Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ttj3Qhcw9gpPPO3wGzvDI51Q3WM.roa
File: ttj3Qhcw9gpPPO3wGzvDI51Q3WM.roa (raw, json)
Hash identifier: iCP9v58ynnuPCPOCxrDRTaMf2M92bDqPao0J2iTntH4=
Subject key identifier: B6:D8:F7:42:17:30:F6:0A:4F:3C:ED:F0:1B:3B:C3:23:9D:50:DD:63
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095BEEA57927DD075C19DE65A7D4921
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ttj3Qhcw9gpPPO3wGzvDI51Q3WM.roa
Signing time: Mon 02 Jan 2023 03:45:39 +0000
ROA not before: Mon 02 Jan 2023 03:45:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212303
IP address blocks: 93.170.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:be:ea:57:92:7d:d0:75:c1:9d:e6:5a:7d:49:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6d8f7421730f60a4f3cedf01b3bc3239d50dd63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:87:7e:18:c5:ea:bf:d0:26:35:ba:c8:56:8d:
5c:17:75:65:34:0a:c7:08:a6:78:e7:bc:fa:a4:f2:
81:e1:04:58:78:b1:d3:88:9d:8e:5b:26:a3:15:14:
d0:a5:54:f2:09:00:bc:2e:b0:46:6b:67:a8:38:51:
c3:36:96:7c:93:e7:e2:91:78:e0:db:e4:c8:de:a3:
03:99:4c:c1:8b:4a:86:bf:bf:11:13:dc:65:76:66:
d3:d1:1b:dd:88:04:48:9f:58:24:12:21:a2:9e:69:
a1:48:3b:82:a7:1a:35:dd:e3:0b:eb:79:39:58:40:
2a:bf:69:0f:f4:b8:1a:56:f9:1d:43:dd:90:1d:fa:
23:27:e3:6e:58:14:e1:c4:10:42:06:76:c6:37:40:
cf:f3:f5:f2:7c:d5:b3:49:73:ba:98:ca:ef:03:75:
2c:2f:2d:e9:25:28:1c:ae:e8:5a:1b:85:e6:64:e4:
54:38:fd:d8:5d:14:0c:da:45:4c:71:12:7b:9c:ca:
ff:7f:7b:9e:35:8f:62:cd:6f:fc:0e:39:ce:02:9f:
76:80:b5:43:0f:52:4e:c9:a7:45:b1:b9:19:0a:83:
d2:10:5b:4d:4d:2d:d2:0a:7a:cd:03:af:be:e9:93:
ff:f2:06:58:98:c0:78:bc:c9:bd:1e:f9:c8:f7:df:
6b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D8:F7:42:17:30:F6:0A:4F:3C:ED:F0:1B:3B:C3:23:9D:50:DD:63
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ttj3Qhcw9gpPPO3wGzvDI51Q3WM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.254.0/24
Signature Algorithm: sha256WithRSAEncryption
32:89:7a:5c:68:95:cd:fe:29:88:1f:82:a2:3e:bf:74:9e:23:
56:75:ca:9e:20:9d:ce:f2:84:41:5a:bc:d4:ab:6e:64:fa:d0:
ce:8a:c4:83:fc:d9:63:d1:aa:20:1d:c6:0d:8b:d3:a3:a1:af:
94:5d:3d:b1:93:01:02:d4:40:21:a1:8f:c4:58:36:13:90:02:
7d:01:2d:42:e5:64:dc:b0:57:a8:99:65:cc:41:1c:d4:24:22:
25:33:5a:a4:bd:88:94:12:cc:b1:ba:f0:c1:23:ca:c2:95:41:
6c:8e:6c:dd:f4:b4:28:52:48:56:80:e7:90:f0:47:8c:82:5d:
9a:3e:bf:fc:e3:07:27:32:2c:16:66:3f:72:75:c8:cd:22:97:
4b:0e:8b:8d:d4:90:b8:d5:54:e9:e0:aa:e9:5a:b9:c5:66:d5:
0b:d9:9a:c8:32:47:67:a8:ae:11:aa:15:af:82:da:b8:31:ec:
fa:cf:be:41:bc:f6:bc:94:2b:bd:65:e1:83:d5:e9:ab:78:be:
b0:7d:7d:e6:03:38:bd:9c:82:7b:53:73:3a:53:78:34:ec:ab:
14:3c:be:2d:71:e3:87:8a:15:5e:1f:6f:e7:c0:40:14:f6:83:
78:a3:3a:75:55:4c:0e:4e:84:26:c7:57:54:49:16:13:84:2f:
01:b9:b0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:39:24 2025 by rpki-client