Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Wp9CZBgT65JpTB73rfHYKPIqxNI.roa
File: Wp9CZBgT65JpTB73rfHYKPIqxNI.roa (raw, json)
Hash identifier: TewkvGXNop9h30yEGq8LL0JoyFNJXbIxbo5jTh2owNw=
Subject key identifier: 5A:9F:42:64:18:13:EB:92:69:4C:1E:F7:AD:F1:D8:28:F2:2A:C4:D2
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095095F5122118E96947F46DC0DFB60
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Wp9CZBgT65JpTB73rfHYKPIqxNI.roa
Signing time: Mon 02 Jan 2023 03:44:53 +0000
ROA not before: Mon 02 Jan 2023 03:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16066
IP address blocks: 93.170.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:09:5f:51:22:11:8e:96:94:7f:46:dc:0d:fb:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a9f42641813eb92694c1ef7adf1d828f22ac4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:35:70:75:c1:80:90:34:aa:e5:04:9c:38:44:
ce:95:c5:e6:e5:e5:af:72:ae:f9:a1:02:93:94:f3:
4d:5c:5f:3b:73:cd:d3:a4:b5:d1:3a:29:e6:16:05:
48:db:b4:e2:9c:5f:de:12:2f:90:fe:97:b6:78:d9:
3e:28:16:c2:f7:e8:bf:d5:9d:71:0c:ad:f8:5b:ee:
06:86:72:d8:16:ad:29:e7:4e:48:3a:23:27:20:d5:
7d:17:d3:25:d4:c1:52:6b:79:94:a7:7b:af:ec:11:
3c:56:8c:06:79:9a:c2:b8:99:5d:a5:0d:72:0b:64:
15:76:02:74:d2:50:1c:f2:41:a9:f5:4f:e3:d3:97:
e9:38:52:00:bd:f0:b5:ad:e7:67:43:46:24:5b:e9:
94:80:9f:05:49:05:ea:01:2f:81:2b:40:f8:c5:bf:
a6:3d:b5:5a:5d:43:b9:98:55:54:be:bd:41:b3:8d:
4c:d7:ea:eb:ad:dc:ed:93:91:85:fd:b3:f2:0d:c5:
90:06:68:18:8f:b9:ad:0e:0e:68:92:aa:57:a3:f2:
20:3f:24:cf:03:80:a9:49:2f:36:91:87:d4:cd:af:
5f:46:2e:1b:49:2e:45:18:78:f1:95:80:5e:47:47:
c7:34:d2:61:07:18:31:37:a6:fa:51:fd:24:94:4b:
9e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9F:42:64:18:13:EB:92:69:4C:1E:F7:AD:F1:D8:28:F2:2A:C4:D2
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Wp9CZBgT65JpTB73rfHYKPIqxNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.81.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:6c:ce:a4:e4:41:68:3d:e1:c3:4f:f4:df:1e:a8:3c:b4:e0:
a4:2e:f4:fe:73:0f:41:a1:9e:6f:bb:53:7e:9f:c3:bf:e3:e8:
66:31:89:cf:aa:7c:7a:56:13:86:c0:31:cb:1a:22:c4:b0:c6:
d2:76:48:f6:30:e7:eb:38:5a:df:3b:cb:cb:e7:2a:2c:7c:55:
82:90:8c:7b:ad:5a:fd:41:dd:bd:53:48:ca:f4:90:d5:a7:f8:
bb:a8:d3:98:00:eb:0a:6d:0a:df:4c:da:62:39:b7:e2:22:47:
e6:67:21:2e:c2:fd:5e:47:5a:a2:4e:da:3f:c0:3c:a2:f2:8a:
57:19:f0:02:5a:66:ed:58:09:fd:bc:d1:18:a9:55:59:fa:8b:
e1:76:c8:a5:7b:74:e9:77:3b:de:24:ad:69:10:29:22:25:01:
a0:91:88:b1:57:2b:e1:19:e9:51:37:18:98:34:ee:29:51:0d:
0b:7d:e1:ee:ed:34:a8:65:f1:c4:78:e4:16:fb:79:ce:21:ec:
e7:37:c0:8e:83:52:da:79:c3:17:71:d5:df:d7:7b:a3:cf:14:
62:2c:c5:eb:64:1b:5c:aa:27:f3:1b:33:38:52:e9:e5:79:8c:
3f:e8:99:47:e8:a0:f9:87:00:6f:47:53:ba:32:fd:e2:41:73:
a1:34:bc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:48:34 2025 by rpki-client