Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/iF51FbZkGzhvJMdDGOXHGylT35k.roa
File: iF51FbZkGzhvJMdDGOXHGylT35k.roa (raw, json)
Hash identifier: viuwA7cAOXJ//leACIMegCmDZQDLh45+eD0ZybpZdYk=
Subject key identifier: 88:5E:75:15:B6:64:1B:38:6F:24:C7:43:18:E5:C7:1B:29:53:DF:99
Certificate issuer: /CN=3e8c1897624f57be34e0f760b97f110ad5b5da3a
Certificate serial: 0183E588CC6414E76D384EE3CCA61B2B9B62
Authority key identifier: 3E:8C:18:97:62:4F:57:BE:34:E0:F7:60:B9:7F:11:0A:D5:B5:DA:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/iF51FbZkGzhvJMdDGOXHGylT35k.roa
Signing time: Mon 17 Oct 2022 10:41:31 +0000
ROA not before: Mon 17 Oct 2022 10:41:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41437
IP address blocks: 89.207.121.0/24 maxlen: 24
89.207.120.0/21 maxlen: 21
89.207.120.0/24 maxlen: 24
89.207.124.0/24 maxlen: 24
89.207.127.0/24 maxlen: 24
2001:a00::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e5:88:cc:64:14:e7:6d:38:4e:e3:cc:a6:1b:2b:9b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e8c1897624f57be34e0f760b97f110ad5b5da3a
Validity
Not Before: Oct 17 10:41:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=885e7515b6641b386f24c74318e5c71b2953df99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:be:f5:10:75:87:63:23:99:f5:5d:44:83:b5:
29:11:02:48:c0:ea:1f:43:e2:f9:22:9b:36:8a:ff:
33:8a:8a:54:22:e2:dd:33:5e:da:f8:77:9d:1e:68:
a9:e8:2a:c9:ef:0c:0f:62:1e:0f:d0:06:c6:4f:e1:
62:18:74:ac:51:22:23:8b:f0:c2:08:fd:06:b2:32:
44:69:8c:73:be:32:63:72:4a:95:3b:3a:63:d6:a1:
13:e8:c7:b9:eb:80:6f:eb:8e:11:79:f1:c9:a5:e0:
a6:ea:15:91:1d:6f:6b:18:5a:5c:14:cc:e6:24:56:
75:0c:24:bc:5c:49:84:db:3b:35:6a:44:e2:84:35:
35:af:20:b3:b8:1f:f6:89:f1:47:74:63:60:91:4a:
5a:55:d7:3b:68:13:fd:82:2e:d9:00:c2:1a:15:1d:
3e:68:ba:7f:30:84:0c:52:0e:b5:fb:23:6d:74:7d:
b0:eb:d9:78:ec:74:97:2b:a6:93:72:de:cc:fa:6a:
0b:34:46:d1:d8:8d:94:dd:99:9a:53:f2:61:75:37:
87:fa:fb:cf:25:3a:da:dc:08:b9:45:1b:b7:02:3c:
53:64:cb:5a:6d:6a:2e:6e:88:16:6c:cb:9f:25:47:
d1:e2:9f:f0:26:bf:0e:e6:3e:15:cd:d2:c5:eb:a5:
56:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5E:75:15:B6:64:1B:38:6F:24:C7:43:18:E5:C7:1B:29:53:DF:99
X509v3 Authority Key Identifier:
keyid:3E:8C:18:97:62:4F:57:BE:34:E0:F7:60:B9:7F:11:0A:D5:B5:DA:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/iF51FbZkGzhvJMdDGOXHGylT35k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.207.120.0/21
IPv6:
2001:a00::/32
Signature Algorithm: sha256WithRSAEncryption
49:2f:4c:49:fd:f0:93:7b:92:63:9e:f1:45:a5:e9:90:b2:64:
93:79:0d:10:ce:2a:ea:05:2f:b1:9f:6b:25:96:74:18:15:c2:
f9:a1:c7:ae:d4:4a:13:30:20:a3:20:00:1f:66:a0:0f:9b:a5:
20:ab:49:92:a8:2d:9b:6d:ce:f1:1e:13:5b:b2:a4:f6:17:85:
1b:3c:c2:01:5e:d5:90:52:b5:ab:ed:11:a0:41:64:5b:1d:e6:
84:a4:47:99:b5:4e:04:18:4e:ba:df:27:73:74:a5:41:1e:d0:
a4:24:41:ac:99:c9:b6:af:d3:cc:1d:2b:1e:7c:1a:98:29:6d:
93:bd:04:02:a3:f1:47:bc:3c:27:1c:a9:bc:d5:1b:d2:a8:f2:
ed:19:ee:a2:7a:77:4d:36:ff:36:80:cf:b2:fd:02:cf:c3:9b:
e6:6c:40:31:70:51:e1:f4:f9:e1:8a:65:41:ac:1b:3e:c9:0f:
ef:5a:f7:9f:bb:61:94:50:b4:f1:e0:4f:9b:65:1c:8c:56:73:
0b:c9:49:46:f3:8f:3f:76:70:c9:11:79:a2:cb:52:c9:c2:9a:
c1:a9:da:14:ef:4b:22:f2:62:e8:77:08:40:b5:96:8c:45:7c:
ad:0f:42:f4:92:eb:13:f6:18:df:8d:2c:10:90:b8:b0:dc:8f:
6e:e0:55:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:58 2025 by rpki-client