Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/9MvgMyzZFHYswBpZucT8-X_O7Hk.roa
File: 9MvgMyzZFHYswBpZucT8-X_O7Hk.roa (raw, json)
Hash identifier: 7FWY+v6zVuTKRnMeddBfHvxW+9ejXarUjB+q9gLrPlo=
Subject key identifier: F4:CB:E0:33:2C:D9:14:76:2C:C0:1A:59:B9:C4:FC:F9:7F:CE:EC:79
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 174F22DB
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/9MvgMyzZFHYswBpZucT8-X_O7Hk.roa
Signing time: Sat 01 Jan 2022 16:03:52 +0000
ROA not before: Sat 01 Jan 2022 16:03:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49298
IP address blocks: 93.119.172.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391062235 (0x174f22db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 16:03:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4cbe0332cd914762cc01a59b9c4fcf97fceec79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:53:13:7c:c9:0e:32:df:f5:2c:5e:a3:2b:c0:
eb:2f:04:2d:30:ff:09:c9:d3:26:2f:3d:5d:40:d1:
d6:74:be:b5:f6:bf:04:86:80:e8:dc:f3:8b:79:3d:
40:65:fc:8f:e3:7a:cd:06:8a:39:6d:0e:c9:2b:41:
e8:9d:50:e5:55:2a:fa:fa:ba:fc:7b:b4:5d:b7:94:
b3:5a:e4:a6:e5:f6:65:f5:72:97:4b:9f:0e:48:6e:
05:c6:fe:20:df:39:9b:f5:fd:88:7a:fc:1d:8c:02:
be:92:37:49:c3:47:fc:4c:f6:5f:89:bb:07:79:8b:
d7:bb:48:95:9f:60:fb:96:2f:c2:41:ed:20:65:7a:
b3:5f:6e:dd:de:21:58:2e:73:9d:7b:c6:9a:ea:8b:
34:bc:e8:7e:49:f3:1e:8e:42:51:f7:ae:cf:d6:19:
cf:bc:cf:40:4b:f8:c8:d3:1f:ab:ab:9f:52:c0:fe:
b1:e5:5d:64:0f:8b:1d:dd:3e:ee:3e:a2:e8:e6:c6:
be:6d:cc:e0:cb:57:6c:30:d2:ac:8c:10:aa:57:c9:
31:29:28:7b:d6:76:d0:8a:ce:ee:cc:ed:ec:e7:8d:
9e:4f:a7:0d:36:f5:26:3a:9c:0e:7d:ed:ff:c2:36:
aa:df:35:4d:71:cc:41:14:46:82:99:7d:85:1e:da:
cb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CB:E0:33:2C:D9:14:76:2C:C0:1A:59:B9:C4:FC:F9:7F:CE:EC:79
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/9MvgMyzZFHYswBpZucT8-X_O7Hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.119.172.0/22
Signature Algorithm: sha256WithRSAEncryption
32:4c:ef:60:ab:30:88:99:96:3f:ba:79:6f:3d:ca:78:96:dc:
76:72:eb:70:ae:99:44:f9:16:3e:09:45:19:c3:86:34:b9:49:
1c:8c:56:c3:89:59:93:5a:a6:58:cc:71:53:be:5b:88:ae:50:
fb:19:4f:bb:d4:2c:bf:2e:79:35:c0:73:82:df:cc:8f:9d:a3:
78:37:d0:d9:2d:5f:76:2c:ad:44:48:78:40:93:5a:73:a1:87:
84:c5:4c:4d:f0:55:0a:02:50:80:1b:ac:c1:10:48:0b:fd:34:
3e:8b:1f:d5:65:94:97:13:a6:10:7b:3a:4a:e6:9a:42:10:a3:
a0:84:70:6c:43:ad:6c:4a:63:7e:65:c2:35:25:94:42:1f:93:
33:db:64:6c:cd:b6:75:7d:27:4f:8c:5e:33:83:f4:e2:e7:0b:
ce:a4:4e:d6:5e:14:8f:71:90:29:7e:4f:fc:55:f3:ad:be:d6:
84:aa:44:f8:3b:5c:c2:b5:ac:91:03:aa:e5:5f:97:03:e7:c7:
11:df:44:83:01:b5:63:3a:31:0c:cb:22:2b:d8:0b:0c:68:84:
96:b9:13:21:b5:9d:95:87:f8:3d:e5:ef:5f:0e:e4:21:11:c0:
e8:30:aa:b5:91:0a:93:90:8e:c6:37:52:02:06:e8:6f:b0:4c:
ed:43:29:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:01:22 2025 by rpki-client