Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/zWwuGv7P0ssfZaxBqYNdQ4C3jM4.roa
File: zWwuGv7P0ssfZaxBqYNdQ4C3jM4.roa (raw, json)
Hash identifier: 7pkeTrS3lH3X86bjF3M5VbmJhxSWcL8II3PDmtQMEeM=
Subject key identifier: CD:6C:2E:1A:FE:CF:D2:CB:1F:65:AC:41:A9:83:5D:43:80:B7:8C:CE
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018B7078554F3F32A47875832947ADCA7BD1
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/zWwuGv7P0ssfZaxBqYNdQ4C3jM4.roa
Signing time: Fri 27 Oct 2023 09:30:16 +0000
ROA not before: Fri 27 Oct 2023 09:30:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20536
IP address blocks: 146.158.74.0/23 maxlen: 24
93.171.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:70:78:55:4f:3f:32:a4:78:75:83:29:47:ad:ca:7b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Oct 27 09:30:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd6c2e1afecfd2cb1f65ac41a9835d4380b78cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bf:18:5c:28:9c:99:06:da:ff:f1:dc:0a:da:
54:dd:6b:3f:4d:d4:fc:57:81:85:d2:6e:3b:2f:e9:
2c:95:aa:f5:e7:a8:7a:09:6b:4e:7f:51:89:36:dd:
87:06:e5:aa:17:6c:f9:59:ca:44:e3:67:aa:d7:ba:
e0:2d:ad:52:87:27:f0:38:97:df:2f:2d:3b:ac:f2:
7f:60:40:6a:3a:3c:6e:c6:31:11:39:48:34:5a:1a:
4e:f5:41:69:ea:a8:f3:af:44:13:54:97:62:fd:e0:
ad:be:83:aa:6f:bb:ea:3b:a4:a4:ae:a2:9d:45:dc:
34:c4:ec:89:95:5b:0c:8d:4d:ed:6e:b8:35:e1:3c:
91:ea:5c:22:ef:79:f9:2e:55:1a:1c:7d:a1:14:14:
5f:d0:2d:04:e6:e5:48:b1:56:42:71:96:92:ff:e8:
aa:bb:9a:f1:fd:81:c1:8b:78:b2:58:0c:77:3e:50:
c0:0d:b1:70:92:04:2a:7e:0e:fd:31:4e:bd:aa:b5:
e3:c8:ce:2e:96:3f:37:55:96:69:81:63:ed:37:45:
60:1e:b9:01:ea:e6:9f:41:7d:15:4d:92:be:38:7d:
e9:a5:24:73:87:2f:c7:67:20:eb:02:eb:fc:3b:ea:
9f:13:49:b0:ce:4a:eb:6c:c7:38:45:3a:a6:7f:9f:
b3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6C:2E:1A:FE:CF:D2:CB:1F:65:AC:41:A9:83:5D:43:80:B7:8C:CE
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/zWwuGv7P0ssfZaxBqYNdQ4C3jM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.5.0/24
146.158.74.0/23
Signature Algorithm: sha256WithRSAEncryption
35:73:6c:68:d4:33:37:4f:aa:66:d6:32:b6:80:bb:40:35:6d:
32:32:c1:25:49:b1:c0:61:d7:0b:97:40:fb:ad:77:00:98:ec:
36:df:01:bb:71:e9:ce:f6:b6:21:61:d7:82:4b:9c:d8:db:a9:
63:b4:17:11:61:19:1d:57:d2:ef:93:04:7d:28:fe:e8:07:87:
02:d7:15:0f:c1:05:84:a3:54:ec:92:b4:be:3a:f2:70:04:86:
66:d7:4d:5e:2c:55:0f:fb:0d:96:85:e8:02:bc:0e:58:a0:c2:
e7:5f:61:07:f2:29:46:e3:11:b6:20:51:52:28:aa:ff:3f:f7:
6d:33:57:ce:1f:fb:cf:00:59:03:4b:e5:9b:2e:d0:e6:df:1c:
28:69:37:b5:ea:e9:e3:07:70:db:4a:3e:aa:0c:30:40:08:d1:
fe:a0:82:74:9f:52:09:f5:42:d0:04:c3:ee:51:3b:69:71:21:
a0:be:2c:0c:1c:7e:fd:8a:68:b0:9e:6e:91:2f:45:8b:4a:08:
eb:01:33:0d:b1:6d:01:ee:d0:27:31:1d:cc:3f:85:be:e6:35:
03:28:bc:ee:2d:3c:73:5e:0b:92:ac:01:f4:c7:b1:6c:c5:1d:
0c:ef:32:4e:91:a2:a4:d1:20:be:3e:19:53:c6:5f:65:8d:9b:
d7:6b:ff:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:56:13 2025 by rpki-client