Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/roAEur6fcTOHc_zYo5sVx9qjaH0.roa
File: roAEur6fcTOHc_zYo5sVx9qjaH0.roa (raw, json)
Hash identifier: i+fCy7bdrcmilFy1jDRtzb6wN4mK2e+Kh+I4Mlly24A=
Subject key identifier: AE:80:04:BA:BE:9F:71:33:87:73:FC:D8:A3:9B:15:C7:DA:A3:68:7D
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27FF692F
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/roAEur6fcTOHc_zYo5sVx9qjaH0.roa
Signing time: Sat 01 Jan 2022 16:09:21 +0000
ROA not before: Sat 01 Jan 2022 16:09:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61344
IP address blocks: 93.170.98.0/23 maxlen: 24
93.170.48.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 671050031 (0x27ff692f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae8004babe9f71338773fcd8a39b15c7daa3687d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:dc:3b:e9:d2:36:54:38:e0:40:90:e2:21:8f:
b1:b0:65:db:26:9b:6d:25:0e:49:f7:da:c6:e8:a7:
c4:d9:f6:69:a5:fe:7c:7f:22:74:83:7b:c0:55:8d:
ee:c7:6c:a5:c5:a7:fa:b4:9a:ea:c8:7a:ac:53:fb:
42:7e:c8:70:75:7d:56:3b:a8:b6:71:1e:f6:42:ae:
9e:a4:5d:3c:08:85:e7:39:2d:d4:bc:0d:61:d6:94:
41:ba:8b:72:68:a7:86:2e:d2:86:e2:3b:76:1f:a9:
4b:8a:3e:49:c7:f9:03:6d:da:52:71:58:b7:0a:6c:
10:bf:c3:72:82:95:92:a3:76:f2:20:28:4f:12:b3:
b5:c7:29:f3:8a:ae:fc:f3:58:bd:17:7a:ed:33:67:
cf:90:2c:c4:a2:4b:ae:fc:46:5c:06:b7:f0:57:32:
24:38:32:07:35:05:b0:60:78:3e:84:ba:5c:a1:7a:
84:85:b5:00:00:36:d4:1e:97:c7:13:8a:f8:73:31:
17:91:bf:c8:77:bd:75:04:10:e9:c8:6f:9f:8b:d7:
34:cd:f5:99:01:a7:19:73:a8:91:26:7c:6e:a2:a7:
c2:9e:c8:40:d6:8d:70:38:a5:c1:1f:4b:58:7e:66:
a8:b8:98:b8:cd:ce:1a:a2:85:3d:7c:43:95:dc:97:
25:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:80:04:BA:BE:9F:71:33:87:73:FC:D8:A3:9B:15:C7:DA:A3:68:7D
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/roAEur6fcTOHc_zYo5sVx9qjaH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.48.0/23
93.170.98.0/23
Signature Algorithm: sha256WithRSAEncryption
74:e2:a2:18:ca:79:59:95:2e:86:de:f9:c5:b2:53:d7:01:7e:
49:7b:1e:4b:91:3b:1b:43:1a:e3:af:f2:d3:71:f9:b5:74:6d:
f4:28:d7:7c:14:f6:e2:b2:f7:4f:d9:37:69:15:da:4f:aa:dc:
e6:ba:62:3c:2e:66:98:19:61:f6:86:b2:52:71:5c:e2:f9:f3:
74:7c:e6:03:c1:92:33:de:19:b6:a0:a5:4b:e1:36:51:be:5a:
c1:ae:82:15:80:a7:7e:60:56:b6:bf:5d:09:19:44:5b:9a:da:
00:98:5f:c5:a1:a5:6e:2b:a7:3e:4e:b4:77:2b:d6:71:2b:b9:
4e:b7:8c:6d:47:e1:ce:5a:51:d5:13:23:5f:94:27:65:93:83:
96:5e:bf:5c:0c:2f:f7:31:55:13:73:e0:ac:6a:bf:95:04:0b:
c2:8b:bb:13:39:aa:ed:39:85:1b:ad:e2:35:28:7c:7a:ab:5c:
d8:d8:7b:19:b7:31:84:6d:89:15:73:ae:ab:a6:bf:cf:15:ba:
b1:17:4e:a3:43:b2:a8:66:07:09:fc:8f:65:46:13:02:4c:41:
6a:c2:88:b8:13:3c:b2:da:55:58:29:10:2c:68:1d:e2:56:82:
7f:9b:4e:7e:7d:6d:84:7a:31:e6:52:a3:64:f9:a9:37:bf:18:
fd:eb:34:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:36:38 2025 by rpki-client