:37:4c:db:3a:69:8f:eb:92:a0:57:0b:fc:6c:9b:5c:c1:
c4:c9:47:b4:62:a0:3f:11:9c:a4:e4:9b:4b:bb:f0:35:9b:2f:
cc:ff:9e:57:a3:86:19:0a:48:7b:13:59:0c:c2:df:f2:16:3b:
c7:42:c0:f2:31:02:5b:21:dc:d1:14:6e:4f:eb:ed:01:0a:4f:
17:b9:b4:36:fe:87:b7:20:fd:dd:0e:82:27:33:32:af:e6:5b:
f3:df:99:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:53:21 2025 by rpki-client