Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/xIpdD9ikuJy942cWvODYaERN3-Q.roa
File: xIpdD9ikuJy942cWvODYaERN3-Q.roa (raw, json)
Hash identifier: QUNhitCbBJqsehYxxTNTjVdzGIbDwWpmCWEKW1BVoJc=
Subject key identifier: C4:8A:5D:0F:D8:A4:B8:9C:BD:E3:67:16:BC:E0:D8:68:44:4D:DF:E4
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27BB879E
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/xIpdD9ikuJy942cWvODYaERN3-Q.roa
Signing time: Sat 01 Jan 2022 16:08:43 +0000
ROA not before: Sat 01 Jan 2022 16:08:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50916
IP address blocks: 93.170.125.0/24 maxlen: 24
93.170.124.0/22 maxlen: 22
93.170.124.0/24 maxlen: 24
93.170.127.0/24 maxlen: 24
93.170.126.0/24 maxlen: 24
2a02:128:8::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 666601374 (0x27bb879e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c48a5d0fd8a4b89cbde36716bce0d868444ddfe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3d:ce:47:5a:fb:d1:5b:07:34:e8:22:08:d7:
05:66:f7:0e:03:3c:c7:9a:de:3e:96:af:ac:11:f4:
28:10:5e:5d:4a:56:16:19:99:25:8b:91:36:78:dd:
9a:2c:72:f8:1b:44:47:74:a3:99:ca:9b:8a:a2:39:
9c:67:b2:84:e0:3b:22:84:8e:82:15:33:d8:75:6f:
3c:b9:6f:df:e0:65:57:62:2a:fe:18:9f:53:8e:9a:
33:6d:9f:39:1c:81:39:57:6c:0e:78:f6:13:be:60:
93:8b:d2:ff:23:e5:ed:52:ef:65:5b:06:b2:4a:1d:
8c:95:89:33:25:9a:73:5e:1c:2e:a4:21:88:fe:01:
a7:59:d1:b1:52:86:ef:63:b3:7c:90:c9:a6:3f:e5:
1f:2c:2f:49:74:3b:f6:43:bc:37:d4:0b:c8:8a:c0:
d2:68:b9:50:44:ae:5d:34:7e:75:c0:a1:b7:08:ad:
4e:44:6c:b2:6c:6d:db:4c:e5:e1:a3:51:c3:99:f4:
05:6a:8d:27:db:c0:b9:dd:a2:f4:7d:4a:c1:1f:3f:
8a:46:0e:ff:fc:77:0b:d7:91:5f:13:96:3c:1a:d4:
03:46:5d:87:d5:68:94:5d:98:dd:a4:3b:7b:2b:f9:
1a:c3:e2:f9:24:d8:89:98:ad:39:0c:a9:f2:6d:0b:
7f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8A:5D:0F:D8:A4:B8:9C:BD:E3:67:16:BC:E0:D8:68:44:4D:DF:E4
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/xIpdD9ikuJy942cWvODYaERN3-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.124.0/22
IPv6:
2a02:128:8::/48
Signature Algorithm: sha256WithRSAEncryption
7a:33:9c:73:83:60:fb:53:b8:3c:1d:fa:32:88:56:75:99:82:
90:59:14:bd:a8:3f:75:5d:f6:68:68:aa:9c:85:72:ad:bc:73:
98:6d:d0:42:a1:84:48:c5:e6:f5:31:42:dc:b4:04:f0:30:e5:
60:1a:db:68:8e:d8:ef:dc:48:c2:2d:eb:66:a4:89:ac:a1:e2:
c1:48:7d:ca:ba:91:dd:13:83:ee:d1:73:a0:71:37:82:e6:14:
a8:c6:80:4f:ec:90:2c:3d:5d:d2:07:c6:81:89:b1:35:c4:45:
b2:0e:d3:aa:77:dd:b5:6c:05:77:ef:e4:ae:69:6a:5f:38:ea:
ae:da:5c:52:98:ac:ae:a2:3c:53:65:d0:a1:cd:11:35:5c:ec:
3c:4e:d4:0c:0e:d5:7f:25:37:e7:69:55:af:5b:8a:a8:12:dd:
e3:77:ea:25:fb:f7:34:a6:50:7a:ca:e3:9e:6b:99:80:13:13:
a2:16:e3:19:f3:29:5c:1b:e5:ca:e6:d6:cd:bb:23:77:6b:76:
d7:ac:63:3a:62:7c:be:66:53:88:de:1b:dd:fd:cb:05:89:e6:
d1:b0:71:2d:6b:d9:42:d1:07:35:a8:c1:0e:6d:58:59:73:5b:
6b:3a:fd:2d:e6:a9:74:1f:a2:24:0c:8e:82:ba:07:ba:7e:0c:
d0:69:9d:c6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEJ7uHnjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDkxMjJjMzU0MzhhNGViMjYyMzNmZGM2ZTRiYjFkZjJkYWFlZjQyMB4XDTIyMDEw
MTE2MDg0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzQ4YTVkMGZkOGE0
Yjg5Y2JkZTM2NzE2YmNlMGQ4Njg0NDRkZGZlNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJU9zkda+9FbBzToIgjXBWb3DgM8x5rePpavrBH0KBBeXUpW
FhmZJYuRNnjdmixy+BtER3SjmcqbiqI5nGeyhOA7IoSOghUz2HVvPLlv3+BlV2Iq
/hifU46aM22fORyBOVdsDnj2E75gk4vS/yPl7VLvZVsGskodjJWJMyWac14cLqQh
iP4Bp1nRsVKG72OzfJDJpj/lHywvSXQ79kO8N9QLyIrA0mi5UESuXTR+dcChtwit
TkRssmxt20zl4aNRw5n0BWqNJ9vAud2i9H1KwR8/ikYO//x3C9eRXxOWPBrUA0Zd
h9VolF2Y3aQ7eyv5GsPi+STYiZitOQyp8m0Lf9UCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTEil0P2KS4nL3jZxa84NhoRE3f5DAfBgNVHSMEGDAWgBR0kSLDVDik6yYj
P9xuS7HfLarvQjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8x
L3hJcGREOWlrdUp5OTQyY1d2T0RZYUVSTjMtUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
MThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8xL2RKRWl3MVE0cE9z
bUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAl2qfDAPBAIAAjAJAwcAKgIBKAAI
MA0GCSqGSIb3DQEBCwUAA4IBAQB6M5xzg2D7U7g8HfoyiFZ1mYKQWRS9qD91XfZo
aKqchXKtvHOYbdBCoYRIxeb1MULctATwMOVgGttojtjv3EjCLetmpImsoeLBSH3K
upHdE4Pu0XOgcTeC5hSoxoBP7JAsPV3SB8aBibE1xEWyDtOqd921bAV37+SuaWpf
OOqu2lxSmKyuojxTZdChzRE1XOw8TtQMDtV/JTfnaVWvW4qoEt3jd+ol+/c0plB6
yuOea5mAExOiFuMZ8ylcG+XK5tbNuyN3a3bXrGM6Yny+ZlOI3hvd/csFiebRsHEt
a9lC0Qc1qMEObVhZc1trOv0t5ql0H6IkDI6Cuge6fgzQaZ3G
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:32:18 2025 by rpki-client