Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/tjU6uR925zxm0AfpYDBRCKane30.roa
File: tjU6uR925zxm0AfpYDBRCKane30.roa (raw, json)
Hash identifier: fxeW7g/G82ze+ElmDCW+t1xx0nXAlK8gWfZLJQocf78=
Subject key identifier: B6:35:3A:B9:1F:76:E7:3C:66:D0:07:E9:60:30:51:08:A6:A7:7B:7D
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 018BB460FDED82409134604F7496733EFEF2
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/tjU6uR925zxm0AfpYDBRCKane30.roa
Signing time: Thu 09 Nov 2023 13:58:57 +0000
ROA not before: Thu 09 Nov 2023 13:58:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.249.202.0/24 maxlen: 24
89.249.206.0/24 maxlen: 24
89.249.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b4:60:fd:ed:82:40:91:34:60:4f:74:96:73:3e:fe:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Nov 9 13:58:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6353ab91f76e73c66d007e960305108a6a77b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:58:68:f4:40:95:e2:7c:c6:db:ef:30:3a:df:
40:55:9e:dc:ed:97:d4:9b:28:fd:b6:79:81:2d:56:
d5:2b:c9:a9:cf:bb:e6:0d:ee:0a:23:fa:6c:a1:22:
62:96:50:a3:bd:70:84:ea:1e:8f:ca:9c:05:56:b2:
fd:e2:4f:3f:67:9d:5a:5e:7e:00:e8:8c:8e:95:9a:
ff:b0:4b:26:73:16:54:cb:7d:a8:4a:23:d7:9a:d9:
cf:a7:a4:2b:7b:05:80:12:e3:e0:be:80:fa:86:aa:
d1:3a:4e:ea:8f:a9:70:5a:7e:1b:08:84:2e:21:3c:
d4:ec:4c:94:71:6a:a2:a7:43:51:e7:7d:f9:46:76:
15:f0:2d:50:90:f6:0c:e8:cc:b1:ae:35:78:0b:84:
6b:c9:af:a0:6d:6c:75:da:7c:30:65:46:78:e9:e5:
1c:bd:8f:a5:bc:a5:7a:5f:79:fa:8d:02:b7:09:96:
0a:79:ba:d0:b0:4f:6d:e5:85:c7:7d:c9:e8:20:61:
bd:8e:2a:6b:7c:5b:4e:42:e4:a4:00:98:2d:73:f0:
3d:af:d5:a0:9e:33:79:14:38:f8:a7:b4:83:a5:2b:
28:02:07:31:62:ab:f8:58:64:e7:e3:91:96:e9:4f:
8e:c2:5f:56:dd:ee:24:c9:c7:86:53:da:68:bc:6b:
05:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:35:3A:B9:1F:76:E7:3C:66:D0:07:E9:60:30:51:08:A6:A7:7B:7D
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/tjU6uR925zxm0AfpYDBRCKane30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.202.0/24
89.249.206.0/23
Signature Algorithm: sha256WithRSAEncryption
32:cf:72:bb:25:be:1f:91:de:22:3b:d4:a8:91:3c:90:5f:a1:
0b:e5:f0:a1:57:99:73:1f:7e:39:9c:b6:25:1a:34:24:f0:d6:
c7:cf:6f:42:4c:17:b3:31:97:1d:e2:96:8d:f5:03:eb:68:e6:
3d:9a:8c:01:44:6e:86:73:dc:71:43:8b:e6:cf:10:b4:14:38:
15:ef:9e:ea:7f:c6:68:97:fc:f9:25:c4:09:06:1e:4a:da:7e:
52:16:6f:03:e4:1f:a5:8d:83:42:25:88:f4:be:2c:8f:3a:9c:
d5:23:84:89:80:37:83:23:a4:19:35:64:00:72:a5:29:a7:b3:
e0:47:1c:9b:0a:52:1e:9f:8c:8e:0b:65:1e:4a:5c:0f:76:86:
05:c7:ef:ec:d0:f0:e8:81:b7:54:08:ae:65:06:92:b9:3a:a0:
7d:c2:1e:27:e0:0e:92:38:fa:ba:8c:2b:ae:de:95:57:04:07:
24:86:41:05:af:b9:1f:e8:40:21:df:7c:9e:e4:0c:9b:b6:81:
ec:24:18:5c:d9:4f:30:2b:01:c6:22:19:14:55:1e:66:a3:95:
ff:ba:82:bd:e5:c5:98:5a:7a:c6:43:9c:a7:b2:66:46:e4:b8:
c1:1a:23:01:7e:ca:20:cd:38:ce:d3:45:df:2e:a0:0a:d5:91:
7a:28:a7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:25 2025 by rpki-client