Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/jy90MvfBIiRqONPjYxiA6nmjDzo.roa
File: jy90MvfBIiRqONPjYxiA6nmjDzo.roa (raw, json)
Hash identifier: usjIUYqny2JNJgdKLVlL9o6HYWFTiznqASNaLrdpc7g=
Subject key identifier: 8F:2F:74:32:F7:C1:22:24:6A:38:D3:E3:63:18:80:EA:79:A3:0F:3A
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570956D758F0009D297B3154FA8AED7DF
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/jy90MvfBIiRqONPjYxiA6nmjDzo.roa
Signing time: Mon 02 Jan 2023 03:45:19 +0000
ROA not before: Mon 02 Jan 2023 03:45:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60754
IP address blocks: 146.120.166.0/24 maxlen: 24
146.120.160.0/22 maxlen: 24
146.120.164.0/23 maxlen: 24
146.158.58.0/24 maxlen: 24
146.158.58.0/23 maxlen: 24
93.170.1.0/24 maxlen: 24
146.158.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:6d:75:8f:00:09:d2:97:b3:15:4f:a8:ae:d7:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f2f7432f7c122246a38d3e3631880ea79a30f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1a:31:1f:89:3b:16:33:e6:5c:1b:ea:7e:c9:
1e:d4:30:9a:42:1c:de:0e:73:1e:8f:5e:24:ae:e6:
49:34:b4:d7:a8:e2:36:03:1b:1d:97:81:37:11:7d:
88:f8:90:e5:ab:4b:42:03:6b:25:04:56:83:17:47:
0a:ed:b1:db:8c:a7:59:fa:a1:bc:e5:53:4e:a1:01:
f9:5d:2d:67:54:c2:68:5f:40:f4:e3:f0:32:ac:4d:
b3:b3:85:bb:5e:0f:7d:b8:cb:d2:8b:ec:29:fa:64:
9d:d7:2b:aa:52:61:38:99:44:19:e3:5f:e5:90:82:
68:65:7b:71:77:ba:97:f1:f2:30:c3:21:af:f3:89:
12:0e:d9:98:47:10:b8:be:2e:eb:d6:bf:b5:88:dd:
c8:b4:15:18:ac:5e:34:42:d8:4e:83:90:d2:2c:ef:
7e:ea:e1:69:23:70:bc:b3:47:43:0b:b3:38:6f:1f:
ee:d3:e0:63:93:56:4a:26:43:62:4a:8c:52:d6:f8:
3b:f3:e8:41:bb:c8:e8:59:bd:ee:64:3f:83:15:f2:
4d:a7:23:e5:56:9f:02:c6:34:ea:f4:b1:5b:58:b3:
13:ce:d4:a0:a3:96:0d:54:44:d6:93:90:ac:4d:a2:
97:98:38:65:29:d1:1d:54:6d:93:bf:c4:72:be:b9:
76:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2F:74:32:F7:C1:22:24:6A:38:D3:E3:63:18:80:EA:79:A3:0F:3A
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/jy90MvfBIiRqONPjYxiA6nmjDzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.1.0/24
146.120.160.0-146.120.166.255
146.158.58.0/23
Signature Algorithm: sha256WithRSAEncryption
69:e7:f9:b1:8d:e7:58:ed:6d:3f:14:6c:8f:53:be:c3:13:db:
35:24:37:d3:4e:d3:9c:18:fb:d7:25:58:f8:ec:3e:c7:6f:d1:
b2:c8:9c:37:b2:cc:9f:5d:33:b4:af:5c:83:65:6b:89:da:dc:
e8:24:33:61:14:eb:7a:22:87:5e:25:44:ce:97:4f:b1:85:f4:
18:a8:d9:25:e5:7d:19:dd:ec:44:48:b4:b2:0b:eb:4a:6d:20:
56:e6:f8:2d:92:62:c8:5e:74:70:ac:3d:ab:f8:50:12:04:2e:
04:1d:22:9a:b7:27:09:09:c3:50:2e:37:1e:be:71:5c:3d:69:
37:8c:85:29:05:e2:a4:ad:e7:1e:26:b9:92:fb:70:11:1a:cb:
81:33:bb:05:a1:27:75:55:ab:b0:86:d0:fe:e4:52:b9:de:4e:
6f:a3:9a:64:da:69:fd:36:92:2f:d0:56:b4:9f:53:fc:81:30:
ab:8e:f9:eb:e8:1b:0c:04:38:71:83:f5:cb:70:9b:6a:3b:98:
1c:c7:ee:ea:64:b4:95:b6:d2:76:5d:9a:3b:2a:34:a7:57:ac:
ff:30:d0:ff:2f:a1:ef:61:15:6c:49:f2:c7:3f:1d:ad:cf:95:
e2:37:a1:b0:9c:7f:f1:a0:49:78:62:7f:55:3e:e2:15:98:b2:
95:38:e1:9c
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYVwlW11jwAJ0pezFU+ortffMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjMwMTAyMDM0NTE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjJmNzQzMmY3YzEyMjI0NmEzOGQzZTM2MzE4ODBlYTc5YTMwZjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBoxH4k7FjPmXBvqfske1DCaQhze
DnMej14kruZJNLTXqOI2Axsdl4E3EX2I+JDlq0tCA2slBFaDF0cK7bHbjKdZ+qG8
5VNOoQH5XS1nVMJoX0D04/AyrE2zs4W7Xg99uMvSi+wp+mSd1yuqUmE4mUQZ41/l
kIJoZXtxd7qX8fIwwyGv84kSDtmYRxC4vi7r1r+1iN3ItBUYrF40QthOg5DSLO9+
6uFpI3C8s0dDC7M4bx/u0+Bjk1ZKJkNiSoxS1vg78+hBu8joWb3uZD+DFfJNpyPl
Vp8CxjTq9LFbWLMTztSgo5YNVETWk5CsTaKXmDhlKdEdVG2Tv8Ryvrl2xwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFI8vdDL3wSIkajjT42MYgOp5ow86MB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvank5ME12ZkJJaVJxT05Qall4aUE2bm1qRHpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAXaoBMAwD
BAWSeKADBACSeKYDBAGSnjowDQYJKoZIhvcNAQELBQADggEBAGnn+bGN51jtbT8U
bI9TvsMT2zUkN9NO05wY+9clWPjsPsdv0bLInDeyzJ9dM7SvXINla4na3OgkM2EU
63oih14lRM6XT7GF9Bio2SXlfRnd7ERItLIL60ptIFbm+C2SYshedHCsPav4UBIE
LgQdIpq3JwkJw1AuNx6+cVw9aTeMhSkF4qSt5x4muZL7cBEay4EzuwWhJ3VVq7CG
0P7kUrneTm+jmmTaaf02ki/QVrSfU/yBMKuO+evoGwwEOHGD9ctwm2o7mBzH7upk
tJW20nZdmjsqNKdXrP8w0P8voe9hFWxJ8sc/Ha3PleI3obCcf/GgSXhif1U+4hWY
spU44Zw=
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:06:07 2025 by rpki-client