Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/pWpvJUv96yA_0-IwIgkPpymm4sI.roa
File: pWpvJUv96yA_0-IwIgkPpymm4sI.roa (raw, json)
Hash identifier: C82bch0lT6ruv1sNhf4/cZoMF8YrN7yczrTuM23Rfkg=
Subject key identifier: A5:6A:6F:25:4B:FD:EB:20:3F:D3:E2:30:22:09:0F:A7:29:A6:E2:C2
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27660DA7
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/pWpvJUv96yA_0-IwIgkPpymm4sI.roa
Signing time: Sat 01 Jan 2022 16:07:55 +0000
ROA not before: Sat 01 Jan 2022 16:07:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29035
IP address blocks: 93.170.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 660999591 (0x27660da7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:07:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a56a6f254bfdeb203fd3e23022090fa729a6e2c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bc:8c:d0:78:e5:45:d5:d6:1a:a9:13:bc:58:
0d:a7:a5:f5:93:47:3a:be:79:3e:fb:a9:05:3f:98:
10:0f:4e:e3:54:5d:df:27:10:87:77:52:00:7c:1a:
45:c9:8d:92:e7:2e:3e:a2:9e:3e:60:5b:60:fe:bd:
49:da:e2:8a:d9:a9:b6:b0:18:7b:d8:88:9e:13:4e:
96:1a:31:50:81:0a:10:46:28:d1:80:c4:41:da:10:
56:b6:2d:63:9d:9c:03:a9:55:cd:b8:06:5f:19:7a:
67:5e:8a:f0:45:f2:09:a9:ce:67:72:8e:57:af:60:
84:77:0e:33:3d:ff:b7:de:3f:80:cc:ba:1d:58:8f:
ab:e8:44:50:74:00:a5:92:f1:ea:62:f8:4c:24:86:
4f:7f:9d:e4:f6:16:42:c7:a3:34:42:03:4e:fe:1b:
be:a0:8d:cf:d7:63:17:43:f5:97:a5:40:b1:df:01:
af:cc:68:57:c5:4a:c9:e8:bb:98:63:d1:c8:be:9a:
b6:d3:33:74:24:5e:32:48:36:60:63:a3:34:43:8e:
55:c4:8f:93:41:f7:ca:74:16:ab:49:2a:96:0b:24:
2c:d5:2b:7b:ae:95:b1:58:9b:29:d6:dc:ad:2a:23:
c3:06:3a:be:c8:51:82:ac:8c:e2:07:0a:e9:fe:8f:
76:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6A:6F:25:4B:FD:EB:20:3F:D3:E2:30:22:09:0F:A7:29:A6:E2:C2
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/pWpvJUv96yA_0-IwIgkPpymm4sI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.4.0/24
Signature Algorithm: sha256WithRSAEncryption
40:89:6a:c2:1f:07:8a:7a:fc:6f:40:61:45:84:29:c6:c7:fa:
16:9e:3d:27:81:d1:2a:ff:61:f9:7a:51:9e:93:e8:aa:3a:aa:
42:97:2a:96:02:e6:54:57:09:38:cb:1e:3f:70:f6:b4:3f:af:
49:d3:a0:f9:e5:6c:a2:a2:17:37:1e:47:02:3f:12:0b:71:f1:
c8:e3:8f:c9:89:94:30:ad:49:96:6e:1a:5e:ee:70:e5:c2:03:
dd:65:34:a6:51:d9:6d:b1:b5:83:50:8d:09:72:f5:6b:7d:65:
27:81:15:e6:0e:55:56:8e:a4:53:c6:de:88:4d:db:1f:b6:ab:
ce:c3:80:cd:4d:aa:d0:e4:ba:94:04:18:d0:46:27:c4:9f:ce:
b0:2c:de:f2:73:5d:63:08:34:d5:6b:70:bd:4c:0d:a6:5a:bb:
37:62:49:3f:a5:0e:f9:83:d4:f7:18:1a:5f:87:66:21:2e:0a:
9b:5f:97:e8:38:14:11:0b:a3:21:ac:4f:9c:da:0a:dc:4e:1c:
af:34:13:e2:86:80:ef:83:be:8b:8b:b0:6a:c9:2c:8e:f7:d4:
ae:d1:a9:d3:11:aa:9c:27:92:ea:88:5e:80:2b:0d:a9:f6:64:
c6:fd:0a:72:07:20:e5:05:74:8d:5f:7e:73:c7:c9:ad:ef:80:
db:60:76:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:17 2025 by rpki-client