Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/w3W3FOLJPNa6IDR1bqRuKO6fehM.roa
File: w3W3FOLJPNa6IDR1bqRuKO6fehM.roa (raw, json)
Hash identifier: MXT4vN3NR+E4LCMXpdjr7L4C2INP+yHRl/oCYD70xbI=
Subject key identifier: C3:75:B7:14:E2:C9:3C:D6:BA:20:34:75:6E:A4:6E:28:EE:9F:7A:13
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095BFE2EE0919BF7F185C7571028460
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/w3W3FOLJPNa6IDR1bqRuKO6fehM.roa
Signing time: Mon 02 Jan 2023 03:45:40 +0000
ROA not before: Mon 02 Jan 2023 03:45:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212432
IP address blocks: 93.170.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:bf:e2:ee:09:19:bf:7f:18:5c:75:71:02:84:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c375b714e2c93cd6ba2034756ea46e28ee9f7a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7a:31:ce:f4:36:ae:bf:25:17:08:2b:2c:fb:
80:12:71:57:3c:7f:96:5e:15:58:db:c6:fc:db:e2:
e6:dc:3c:d5:c5:d3:10:bd:a5:98:af:a4:77:54:3b:
e7:7b:65:05:f7:24:54:f6:1c:6a:fc:eb:40:d5:56:
71:a6:78:cc:be:e9:25:0e:5e:f8:13:7d:b2:e5:88:
f8:6a:e0:50:bd:08:87:11:29:21:03:96:82:a3:7d:
d3:04:b4:48:f9:76:ac:fe:c0:ec:99:b1:08:24:5a:
2b:02:b8:be:4f:a9:61:60:f0:d7:d7:d0:69:88:66:
b4:15:74:8a:c6:94:b1:60:6c:61:59:fa:a2:cc:7c:
4c:78:93:82:b1:f2:86:16:bb:7a:e2:d3:dc:e6:78:
66:1f:51:c6:57:46:33:6b:8a:ac:07:fa:23:a2:00:
b4:ed:b5:bc:8c:71:d0:5f:56:2c:94:e6:b6:a2:95:
c4:7d:23:72:92:e8:cd:8a:70:52:35:68:2d:c8:c3:
9e:29:ac:d4:73:d1:20:c4:c2:8a:db:b9:a6:07:34:
22:0e:12:b4:e7:16:66:eb:91:6d:6a:eb:f3:63:45:
f4:80:be:62:2a:d6:6d:32:78:6d:aa:37:e3:6f:de:
d9:e4:88:f4:0d:bf:f3:57:c7:94:2e:5e:0f:da:08:
89:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:75:B7:14:E2:C9:3C:D6:BA:20:34:75:6E:A4:6E:28:EE:9F:7A:13
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/w3W3FOLJPNa6IDR1bqRuKO6fehM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.186.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:b9:31:40:d7:59:52:74:ea:61:95:bc:38:35:cb:69:e0:ea:
fe:0e:b4:7d:4c:9c:f9:c4:03:ea:28:46:32:0e:94:35:7a:ba:
e3:34:eb:cd:e9:28:91:83:47:7d:e7:3b:79:15:ef:44:89:14:
0b:26:1e:62:79:21:69:54:35:96:64:c1:23:80:4a:3c:15:05:
85:6f:0f:ab:0a:e6:23:15:d8:fc:66:68:39:50:b3:f9:da:93:
3d:d9:54:fa:4e:d9:8a:90:e4:02:63:6f:cc:f5:a9:a2:5e:59:
15:71:ef:f1:31:b9:20:06:39:9e:44:50:37:ca:b2:32:3c:59:
2b:8c:93:20:e7:03:14:52:67:6c:81:ee:ad:83:ca:37:39:9b:
b2:b1:9e:be:ac:44:61:dd:f0:75:aa:27:18:f6:fc:d0:96:77:
67:13:de:3c:bd:82:23:85:04:bc:ec:47:da:92:7b:c7:47:e6:
ed:57:bb:2d:33:2c:65:98:5f:99:98:00:f1:cc:0e:a2:89:fa:
bc:20:eb:ec:bd:91:b7:23:16:8b:41:b8:9a:1f:37:b4:0e:16:
59:3c:e2:fe:d2:e4:60:3e:87:a1:ae:5b:13:8f:e5:db:2d:9a:
ca:d5:26:60:17:86:d1:b3:58:26:10:df:41:df:7b:dd:5c:04:
ff:e8:d7:3b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwlb/i7gkZv38YXHVxAoRgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjMwMTAyMDM0NTQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzc1YjcxNGUyYzkzY2Q2YmEyMDM0NzU2ZWE0NmUyOGVlOWY3YTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXoxzvQ2rr8lFwgrLPuAEnFXPH+W
XhVY28b82+Lm3DzVxdMQvaWYr6R3VDvne2UF9yRU9hxq/OtA1VZxpnjMvuklDl74
E32y5Yj4auBQvQiHESkhA5aCo33TBLRI+Xas/sDsmbEIJForAri+T6lhYPDX19Bp
iGa0FXSKxpSxYGxhWfqizHxMeJOCsfKGFrt64tPc5nhmH1HGV0Yza4qsB/ojogC0
7bW8jHHQX1YslOa2opXEfSNykujNinBSNWgtyMOeKazUc9EgxMKK27mmBzQiDhK0
5xZm65FtauvzY0X0gL5iKtZtMnhtqjfjb97Z5Ij0Db/zV8eULl4P2giJ9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMN1txTiyTzWuiA0dW6kbijun3oTMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvdzNXM0ZPTEpQTmE2SURSMWJxUnVLTzZmZWhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXaq6MA0G
CSqGSIb3DQEBCwUAA4IBAQAfuTFA11lSdOphlbw4Nctp4Or+DrR9TJz5xAPqKEYy
DpQ1errjNOvN6SiRg0d95zt5Fe9EiRQLJh5ieSFpVDWWZMEjgEo8FQWFbw+rCuYj
Fdj8Zmg5ULP52pM92VT6TtmKkOQCY2/M9amiXlkVce/xMbkgBjmeRFA3yrIyPFkr
jJMg5wMUUmdsge6tg8o3OZuysZ6+rERh3fB1qicY9vzQlndnE948vYIjhQS87Efa
knvHR+btV7stMyxlmF+ZmADxzA6iifq8IOvsvZG3IxaLQbiaHze0DhZZPOL+0uRg
PoehrlsTj+XbLZrK1SZgF4bRs1gmEN9B33vdXAT/6Nc7
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:54:11 2025 by rpki-client