Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/JdncU0UNLQyoNb2yFBXeg-VN6qg.roa
File: JdncU0UNLQyoNb2yFBXeg-VN6qg.roa (raw, json)
Hash identifier: QTRgm76RBZdhTMX2vozkgBg4zKPsOeUtqnFzDAue5/U=
Subject key identifier: 25:D9:DC:53:45:0D:2D:0C:A8:35:BD:B2:14:15:DE:83:E5:4D:EA:A8
Certificate issuer: /CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4
Certificate serial: 018571B0FC4A36CB5C25832639804CFCE991
Authority key identifier: EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/JdncU0UNLQyoNb2yFBXeg-VN6qg.roa
Signing time: Mon 02 Jan 2023 08:55:02 +0000
ROA not before: Mon 02 Jan 2023 08:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64452
IP address blocks: 89.44.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:fc:4a:36:cb:5c:25:83:26:39:80:4c:fc:e9:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4
Validity
Not Before: Jan 2 08:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25d9dc53450d2d0ca835bdb21415de83e54deaa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0f:54:cb:05:e7:cd:ac:ae:e2:4a:32:f2:b1:
0f:fa:f8:04:f3:e7:86:14:fb:86:b2:f7:ca:ec:15:
a6:47:b3:b1:81:cf:65:2a:18:17:56:f5:ab:9d:50:
73:3c:cf:b9:cc:51:43:f0:59:54:bf:04:17:37:cb:
49:2b:fc:69:79:fa:d9:bb:47:bf:61:ee:46:4f:32:
8d:a9:b5:94:b3:28:95:fe:7e:a5:3c:7a:98:6b:72:
01:22:3c:1a:1d:c8:79:71:2e:d6:72:7f:41:3a:ab:
2c:1c:75:b0:4c:f9:e8:0e:6e:ae:22:2d:75:5e:6c:
bd:24:8a:9b:8d:ec:a1:2e:ee:8c:c2:b4:b3:93:4b:
4c:09:96:e0:38:df:c5:b9:4f:5b:1e:b0:d2:a3:5c:
b8:49:ed:64:61:a3:74:b2:22:4a:3c:cc:d4:16:8d:
c1:46:48:3e:dc:aa:78:aa:f3:70:a2:d3:8d:0b:25:
82:4d:62:c3:13:27:6a:79:b3:ed:c7:07:50:25:ef:
29:41:b0:82:b6:c8:9b:ab:cd:09:6f:41:36:60:5b:
6f:e8:bb:f0:78:91:50:07:cb:2e:47:20:62:5e:56:
03:35:89:7b:f7:4f:68:a8:c5:16:6c:32:59:55:5c:
1f:34:b5:85:75:7c:e6:5c:84:df:1e:da:47:2c:b5:
91:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D9:DC:53:45:0D:2D:0C:A8:35:BD:B2:14:15:DE:83:E5:4D:EA:A8
X509v3 Authority Key Identifier:
keyid:EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/JdncU0UNLQyoNb2yFBXeg-VN6qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.87.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:0d:b3:8c:7a:9b:dd:e2:ef:62:e4:70:94:90:a4:e0:55:85:
d3:c4:7a:3c:48:a9:ff:51:c5:7c:d1:2f:ca:61:12:7a:2a:40:
56:45:ad:22:2b:f1:64:80:f7:33:a1:35:a1:dc:87:01:96:da:
4f:88:07:c6:1b:92:90:59:8b:6c:c4:2e:b5:70:dc:b0:02:11:
ac:32:05:e5:b0:6e:60:d6:8a:c4:22:d2:6e:6d:e5:bc:a1:bf:
51:ac:11:e2:6a:48:ea:c4:84:3b:fe:23:44:f1:1f:bb:3c:d6:
a1:bf:78:ea:86:dd:b2:4e:60:1f:e4:77:39:53:0c:98:20:fc:
48:a0:69:8e:1f:7b:0c:5e:e0:53:89:54:75:ad:af:c0:3f:62:
99:83:43:51:07:3f:8f:10:79:34:cf:17:4b:7b:7c:86:e1:75:
52:d3:49:09:43:7e:c6:c7:25:b7:9f:01:4a:72:24:cf:e6:93:
d8:67:c0:fb:c4:00:3a:be:a1:cc:0e:20:f6:4c:93:4d:89:45:
83:00:99:b4:b5:cd:03:a7:83:9c:15:8b:a0:3c:47:65:65:e0:
d2:97:e0:7d:ec:31:01:7b:16:66:9a:3a:b6:66:93:c7:19:75:
07:cf:71:98:57:b8:41:93:5b:0b:d2:52:0e:6b:7a:cf:63:71:
5f:30:c2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:03 2025 by rpki-client