Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fBkjm7gzUq9fcp-i780icew_Wxo.roa
File: fBkjm7gzUq9fcp-i780icew_Wxo.roa (raw, json)
Hash identifier: 0/WffnBvUAzbnpvKn4CyZ/dIVFyZ5bK5eWoWj52X0Zk=
Subject key identifier: 7C:19:23:9B:B8:33:52:AF:5F:72:9F:A2:EF:CD:22:71:EC:3F:5B:1A
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 2774072D
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fBkjm7gzUq9fcp-i780icew_Wxo.roa
Signing time: Sat 01 Jan 2022 16:08:04 +0000
ROA not before: Sat 01 Jan 2022 16:08:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41245
IP address blocks: 93.170.143.0/24 maxlen: 24
93.171.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 661915437 (0x2774072d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7c19239bb83352af5f729fa2efcd2271ec3f5b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6a:71:53:b5:b8:ae:c7:68:41:7d:d0:82:bf:
80:2e:56:ff:6c:dd:8d:b4:10:84:7a:a9:d7:03:4a:
6e:b3:ed:f8:3b:98:50:1e:c1:90:b9:32:d0:ad:54:
16:49:fe:5c:7c:cc:e3:4a:6b:c2:75:5d:20:6f:92:
15:8a:2f:4d:2d:5b:3a:f3:40:1b:02:c3:d7:16:81:
20:08:ec:0b:e1:d1:04:5d:5c:48:0b:1d:9f:49:cb:
3a:34:e4:d0:1c:f8:ba:5c:26:f6:7a:b7:84:55:d3:
be:a3:87:6f:8e:1b:ae:b6:2c:43:de:3d:a1:e8:d2:
0d:cc:52:95:0a:72:ee:2b:87:01:2c:6e:6a:d0:1a:
35:00:53:dd:2a:6d:4b:5d:6d:bc:a8:2c:dc:50:7f:
38:0e:6d:b7:65:f1:a6:1f:d5:92:b4:05:5b:ef:bf:
96:53:1f:9e:34:29:9d:b2:92:10:26:69:0a:ad:88:
bf:2c:99:e5:a8:1c:b2:ba:57:5b:3b:94:8c:3d:c9:
9f:74:c7:c0:9d:d6:3e:fd:73:f4:c4:f6:91:87:17:
a5:fd:63:5f:8b:01:73:cd:b6:05:15:97:e2:68:b1:
cc:69:ed:c1:b0:0a:72:36:9b:db:90:29:3c:7e:f2:
f8:bf:68:4d:87:6e:05:aa:1c:85:52:b6:41:42:99:
26:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:19:23:9B:B8:33:52:AF:5F:72:9F:A2:EF:CD:22:71:EC:3F:5B:1A
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fBkjm7gzUq9fcp-i780icew_Wxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.143.0/24
93.171.6.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:d5:1d:04:ce:6d:4e:b5:1c:1d:f4:dc:01:1a:05:4f:c1:32:
1b:18:e5:21:2f:9c:63:99:ce:fc:e5:32:a9:d0:2d:1c:8b:d7:
06:af:f9:3e:cc:2f:f0:21:ce:d0:d5:98:24:1e:a0:17:b8:d8:
31:26:22:df:71:e3:be:fd:b2:8b:28:74:65:d1:15:66:65:56:
38:23:bf:f9:47:bc:13:80:05:07:43:be:07:9e:0e:c1:24:ff:
12:dd:af:fa:04:6e:9d:a8:01:19:9e:a0:3b:79:8d:5b:b0:94:
89:55:16:d6:82:1a:54:3c:5e:01:94:46:60:f0:59:74:12:67:
a6:38:c6:16:3b:d7:e9:95:91:7f:c4:5d:4c:46:ac:27:30:d2:
6a:b6:67:50:b4:dd:fa:96:ba:87:5e:d2:07:bd:8e:23:e1:dc:
aa:a4:f5:cb:74:34:3f:fb:ca:94:0f:ba:45:49:bd:27:82:ce:
aa:85:35:30:f9:1d:e7:83:2a:89:9a:fa:70:52:b1:8f:42:61:
4a:a8:e1:f9:c2:77:31:ec:c3:b1:9b:ea:ed:f0:4b:90:9a:53:
5e:b4:a5:0e:dc:a2:a4:8b:de:7b:81:7f:58:ad:89:9a:ee:62:
13:50:fb:56:dc:c3:98:92:cb:8e:e4:b1:48:7b:99:da:67:79:
6f:17:98:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:32:08 2025 by rpki-client