Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/l0ex0wgojzh1YorSh2j0OCJfwmo.roa
File: l0ex0wgojzh1YorSh2j0OCJfwmo.roa (raw, json)
Hash identifier: eZgqttLA/2JHrGDhfANexcWSJh5TH8vl+TK48iZF+a4=
Subject key identifier: 97:47:B1:D3:08:28:8F:38:75:62:8A:D2:87:68:F4:38:22:5F:C2:6A
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0185709544E9CA8F7B07F891EA2D70C4025B
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/l0ex0wgojzh1YorSh2j0OCJfwmo.roa
Signing time: Mon 02 Jan 2023 03:45:08 +0000
ROA not before: Mon 02 Jan 2023 03:45:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49682
IP address blocks: 93.170.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:44:e9:ca:8f:7b:07:f8:91:ea:2d:70:c4:02:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9747b1d308288f3875628ad28768f438225fc26a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:47:e9:8f:ba:5a:0f:5b:ab:b1:23:e0:b3:c1:
95:4f:53:f9:e8:7a:ab:d8:a2:b3:fd:bb:9a:f5:45:
19:fb:6c:b2:23:1f:19:da:90:fa:37:06:de:ed:28:
ef:84:0f:d2:db:c5:01:d3:70:f0:09:28:0c:c6:bc:
08:38:c5:91:69:f9:fc:ca:54:8c:af:78:5f:80:83:
f6:8e:cf:95:8d:a2:a7:3a:3e:c8:6a:56:24:07:0e:
93:b2:30:90:1c:5d:08:5d:8c:14:18:44:2a:8c:07:
db:10:bb:46:1f:d9:63:03:f4:2d:13:a8:54:2e:a5:
9a:d1:fa:11:3f:2a:df:14:0a:7c:2a:22:ed:95:03:
8e:02:b8:fa:14:a2:1a:16:02:a8:5b:02:8a:5d:a1:
6e:80:3d:93:cf:6e:3d:ef:6b:ee:5c:c2:f7:59:6e:
ab:c2:1c:0f:c7:9b:6d:23:09:58:95:25:1e:1e:56:
98:59:48:10:ef:07:87:1e:a3:61:dd:ec:f6:ed:e0:
e4:8c:01:c1:d4:48:6f:d6:d3:12:ed:8c:53:b4:f7:
c5:fe:7d:29:9b:eb:69:17:53:83:35:78:b3:80:35:
70:95:6b:d8:25:86:64:b0:70:91:88:7d:d8:01:f9:
f3:cc:4f:6f:e0:37:0c:cc:2a:50:e1:72:a8:16:c5:
34:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:47:B1:D3:08:28:8F:38:75:62:8A:D2:87:68:F4:38:22:5F:C2:6A
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/l0ex0wgojzh1YorSh2j0OCJfwmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.34.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:22:de:5a:1d:30:cb:0e:07:4d:2c:ed:d3:5a:dc:b8:a8:6e:
3a:52:54:b7:f3:00:9e:94:86:4f:6f:e8:17:30:25:c9:0d:66:
0b:49:42:19:90:17:1f:2f:ed:3c:d9:00:90:34:a8:2c:42:d3:
39:5f:6d:15:87:97:07:48:87:60:db:b5:f6:ed:55:c8:03:9a:
13:00:c3:24:1b:8c:30:5b:56:7b:59:03:10:6c:2e:f2:40:1e:
92:90:7f:d0:e6:bd:d8:98:98:81:ac:38:03:ae:9e:69:fe:91:
49:cb:46:cb:f1:6b:4a:1e:19:06:35:90:74:f1:53:a4:c3:63:
e6:20:8a:37:89:b6:f1:43:c8:30:7a:67:64:08:ee:c6:76:ef:
f4:00:75:8c:0b:64:5b:53:5f:fc:f0:66:c8:15:8a:cd:3c:89:
28:b1:17:f3:3c:1f:d0:03:61:1f:c4:54:f3:da:2a:a0:28:6a:
ff:98:93:6c:d6:8c:ca:5e:54:57:26:ad:64:62:54:24:10:bd:
7f:36:ab:f4:18:1c:ad:68:07:d1:e2:ea:c8:8e:62:f9:0d:f5:
10:7c:72:1a:3b:7a:18:f8:7b:82:2f:e4:e4:3a:3b:9a:50:08:
47:bd:de:fa:02:34:90:b5:14:66:dc:d9:a5:b6:76:b5:5f:18:
ee:a7:b0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:37:40 2025 by rpki-client