Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/lZMCfstAfJ8UE-aGEhUN5f95ERw.roa
File: lZMCfstAfJ8UE-aGEhUN5f95ERw.roa (raw, json)
Hash identifier: nBXEw6W0yKs6ZdJhKEXjIjmkhDy9CUw7G2g63dgf/oQ=
Subject key identifier: 95:93:02:7E:CB:40:7C:9F:14:13:E6:86:12:15:0D:E5:FF:79:11:1C
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 286144AF
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/lZMCfstAfJ8UE-aGEhUN5f95ERw.roa
Signing time: Sat 01 Jan 2022 16:10:21 +0000
ROA not before: Sat 01 Jan 2022 16:10:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212392
IP address blocks: 93.171.248.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 677463215 (0x286144af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:10:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9593027ecb407c9f1413e68612150de5ff79111c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a1:16:f2:54:45:03:92:25:fe:3e:88:48:9a:
b0:c9:36:d2:4c:e8:ba:52:2f:ee:07:2a:ca:0b:71:
37:d5:01:c3:f3:b4:f6:98:10:52:c4:f8:af:6e:5a:
10:0d:49:15:ec:af:ca:7b:3d:a2:c8:1b:21:16:20:
df:ea:70:5f:c2:42:2d:e1:a3:dc:76:7a:f3:cd:fa:
26:0a:bd:cf:f4:5b:24:c3:60:02:f6:1c:b6:9b:cf:
1d:35:95:08:10:95:ae:09:97:82:b1:ff:be:20:39:
7b:8e:cc:0d:d0:02:14:0c:18:72:4d:8a:3d:8e:12:
95:e2:cf:40:e6:d4:8f:75:6c:4a:fc:23:b1:79:6d:
c4:39:26:e9:fa:21:38:a0:59:8e:2e:8d:28:8e:c7:
fc:f7:72:00:e4:08:ec:8f:84:25:4a:b0:43:f6:5a:
7e:7b:d2:b5:23:26:64:8c:c9:28:10:e6:01:c9:dd:
35:89:4d:6f:94:d4:14:d4:79:b9:4e:73:84:09:9c:
8e:19:ad:a3:89:7e:bb:f3:00:50:06:6a:ee:13:ac:
75:59:02:96:13:97:62:4d:a0:ad:24:79:02:8e:f5:
37:ee:ea:a5:c1:2b:d7:d5:4b:51:19:9e:b3:1a:5b:
1f:c7:bb:1c:52:b5:4c:e3:df:26:46:3d:a3:ef:3b:
ae:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:93:02:7E:CB:40:7C:9F:14:13:E6:86:12:15:0D:E5:FF:79:11:1C
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/lZMCfstAfJ8UE-aGEhUN5f95ERw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.248.0/23
Signature Algorithm: sha256WithRSAEncryption
50:0b:43:1b:27:19:1a:b3:19:20:e6:9a:f8:b5:87:a5:8f:50:
f5:84:b4:a3:6e:79:68:3a:3f:61:24:28:90:87:9b:86:33:12:
21:a1:85:bc:c3:49:04:2a:b9:f7:d4:b9:34:0f:1f:47:41:f8:
83:40:ff:00:ed:8b:52:1a:eb:d8:cc:a5:39:f5:e1:2a:73:01:
48:14:26:f9:9e:8a:bd:ed:04:6d:ce:71:0f:d5:38:22:0b:cc:
1a:21:24:9c:7b:d8:f0:af:26:46:f8:ab:78:8b:60:3f:b3:29:
e4:f4:1d:c7:20:e5:9e:aa:97:0a:3e:ff:e7:32:4f:97:a9:a2:
c0:cf:e3:42:3f:39:2d:ac:d3:4e:e6:76:4f:75:31:42:8a:a2:
5f:cf:21:67:4b:88:88:56:cf:3f:9c:4b:20:a1:96:b3:97:e8:
d8:de:d7:0a:1f:73:42:da:af:64:2e:6f:a6:78:a3:48:57:95:
46:54:cb:f5:4d:67:c7:8c:33:f2:43:1a:6e:19:59:6a:2c:d9:
e6:18:2d:95:f7:5a:82:d5:a0:4a:56:3d:20:bf:62:17:0a:b4:
5e:b6:80:31:e1:86:90:2c:36:27:89:61:70:9e:1d:e0:d3:7f:
7b:95:df:db:ee:93:0e:7e:5a:78:98:c6:b6:b0:b2:86:ee:c8:
1b:0f:15:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:48:38 2025 by rpki-client