Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ni9W6PV3U_igQx7MyZUQeHuoEfU.roa
File: ni9W6PV3U_igQx7MyZUQeHuoEfU.roa (raw, json)
Hash identifier: 9Qi32pdmi4wRHEDe4yPGKmn3L2upKdsRRkazDeLScyQ=
Subject key identifier: 9E:2F:56:E8:F5:77:53:F8:A0:43:1E:CC:C9:95:10:78:7B:A8:11:F5
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27F4E8A9
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ni9W6PV3U_igQx7MyZUQeHuoEfU.roa
Signing time: Sat 01 Jan 2022 16:09:15 +0000
ROA not before: Sat 01 Jan 2022 16:09:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60777
IP address blocks: 93.170.0.0/24 maxlen: 24
95.47.136.0/24 maxlen: 24
93.170.25.0/24 maxlen: 24
95.46.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 670361769 (0x27f4e8a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e2f56e8f57753f8a0431eccc99510787ba811f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bc:c9:2e:f2:45:72:98:b8:ad:c7:4a:e2:40:
c4:33:4e:f0:e0:bf:23:e9:58:37:2b:c5:71:71:28:
19:7d:28:82:f1:62:15:02:c2:6d:a4:19:b6:c5:f1:
21:67:12:96:03:38:c6:78:1a:7e:a1:6f:8e:d0:ef:
43:ef:b0:37:2a:ef:2a:cc:92:58:b0:7f:35:95:f8:
2e:71:97:a4:79:04:66:fb:9c:f2:b5:37:c7:1b:fe:
11:ec:5e:74:69:e2:3a:15:ce:90:86:08:75:fc:1e:
6d:d6:3b:a0:6e:25:b8:91:fe:96:04:39:17:59:71:
f2:6f:28:a5:36:5b:7e:03:ee:e1:61:66:98:62:79:
10:74:82:27:47:05:87:98:a5:92:96:76:33:d7:bf:
10:32:6a:f0:31:64:a6:38:5c:ef:d2:70:c4:bc:59:
3f:30:9a:42:21:ea:aa:0b:b1:71:04:ce:39:1c:ff:
c1:33:95:0d:c9:e0:3d:19:88:fb:de:d1:65:cf:67:
01:6d:d1:2d:de:55:b9:be:4b:11:25:af:65:40:d0:
60:62:7e:db:66:21:b4:d6:8b:a1:30:4e:7e:00:ec:
3f:46:8f:9a:ce:08:df:45:77:75:a0:e1:d0:b5:9e:
3c:be:ff:95:56:ee:cb:e1:a9:a6:a6:da:5f:1f:a3:
c4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2F:56:E8:F5:77:53:F8:A0:43:1E:CC:C9:95:10:78:7B:A8:11:F5
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ni9W6PV3U_igQx7MyZUQeHuoEfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.0.0/24
93.170.25.0/24
95.46.108.0/24
95.47.136.0/24
Signature Algorithm: sha256WithRSAEncryption
39:dc:ee:30:54:38:a2:75:24:9c:9c:70:4c:06:57:c3:14:91:
66:28:d7:21:9f:12:f6:74:a6:e4:15:35:d4:3c:61:55:50:8f:
4e:c8:ac:b8:bc:60:c3:89:77:83:48:c2:aa:d8:f7:5d:88:10:
f9:49:14:8b:5a:ea:95:74:7a:42:10:73:e0:47:17:88:93:ca:
89:cb:5e:81:ff:5d:18:39:cc:e5:6a:b0:e2:0e:e3:d4:20:0f:
a4:9c:ad:07:3e:7c:b1:43:d3:f5:87:c7:fe:ac:b5:a4:9a:5f:
99:25:1e:89:b4:d6:a7:cd:4a:b7:f7:4c:52:bb:42:e7:c3:fa:
8b:b0:f2:f8:55:fe:a3:ef:41:a1:76:5f:b5:6a:c3:2c:f9:a7:
f5:15:26:ca:2e:97:f6:22:b6:f3:6f:39:77:d7:f3:1c:dc:b0:
e2:20:d1:17:7b:2f:6a:f4:70:85:2e:18:5b:68:a4:eb:6a:c5:
0f:e5:d8:f0:7c:9e:0d:d3:9c:4d:ac:08:10:66:ba:c6:7b:53:
2b:2c:7e:d2:12:56:a5:32:44:09:82:9f:4d:19:b5:f9:61:28:
01:e6:70:30:5d:8b:98:14:d3:f5:7f:f0:d7:4c:03:fc:fa:e9:
7c:27:39:e1:6c:3b:ac:e3:e0:dd:00:3c:90:c6:e5:67:2b:cd:
47:62:a2:62
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEJ/ToqTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDkxMjJjMzU0MzhhNGViMjYyMzNmZGM2ZTRiYjFkZjJkYWFlZjQyMB4XDTIyMDEw
MTE2MDkxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWUyZjU2ZThmNTc3
NTNmOGEwNDMxZWNjYzk5NTEwNzg3YmE4MTFmNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ+8yS7yRXKYuK3HSuJAxDNO8OC/I+lYNyvFcXEoGX0ogvFi
FQLCbaQZtsXxIWcSlgM4xngafqFvjtDvQ++wNyrvKsySWLB/NZX4LnGXpHkEZvuc
8rU3xxv+EexedGniOhXOkIYIdfwebdY7oG4luJH+lgQ5F1lx8m8opTZbfgPu4WFm
mGJ5EHSCJ0cFh5ilkpZ2M9e/EDJq8DFkpjhc79JwxLxZPzCaQiHqqguxcQTOORz/
wTOVDcngPRmI+97RZc9nAW3RLd5Vub5LESWvZUDQYGJ+22YhtNaLoTBOfgDsP0aP
ms4I30V3daDh0LWePL7/lVbuy+GppqbaXx+jxKUCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBSeL1bo9XdT+KBDHszJlRB4e6gR9TAfBgNVHSMEGDAWgBR0kSLDVDik6yYj
P9xuS7HfLarvQjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8x
L25pOVc2UFYzVV9pZ1F4N015WlVRZUh1b0VmVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
MThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8xL2RKRWl3MVE0cE9z
bUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAF2qAAMEAF2qGQMEAF8ubAMEAF8v
iDANBgkqhkiG9w0BAQsFAAOCAQEAOdzuMFQ4onUknJxwTAZXwxSRZijXIZ8S9nSm
5BU11DxhVVCPTsisuLxgw4l3g0jCqtj3XYgQ+UkUi1rqlXR6QhBz4EcXiJPKicte
gf9dGDnM5Wqw4g7j1CAPpJytBz58sUPT9YfH/qy1pJpfmSUeibTWp81Kt/dMUrtC
58P6i7Dy+FX+o+9BoXZftWrDLPmn9RUmyi6X9iK28285d9fzHNyw4iDRF3svavRw
hS4YW2ik62rFD+XY8HyeDdOcTawIEGa6xntTKyx+0hJWpTJECYKfTRm1+WEoAeZw
MF2LmBTT9X/w10wD/PrpfCc54Ww7rOPg3QA8kMblZyvNR2KiYg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:37 2024 by rpki-client on console-fra.rpki-client.org