Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/eWeze6sf48AxCpMQmAeXLiQYPho.roa
File: eWeze6sf48AxCpMQmAeXLiQYPho.roa (raw, json)
Hash identifier: kLXQ1CkLEwd8JkEKorroDwFtZat+AW5rEu8Xwio2IO8=
Subject key identifier: 79:67:B3:7B:AB:1F:E3:C0:31:0A:93:10:98:07:97:2E:24:18:3E:1A
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570956BA0B60C8BAE06595AF8CCDFFB98
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/eWeze6sf48AxCpMQmAeXLiQYPho.roa
Signing time: Mon 02 Jan 2023 03:45:18 +0000
ROA not before: Mon 02 Jan 2023 03:45:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60573
IP address blocks: 146.120.172.0/23 maxlen: 24
93.170.2.0/24 maxlen: 24
95.46.77.0/24 maxlen: 24
93.170.248.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:6b:a0:b6:0c:8b:ae:06:59:5a:f8:cc:df:fb:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7967b37bab1fe3c0310a93109807972e24183e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c3:bd:0c:f9:ca:42:ff:70:3b:58:4e:d3:c9:
a9:04:a6:34:7d:c8:4e:1c:71:81:20:c7:64:f3:5b:
9a:8a:d1:47:2b:11:72:80:87:18:15:32:cb:c8:92:
71:e9:22:b0:0d:43:97:b2:07:11:98:5d:bd:50:3b:
71:30:a3:08:25:3c:7b:3f:f4:c7:40:fb:ac:9d:5c:
87:d9:f4:9f:42:3d:ea:95:a2:0f:c4:81:ff:70:bd:
26:4b:9d:e9:cb:93:4b:ec:2d:9b:a9:13:1d:79:a7:
ea:bb:95:79:30:8f:a7:54:85:b0:a3:15:c8:d5:8e:
9d:0f:74:de:99:3a:76:ed:cf:f7:a3:9d:e9:40:81:
a9:84:ca:7e:d8:60:7e:83:07:1f:89:83:9b:83:eb:
35:f5:6d:e9:85:fa:b1:51:99:64:bb:33:c6:92:45:
31:60:4e:a9:89:d1:4f:9b:c3:04:87:d4:f9:28:e7:
20:05:1f:18:0e:e3:df:5d:f6:a1:ed:ae:44:9a:26:
0c:6a:f0:d8:ed:43:ac:98:41:f1:54:7a:d9:37:d2:
15:fd:34:65:24:b9:40:84:d0:6d:8f:32:62:1c:31:
af:3b:29:76:52:28:f8:60:33:0a:32:8a:b6:d4:a6:
10:ed:45:e0:7b:9c:c0:34:89:40:d3:1e:71:79:90:
5c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:67:B3:7B:AB:1F:E3:C0:31:0A:93:10:98:07:97:2E:24:18:3E:1A
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/eWeze6sf48AxCpMQmAeXLiQYPho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.2.0/24
93.170.248.0/22
95.46.77.0/24
146.120.172.0/23
Signature Algorithm: sha256WithRSAEncryption
04:f5:cc:25:7b:84:a2:9c:a6:30:60:62:c8:4b:e1:d9:73:69:
f4:2e:0c:5c:f7:18:72:4c:b9:91:52:1a:01:53:a5:ee:08:c3:
46:42:8e:20:2d:1a:25:92:50:75:51:a0:0d:a8:f0:29:48:7d:
f6:e1:36:e6:d7:29:0b:b3:00:59:47:90:6c:7b:34:7c:c4:a9:
25:72:c1:ed:1d:9c:22:84:ab:19:11:0a:d3:65:33:17:57:f8:
2a:ca:f6:28:f2:11:ce:98:af:29:9c:54:2a:09:13:d9:2d:6c:
0e:78:85:56:6f:0e:e2:49:8b:db:59:48:51:f9:58:5d:57:ae:
3e:5c:6b:87:cd:33:ba:07:bb:1e:b4:c7:55:50:f6:1d:a8:54:
4a:57:08:c2:36:0a:98:fd:2f:9c:84:bd:a0:0f:0a:66:58:33:
3c:6e:26:a5:c6:c3:ad:99:f5:46:06:a7:e8:44:4d:45:a2:29:
df:10:84:08:08:3d:84:93:96:08:75:61:e6:11:fc:da:68:5e:
2f:67:b2:33:34:d9:ec:51:66:d8:16:46:cb:df:8f:0b:9c:c0:
31:43:55:98:76:9f:f4:3c:34:46:ab:84:3e:eb:6b:c6:6e:f9:
8c:ab:a6:84:d0:11:b8:36:8f:d7:1d:e7:7a:7a:da:b6:c9:14:
36:04:b0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:43:57 2025 by rpki-client