Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/c3HcXA8LOeN3EgXii31sIU21bjo.roa
File: c3HcXA8LOeN3EgXii31sIU21bjo.roa (raw, json)
Hash identifier: ynpYuSC70unXURUUPv0uRBi6LBciA7CfJQ1JmRzUmEU=
Subject key identifier: 73:71:DC:5C:0F:0B:39:E3:77:12:05:E2:8B:7D:6C:21:4D:B5:6E:3A
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0185709543B9DDA83E44189BF63CC51ACB76
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/c3HcXA8LOeN3EgXii31sIU21bjo.roa
Signing time: Mon 02 Jan 2023 03:45:08 +0000
ROA not before: Mon 02 Jan 2023 03:45:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49502
IP address blocks: 93.171.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:43:b9:dd:a8:3e:44:18:9b:f6:3c:c5:1a:cb:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7371dc5c0f0b39e3771205e28b7d6c214db56e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9a:88:cb:b8:53:d9:6e:6a:89:27:f5:98:2e:
93:91:56:71:3e:f9:22:1c:99:67:8f:f0:b3:e2:14:
cd:f3:d3:b9:58:ba:43:eb:90:fe:6c:83:6f:39:ef:
e7:d0:2a:17:bb:06:0f:f3:b4:19:07:ce:3c:5d:9d:
58:20:66:75:2f:7f:ee:72:3a:62:bd:85:7c:98:5b:
4a:e4:b7:a2:8c:1f:75:c4:a7:02:75:2a:07:2b:3f:
85:10:8f:19:f8:b2:e6:fb:86:9b:b9:5d:af:06:5b:
ec:d1:b3:1f:27:5a:55:01:39:2b:34:62:38:9c:d3:
4f:a8:43:6f:90:d8:9c:95:bc:86:9b:a9:f5:c7:e3:
48:21:28:a3:05:f2:db:89:5b:89:f3:27:4f:b0:6d:
0e:5c:70:63:96:d4:ac:b8:2c:fa:43:d7:4e:62:83:
3e:f9:9f:c1:2c:e1:c0:38:dc:9c:72:7e:ee:88:8b:
6f:cd:5f:80:ee:0a:bf:3a:c0:e0:99:ca:78:71:e6:
93:f2:de:c8:85:77:24:08:12:44:8e:85:3f:83:1e:
07:3b:24:cf:05:10:bd:a7:b5:87:d9:15:04:f9:90:
e0:61:b0:da:bf:b0:15:b1:d0:1c:51:da:5c:e3:ae:
b8:29:24:63:02:c4:d6:4e:bb:63:07:f8:7f:b9:c1:
5b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:71:DC:5C:0F:0B:39:E3:77:12:05:E2:8B:7D:6C:21:4D:B5:6E:3A
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/c3HcXA8LOeN3EgXii31sIU21bjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.208.0/24
Signature Algorithm: sha256WithRSAEncryption
29:b7:78:09:47:ed:e7:5a:c6:13:08:4b:09:f3:03:1e:d5:3c:
a8:b4:aa:51:38:e0:ab:63:2e:b6:a8:28:28:6f:6e:75:8c:03:
e1:71:a1:d1:1b:0c:4c:df:d0:0a:98:d2:86:c1:3d:38:77:12:
ae:7d:18:d2:70:e7:8a:79:bc:81:b8:a3:96:24:42:5a:26:09:
ad:55:9e:20:1f:99:e7:94:b2:30:c2:ac:33:ba:c9:3f:d3:41:
cf:60:2d:82:67:b1:a9:fd:0f:5b:09:b2:4b:28:4a:b6:45:8e:
93:33:4f:59:aa:4e:a1:a3:9f:77:91:32:bd:f7:20:8b:60:7e:
7a:2a:6d:5b:f7:7a:74:c8:e7:13:53:a6:a8:aa:d1:43:25:80:
ff:a5:a5:13:be:f4:b0:f3:40:d1:29:52:17:96:22:04:74:4a:
27:a0:12:62:fd:28:a8:9e:79:b8:50:eb:66:f3:e8:ce:f7:f1:
ee:ec:a6:3d:d3:21:02:f0:45:7a:bc:20:3d:82:8a:d3:9e:8f:
23:23:b3:cd:54:fd:50:d3:90:51:9f:c8:79:a7:e3:0d:f6:89:
5f:70:46:0a:8c:69:e0:62:80:0d:4c:5a:c5:06:67:ad:32:56:
54:fe:c5:0e:34:6d:c5:b7:73:96:4d:21:bf:73:91:f4:c7:3c:
4a:cd:af:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:32:18 2025 by rpki-client