Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/rtfTrF2_bpMptHx1rDYaqiqF7lQ.roa
File: rtfTrF2_bpMptHx1rDYaqiqF7lQ.roa (raw, json)
Hash identifier: /m/f9Bm9Z8n7s7JhdPOEdWtLyz5ns5dgwA3PHna1+/k=
Subject key identifier: AE:D7:D3:AC:5D:BF:6E:93:29:B4:7C:75:AC:36:1A:AA:2A:85:EE:54
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095A9FAEBBE2D07FB543AD7BAF04B31
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/rtfTrF2_bpMptHx1rDYaqiqF7lQ.roa
Signing time: Mon 02 Jan 2023 03:45:34 +0000
ROA not before: Mon 02 Jan 2023 03:45:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208946
IP address blocks: 93.171.158.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:a9:fa:eb:be:2d:07:fb:54:3a:d7:ba:f0:4b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aed7d3ac5dbf6e9329b47c75ac361aaa2a85ee54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:78:75:4c:f5:e5:07:c2:1c:cb:0e:7d:fb:43:
f0:c8:8f:3a:86:b6:bc:cd:28:ad:59:ec:05:01:69:
dc:b4:20:1f:67:66:b3:40:7f:04:f0:9a:42:9f:f0:
b6:ef:03:e2:ed:77:93:ef:a2:f0:9e:62:96:5f:d8:
6f:cc:95:ff:fc:28:9f:1f:d1:4e:74:79:b7:80:0d:
24:69:18:b3:2d:bb:7d:44:d7:1b:34:02:2f:d4:58:
02:ee:d2:07:5a:b4:d7:5b:0e:da:ea:f8:be:9e:12:
9c:02:0f:26:92:e9:b2:cd:09:fe:a6:cb:81:c9:91:
7e:62:3b:bc:58:4f:7e:28:0a:e0:02:30:98:5c:fc:
7f:ba:25:18:f3:98:1b:c8:3d:30:fa:0d:73:f7:0d:
14:a3:56:7a:76:68:c9:d5:e9:02:eb:c7:8a:44:74:
25:ce:c1:39:56:17:de:49:32:d6:61:79:77:2b:96:
98:21:3a:13:48:e6:d5:1d:33:55:d2:db:f2:6c:01:
5f:28:cb:ab:69:f7:75:d0:68:64:8e:fe:57:7f:f4:
8d:e4:e5:c4:e4:63:e7:3a:05:04:00:54:94:92:9f:
5c:a8:35:95:0f:bb:b0:6c:f7:c9:ac:8a:28:ee:6a:
37:2f:e8:2a:57:e5:62:68:7f:7c:e9:f3:2b:09:24:
c3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D7:D3:AC:5D:BF:6E:93:29:B4:7C:75:AC:36:1A:AA:2A:85:EE:54
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/rtfTrF2_bpMptHx1rDYaqiqF7lQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.158.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:8e:d4:a9:04:48:8f:22:0b:4c:46:77:a4:b4:20:fc:73:c5:
50:f7:bc:cd:74:88:2f:e1:11:b8:fb:07:2b:c4:87:59:5a:d4:
c4:e6:63:a4:b6:e7:6a:79:a1:6a:8c:07:4b:7a:21:c5:ad:ed:
1e:b8:d3:da:2f:ee:21:6a:67:09:8a:fc:2a:01:f5:e4:f4:80:
c3:59:35:8c:7f:e3:b7:aa:d2:74:58:b3:3a:e4:ab:d0:98:e0:
a7:01:f4:ae:8a:72:12:6d:6f:25:14:1d:f5:20:93:7a:1b:44:
20:71:d5:e7:e4:4b:34:f8:49:02:39:29:29:bb:82:8a:46:a8:
75:d5:a9:a6:76:48:b4:f3:8e:11:96:3e:ad:06:33:de:69:8f:
03:e5:0d:4e:c0:ad:bc:5e:65:f1:b0:f1:38:12:dc:20:f6:50:
a8:2b:66:34:19:24:16:ce:00:43:c6:5b:09:a4:2b:1e:31:4f:
1d:7f:47:ca:d5:21:f4:2b:e5:a8:74:9d:bd:2d:e1:90:6c:7d:
bc:a4:83:cf:81:55:f0:87:e3:41:61:b9:8d:81:cd:6f:44:3a:
d6:ad:9f:47:8e:57:76:e0:46:b1:2e:5f:78:e1:c5:a5:95:7d:
41:28:95:46:47:c3:46:f1:c5:c5:a2:2f:d8:48:09:79:f8:2b:
0f:30:6a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:10:52 2025 by rpki-client