Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/edy4kBiI6sdFxbQVwP5gXgzbufs.roa
File: edy4kBiI6sdFxbQVwP5gXgzbufs.roa (raw, json)
Hash identifier: 0pdyNgPuU+CXYQsYITzWIJcl585K1MCjJRGAiVejLyg=
Subject key identifier: 79:DC:B8:90:18:88:EA:C7:45:C5:B4:15:C0:FE:60:5E:0C:DB:B9:FB
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095A8DCD95249637AC9149956B2BA5A
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/edy4kBiI6sdFxbQVwP5gXgzbufs.roa
Signing time: Mon 02 Jan 2023 03:45:34 +0000
ROA not before: Mon 02 Jan 2023 03:45:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208876
IP address blocks: 93.170.253.0/24 maxlen: 24
93.171.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:a8:dc:d9:52:49:63:7a:c9:14:99:56:b2:ba:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79dcb8901888eac745c5b415c0fe605e0cdbb9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:01:b5:10:00:e1:56:2f:30:68:c8:13:61:7c:
5c:ba:88:2b:fe:89:b4:c0:e3:57:ad:66:56:71:75:
2e:16:0b:83:90:6b:63:fc:c4:f8:4d:75:19:12:40:
7b:f6:55:42:cd:f6:e4:7e:b3:e8:7b:77:47:12:ee:
24:67:a7:25:8e:f4:2a:c8:96:54:e1:25:08:c0:09:
03:19:43:c3:22:cd:a1:77:29:62:84:35:2a:d9:25:
17:29:ed:b7:06:3a:c5:6d:de:18:3c:2a:6e:ef:c7:
0d:36:e5:cb:6c:8b:95:bf:6a:8e:b3:0f:8a:4f:f4:
bc:44:ac:24:4b:b8:2f:23:dc:37:00:f0:80:be:74:
ea:77:29:a5:ff:e1:26:fb:58:5c:f7:e6:3e:ff:fc:
6b:fd:1e:64:91:38:49:2f:7f:76:13:d5:96:f5:7d:
72:25:43:ac:65:b4:b7:3b:68:a1:e4:0e:39:af:e8:
8a:ee:f6:23:6b:d2:a4:d2:f7:17:df:01:4f:72:ce:
9a:1d:bb:74:cb:7e:fb:3a:d8:d9:92:85:c4:4d:a9:
2f:fc:d4:29:be:ca:24:0c:dd:2b:b7:f2:ee:c8:18:
e0:98:3c:38:bd:a3:11:1b:69:42:e3:95:b3:5e:8f:
3f:51:9a:9f:44:08:e3:08:28:76:e6:93:8c:39:f8:
e7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:DC:B8:90:18:88:EA:C7:45:C5:B4:15:C0:FE:60:5E:0C:DB:B9:FB
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/edy4kBiI6sdFxbQVwP5gXgzbufs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.253.0/24
93.171.4.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:c5:f9:8e:d9:b1:05:05:59:74:ee:58:1c:7f:a5:eb:08:ad:
14:c6:91:29:dc:58:05:9c:b2:be:b3:91:96:71:02:35:81:03:
5b:15:fa:69:7e:0d:9d:3f:9e:f7:d4:13:00:c3:52:5f:a5:c1:
24:1c:46:4c:91:ee:31:48:f2:cf:55:e1:d0:06:7f:63:98:2a:
2d:be:cd:f2:f7:d5:73:fa:ca:76:f2:a1:09:72:e2:9a:8c:66:
7f:db:43:ea:92:e0:73:06:42:c3:1c:65:7a:20:fb:4a:de:99:
8e:c2:ec:bb:45:f3:db:b1:8c:82:48:51:84:8a:fb:c9:04:87:
1b:3a:d6:81:e3:99:7f:b1:8d:75:f3:92:67:cf:e8:e2:35:f8:
b3:84:53:84:60:af:d4:32:5b:b8:9f:dc:1e:52:0f:39:6e:b1:
38:22:b6:7b:1f:07:19:03:60:c1:20:7b:20:32:8a:40:cc:dc:
f5:bf:40:3b:33:54:bd:d2:8b:0c:07:62:72:d9:ab:d4:b4:34:
f4:e2:6b:64:16:5c:9a:4a:86:dc:df:36:4b:9b:90:40:d9:15:
87:2b:f8:0f:d2:49:e9:cf:04:22:a3:ba:5f:b0:5f:ed:99:c2:
59:e1:97:fb:8f:e9:95:ee:97:2e:b8:e0:c1:dc:d7:98:1a:58:
05:b3:9c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:27 2025 by rpki-client