Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/qCELCi7Tiu2qtpq-w0q7CgCNE_g.roa
File: qCELCi7Tiu2qtpq-w0q7CgCNE_g.roa (raw, json)
Hash identifier: KxxweHDDBrl0+X0j9Tk7UlndoC3oTHNx5NGPEWdZLLg=
Subject key identifier: A8:21:0B:0A:2E:D3:8A:ED:AA:B6:9A:BE:C3:4A:BB:0A:00:8D:13:F8
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 2A1000DE
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/qCELCi7Tiu2qtpq-w0q7CgCNE_g.roa
Signing time: Wed 01 Jun 2022 09:32:22 +0000
ROA not before: Wed 01 Jun 2022 09:32:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50182
IP address blocks: 93.170.246.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 705691870 (0x2a1000de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jun 1 09:32:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a8210b0a2ed38aedaab69abec34abb0a008d13f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:be:aa:0c:ef:bf:e5:18:6d:03:63:d4:2e:e2:
9e:00:83:ae:c5:00:fd:0e:f0:4f:ce:7b:88:77:6d:
c8:25:45:7c:28:97:43:c5:58:f6:74:1a:c7:c0:ce:
2e:cd:06:fe:c7:b0:ef:14:fb:69:e2:a0:31:63:2b:
04:5f:7b:5a:50:5c:32:37:73:91:54:c6:4f:8e:aa:
e5:7d:7b:d6:f3:52:70:c7:21:fb:b2:d4:6a:50:a2:
96:a8:d7:df:f8:c8:b2:99:ba:d7:65:2d:6a:6b:fb:
e6:ab:64:c9:9d:7b:29:cf:73:06:f4:8f:f7:e0:01:
49:8e:5f:7a:08:b8:09:80:41:bb:4b:a6:0f:e9:a9:
74:17:9d:f0:30:ef:e7:d7:38:ae:8a:0d:b3:85:f0:
af:69:01:17:ab:2c:fd:0f:c2:a2:3f:f7:cf:95:ba:
ac:86:05:41:4d:d1:5e:64:96:1b:74:76:32:b6:2d:
2c:1b:b5:2b:1c:ea:a4:8a:79:05:03:cf:9f:4d:b5:
48:ca:78:49:81:bd:2e:bd:67:08:a4:97:b8:5d:35:
5c:03:26:ce:38:a1:eb:67:34:a7:93:f7:32:4a:ba:
8c:fc:c5:7b:55:a7:6c:6c:b3:be:38:67:57:6f:64:
62:7d:95:7a:62:74:dc:74:0b:f6:6f:a4:db:c3:87:
92:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:21:0B:0A:2E:D3:8A:ED:AA:B6:9A:BE:C3:4A:BB:0A:00:8D:13:F8
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/qCELCi7Tiu2qtpq-w0q7CgCNE_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.246.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:d5:ed:0e:e1:07:44:fb:13:3e:19:12:81:84:af:0c:0e:7b:
f6:42:92:d7:90:0d:1e:83:69:c4:b2:73:4c:6e:c6:ab:ca:23:
c8:c0:8b:4c:98:ba:8b:30:28:9f:13:8e:16:24:73:53:1f:2b:
77:91:26:bd:f3:c2:7e:ae:fb:5c:7b:e2:1f:0f:a3:31:e7:17:
a2:84:5a:fb:e8:50:88:7d:2f:56:e3:ee:ad:7a:82:29:94:3a:
a8:01:da:18:80:a7:80:5f:dc:cb:52:3c:ad:3b:51:b1:c5:8e:
45:a6:82:6b:ed:ef:1f:5d:bc:61:1e:c1:b8:f4:04:7c:49:7d:
44:8f:79:99:12:13:c3:f6:5b:81:6c:5a:c1:02:6c:92:ce:88:
7c:f1:e1:37:d0:40:29:91:16:ba:e0:85:2e:ba:e2:88:75:53:
ec:cf:e9:0e:5c:00:f9:7e:95:ae:b7:1d:45:d4:6f:86:45:97:
60:7a:6b:e7:c6:ef:54:a8:94:80:90:2f:f6:61:c2:55:22:6e:
01:b4:bb:e4:18:be:91:d6:e6:9e:5d:a7:33:f2:66:52:26:59:
b2:ce:00:76:75:72:2b:75:ba:8e:da:ba:19:09:05:ad:e2:0b:
6a:94:5d:cb:db:39:fe:2a:11:ef:d4:b0:2d:b5:a4:dd:c9:12:
2b:c4:b1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:38:58 2025 by rpki-client