Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/FRpEPCxEwbPk8jKEW7UCNEnftRc.roa
File: FRpEPCxEwbPk8jKEW7UCNEnftRc.roa (raw, json)
Hash identifier: YBP2gbGwWukTcPT4K1/EBxCGZYum0R0Mdz/V6whPN9E=
Subject key identifier: 15:1A:44:3C:2C:44:C1:B3:E4:F2:32:84:5B:B5:02:34:49:DF:B5:17
Certificate issuer: /CN=3e8c1897624f57be34e0f760b97f110ad5b5da3a
Certificate serial: 0184C3090B31676017722D85FA4CF6315B1F
Authority key identifier: 3E:8C:18:97:62:4F:57:BE:34:E0:F7:60:B9:7F:11:0A:D5:B5:DA:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/FRpEPCxEwbPk8jKEW7UCNEnftRc.roa
Signing time: Tue 29 Nov 2022 10:57:40 +0000
ROA not before: Tue 29 Nov 2022 10:57:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41437
IP address blocks: 89.207.121.0/24 maxlen: 24
89.207.120.0/21 maxlen: 21
89.207.120.0/24 maxlen: 24
89.207.124.0/24 maxlen: 24
89.207.123.0/24 maxlen: 24
89.207.127.0/24 maxlen: 24
2001:a00::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c3:09:0b:31:67:60:17:72:2d:85:fa:4c:f6:31:5b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e8c1897624f57be34e0f760b97f110ad5b5da3a
Validity
Not Before: Nov 29 10:57:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=151a443c2c44c1b3e4f232845bb5023449dfb517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fd:30:35:ca:1f:62:b6:a4:ee:fe:58:24:2b:
af:3b:f7:ad:0a:6e:e9:b2:b1:d2:74:d6:71:85:92:
83:2b:7b:ad:21:14:69:49:e5:75:fe:be:d5:10:5c:
3a:af:17:af:33:98:85:11:54:00:be:ae:4b:84:9e:
3c:59:ec:09:17:b8:8b:21:ce:09:ec:48:72:b9:dc:
d8:29:96:46:fe:4c:3b:5a:70:55:95:5d:27:18:9b:
ee:32:ee:18:a9:ea:a0:64:5d:90:0c:8d:c8:a3:08:
95:b0:a0:3d:00:39:c0:6b:ae:9a:19:52:54:10:5a:
27:55:bb:c0:34:69:50:f4:1d:2b:7f:50:82:10:de:
4d:29:3b:d9:53:60:f0:dd:55:98:b5:ac:0a:55:a9:
7a:8f:fd:61:31:63:c2:8a:34:8b:44:19:7a:38:8b:
65:38:4e:9b:89:d5:ac:ac:8f:81:30:ad:e3:82:7e:
8c:09:36:a4:24:b9:9b:a7:82:d3:ed:6d:ff:d2:98:
07:ab:c3:54:ec:35:cf:e9:36:d1:7f:6e:d9:be:02:
af:b2:85:20:ae:0f:c9:4f:33:ee:96:9f:09:f2:35:
5b:38:4c:84:b4:14:f4:ad:22:73:ff:73:be:81:29:
f4:6f:bb:58:80:3f:c1:97:da:66:9d:31:f4:84:ba:
e3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1A:44:3C:2C:44:C1:B3:E4:F2:32:84:5B:B5:02:34:49:DF:B5:17
X509v3 Authority Key Identifier:
keyid:3E:8C:18:97:62:4F:57:BE:34:E0:F7:60:B9:7F:11:0A:D5:B5:DA:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/FRpEPCxEwbPk8jKEW7UCNEnftRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.207.120.0/21
IPv6:
2001:a00::/32
Signature Algorithm: sha256WithRSAEncryption
58:15:0e:47:b4:6e:3b:f3:78:ef:a7:8c:20:1a:4e:ad:43:42:
59:39:13:2b:8c:2c:84:d2:2b:f5:c3:52:10:28:01:36:85:a7:
21:5f:5b:1e:de:25:6f:36:47:d9:f3:7d:14:26:3a:8b:f6:9a:
34:6b:6e:fb:e4:a2:d4:b9:62:86:f3:84:6b:02:aa:01:5a:0f:
c9:ea:22:8b:fd:96:db:8e:ab:76:b3:ad:c3:0e:bf:31:99:16:
e1:f5:30:d3:2a:24:60:cd:12:93:d9:c3:e5:56:b9:f6:d5:c7:
fe:a9:3d:1c:93:53:e2:e1:4e:c6:56:75:15:dc:d4:82:cb:79:
ec:1e:d9:87:e5:2f:52:2a:cc:ec:b1:95:b4:74:b1:22:68:02:
32:9a:cf:b9:5f:fa:c2:99:80:5c:92:b9:7c:80:af:d2:9e:90:
d7:27:d0:c9:c1:d9:b3:dd:b8:72:1c:63:36:10:72:86:58:55:
b3:16:aa:fb:7c:37:2e:5c:62:d8:24:20:8f:e5:e4:b1:84:40:
a7:a0:0b:18:cb:66:bf:3e:c2:03:7b:39:b5:f0:20:6e:8d:cb:
95:22:81:0c:bb:d7:51:71:ce:27:42:78:1f:d9:1f:ab:f3:c3:
71:ca:5d:c4:6f:26:55:de:fb:b8:4d:00:2e:d6:74:f0:56:e4:
87:1e:5b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:31 2025 by rpki-client