Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/WSyfzX0XmX-HCLULG4yjI7TFtR8.roa
File: WSyfzX0XmX-HCLULG4yjI7TFtR8.roa (raw, json)
Hash identifier: 4opKVWiUcKHnRYbohBi8JNQ+2cPeN6IrihQLmfvPm1c=
Subject key identifier: 59:2C:9F:CD:7D:17:99:7F:87:08:B5:0B:1B:8C:A3:23:B4:C5:B5:1F
Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44
Certificate serial: 0512A17C
Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/WSyfzX0XmX-HCLULG4yjI7TFtR8.roa
Signing time: Sat 01 Jan 2022 12:03:27 +0000
ROA not before: Sat 01 Jan 2022 12:03:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60737
IP address blocks: 89.30.86.0/24 maxlen: 24
89.30.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85107068 (0x512a17c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44
Validity
Not Before: Jan 1 12:03:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=592c9fcd7d17997f8708b50b1b8ca323b4c5b51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d3:30:13:57:27:69:db:ff:61:f9:c7:74:b5:
d7:10:98:eb:77:8b:f2:84:4e:07:52:73:4f:c0:b6:
0e:c4:a8:6d:0b:df:44:41:1a:bd:77:40:6e:c6:31:
e3:82:c1:28:f6:a5:6d:10:48:7c:af:1e:1b:fb:31:
47:b0:cd:79:f9:e7:00:a6:25:9b:22:0e:b5:46:27:
02:ca:82:4d:43:f3:6f:dd:7c:69:c4:a1:8f:86:1e:
c7:8f:83:b6:dd:54:28:24:2a:1c:2c:8e:41:65:cf:
76:80:e7:c2:74:ff:a8:f2:02:2a:7d:c4:90:8e:89:
cc:82:9f:c1:7f:61:61:60:c4:d4:83:19:c9:63:d8:
60:65:8e:21:a2:52:94:22:1d:af:22:6b:0f:0e:bc:
88:f4:a2:0f:0d:74:de:8f:4c:26:0e:f2:6e:88:f6:
f2:e6:40:c2:d3:32:48:3e:fb:9b:9c:b5:64:ee:3e:
85:d7:bb:5b:28:ad:e8:a5:d4:85:cc:48:ba:66:be:
58:58:06:aa:11:ef:7c:78:fe:15:2e:ed:5a:75:81:
f9:1a:77:39:06:32:5a:fe:2f:76:38:fc:f2:0a:57:
e9:e6:ea:8a:dd:b5:f6:ea:ee:93:3d:69:b8:50:e7:
f7:1e:ae:83:c2:33:51:93:6a:ed:24:16:54:b5:85:
1b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2C:9F:CD:7D:17:99:7F:87:08:B5:0B:1B:8C:A3:23:B4:C5:B5:1F
X509v3 Authority Key Identifier:
keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/WSyfzX0XmX-HCLULG4yjI7TFtR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.86.0/24
89.30.95.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:29:cc:c2:71:9a:ab:34:a6:e9:67:50:d6:ef:e0:74:12:de:
24:dc:8a:ba:06:7f:49:29:c2:db:6a:45:04:79:3e:b2:e2:f3:
af:5b:29:b9:a4:ce:f4:3f:d0:b6:70:8a:8d:6e:d5:90:30:8f:
0c:91:1b:d0:cc:39:ac:0e:5d:89:d6:85:5e:ac:bb:1a:dc:d2:
96:78:c8:6a:e6:29:fb:5b:8c:be:ab:3e:c1:8a:4f:15:ba:13:
77:11:ee:54:6d:c4:56:72:a6:60:85:79:ed:8c:ac:ae:df:f7:
f0:86:d5:aa:c5:2d:90:13:39:3c:0a:29:a1:52:04:80:21:76:
68:70:e2:74:47:d1:98:2c:d9:15:55:c3:34:08:49:1e:a0:26:
a6:7c:07:0d:4a:93:2c:44:24:e2:00:2e:90:10:63:2b:6e:e8:
4f:76:88:5f:e1:da:8d:44:45:54:8e:ab:87:a6:1d:03:3f:df:
59:5e:87:7b:63:64:5d:31:b9:71:db:6a:e2:fb:92:17:58:e4:
57:af:a5:07:d0:38:b9:ec:9f:5d:b9:2c:44:a9:3b:78:7d:70:
9f:66:ef:b3:b6:42:a9:0e:c9:8c:ec:49:42:4c:ba:66:71:cc:
36:f5:d2:0c:58:1a:62:01:ff:03:95:cb:83:a3:71:fc:e7:56:
f7:77:07:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:03:34 2025 by rpki-client