Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/oAu-9j8BX2nSkaqGGtv_zfZndMA.roa
File: oAu-9j8BX2nSkaqGGtv_zfZndMA.roa (raw, json)
Hash identifier: ngDUKlOM1oyqXaSCkUzivA8uddyZ96O9RmHPV/p2Qto=
Subject key identifier: A0:0B:BE:F6:3F:01:5F:69:D2:91:AA:86:1A:DB:FF:CD:F6:67:74:C0
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570957B836CB62E103164E85B7369D131
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/oAu-9j8BX2nSkaqGGtv_zfZndMA.roa
Signing time: Mon 02 Jan 2023 03:45:22 +0000
ROA not before: Mon 02 Jan 2023 03:45:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61988
IP address blocks: 93.170.135.0/24 maxlen: 24
95.46.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:7b:83:6c:b6:2e:10:31:64:e8:5b:73:69:d1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a00bbef63f015f69d291aa861adbffcdf66774c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9e:30:45:ca:21:85:d0:a4:4a:c1:24:ea:f7:
86:d6:49:dc:9f:e7:0e:1d:73:da:d1:ed:0f:04:08:
a7:3d:f1:0c:2f:76:a5:e9:a1:32:c0:b5:3d:aa:dc:
b1:46:cb:d2:19:7b:a1:ee:6c:89:c2:49:6a:c8:df:
6d:f6:95:c9:5a:f8:91:1e:88:35:45:85:7c:99:ae:
08:9f:bd:94:bd:5f:ff:99:6a:05:a4:36:f4:77:c2:
9e:23:88:24:4d:18:63:4c:de:e1:6d:1d:6a:71:7d:
d2:04:81:53:8c:6a:56:12:91:cf:28:15:42:f3:6d:
36:f6:83:0f:74:1a:2c:a5:b4:a5:7d:82:64:98:5a:
41:c4:02:3d:07:2c:f7:3a:d6:07:90:dd:38:f5:09:
76:73:50:77:16:d1:05:7f:6e:00:b3:78:b3:bb:b6:
6a:6f:2c:a4:08:e5:00:b1:0f:b4:7a:62:e7:5c:15:
d8:17:51:3f:9e:08:19:34:45:2d:7c:e9:c8:b1:cf:
fb:03:9f:c0:37:fc:15:d9:ac:b0:b0:95:08:08:52:
5b:43:24:b6:b1:32:35:cd:ac:4e:75:6a:7e:ca:f8:
0f:04:5a:de:2a:af:82:bc:18:cc:77:87:7a:5e:c3:
30:01:d2:30:00:59:24:62:6a:4a:91:48:ec:c7:87:
0e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0B:BE:F6:3F:01:5F:69:D2:91:AA:86:1A:DB:FF:CD:F6:67:74:C0
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/oAu-9j8BX2nSkaqGGtv_zfZndMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.135.0/24
95.46.126.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:51:9d:f9:4a:31:1c:af:8a:95:9c:a9:4e:1f:a9:19:97:84:
b9:41:78:d0:9b:b1:1c:4c:74:bf:5e:74:79:73:0d:fb:51:f8:
fc:da:d0:2d:11:03:72:2b:92:37:34:6d:67:78:a9:64:b4:47:
8f:19:67:1e:e6:f8:59:b8:fb:53:61:0a:6c:46:e2:a5:4e:39:
4a:88:a4:7e:ef:c2:d0:6e:83:9f:aa:c0:0a:3f:4d:7b:86:73:
5b:0e:35:c6:45:bd:73:a9:69:3e:80:dc:58:f2:09:59:60:2f:
44:f2:8c:24:9f:3c:81:26:e5:9a:bf:09:95:eb:29:58:b5:00:
48:94:84:ca:ff:65:49:9c:30:16:57:7f:a6:54:19:9e:63:e0:
70:f6:b7:be:a2:3c:a2:6e:8a:a3:57:3b:a8:f9:dd:2a:b2:f9:
66:b2:79:40:ef:40:f8:a8:1e:00:af:25:fd:97:5c:e2:ff:93:
eb:aa:b7:b8:7a:4e:df:33:f3:e0:8c:4f:b0:21:2e:ba:5e:58:
2b:31:a7:8f:b5:8e:36:09:45:f9:b5:65:06:63:cd:57:a3:ec:
1c:e2:4e:8e:57:7f:48:84:ba:20:2a:9a:34:30:70:c4:9b:66:
43:95:dd:8f:97:60:41:9c:f3:56:7f:a5:53:b3:2b:0d:e5:00:
19:21:d5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:03:11 2025 by rpki-client