Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/tf3Mksxyo6PyOLiu_jRP4yrnX1Y.roa
File: tf3Mksxyo6PyOLiu_jRP4yrnX1Y.roa (raw, json)
Hash identifier: ghvIvLT2RHqjG9ZTxM1Bg2vQg4wQKzz9YaRwU1K5rhI=
Subject key identifier: B5:FD:CC:92:CC:72:A3:A3:F2:38:B8:AE:FE:34:4F:E3:2A:E7:5F:56
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01890BFA921D365A91CB46C7F49BF85A4BF9
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/tf3Mksxyo6PyOLiu_jRP4yrnX1Y.roa
Signing time: Fri 30 Jun 2023 11:05:18 +0000
ROA not before: Fri 30 Jun 2023 11:05:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.200.222.0/24 maxlen: 24
109.122.46.0/24 maxlen: 24
89.251.18.0/24 maxlen: 24
89.251.29.0/24 maxlen: 24
193.93.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:0b:fa:92:1d:36:5a:91:cb:46:c7:f4:9b:f8:5a:4b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jun 30 11:05:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5fdcc92cc72a3a3f238b8aefe344fe32ae75f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c9:12:34:38:8d:1e:b1:01:43:8c:5b:55:d9:
0e:b2:a9:0e:59:de:e5:d9:66:2f:ea:00:6f:bd:3e:
aa:47:e6:8c:32:7c:8e:1a:6e:aa:22:26:cb:03:e3:
d0:2f:a1:52:cd:7f:ea:0c:8a:27:71:4d:0f:2a:f9:
98:71:a5:fa:03:63:4b:40:c7:d0:2e:79:7a:0d:6d:
39:21:67:f5:2d:f0:09:e3:e5:f3:d8:96:7b:07:79:
6a:82:00:9f:03:b0:56:59:7b:91:df:78:94:fc:ed:
42:fe:aa:04:83:9b:08:e8:95:da:9c:18:80:48:37:
60:51:59:28:33:62:9d:98:cb:dc:46:8f:2e:6a:f6:
9d:73:59:f9:33:36:9c:0f:fa:df:39:36:0c:d8:b8:
e4:25:43:a2:54:b9:76:e8:f8:5b:c5:27:13:75:a7:
c7:6d:2b:8d:cd:d5:ea:e8:47:5e:3a:7f:6f:2f:5b:
4a:a0:6c:7c:0e:b1:e6:c0:b5:20:e1:dc:e3:cc:32:
57:09:98:8a:5f:83:07:bd:94:b4:e6:f7:01:a0:64:
d3:d4:e5:6b:df:15:b5:f2:03:34:86:31:1f:c3:21:
88:16:16:39:e5:29:a2:1b:46:cf:cb:98:97:4a:f9:
77:fd:63:b9:b7:32:b1:27:ef:2c:ec:1d:bf:4f:c9:
55:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FD:CC:92:CC:72:A3:A3:F2:38:B8:AE:FE:34:4F:E3:2A:E7:5F:56
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/tf3Mksxyo6PyOLiu_jRP4yrnX1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.18.0/24
89.251.29.0/24
91.200.222.0/24
109.122.46.0/24
193.93.52.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:76:4a:f2:2a:ee:71:f8:67:6b:c2:af:e9:85:0b:cf:6b:25:
a3:ed:a2:ff:e0:7a:e0:ab:04:0b:cd:54:06:54:09:25:43:7d:
11:ff:0c:ce:83:17:2e:3d:f1:2d:ba:33:1a:c6:12:d7:23:77:
e0:dd:66:67:5f:bd:e1:5c:c8:1a:f8:33:8b:02:6d:ff:9c:d7:
d9:96:1a:26:10:c1:9f:34:3f:5a:1f:34:e0:89:a9:4c:45:ae:
23:ff:7c:4c:ae:85:a9:87:05:8b:1e:bb:cd:30:cf:cd:62:58:
26:60:05:65:61:41:99:c0:22:d3:64:b3:30:4c:5e:60:be:79:
e6:c9:9a:db:58:f6:d6:12:08:83:a2:9d:20:13:52:b6:20:70:
ef:d7:84:00:c9:e6:2f:81:69:7d:b5:35:08:2c:f7:3f:c0:2d:
67:61:66:e7:d3:8c:8d:dc:8e:ee:fc:42:7d:ae:80:18:f9:e7:
fc:a8:4e:49:d9:da:ae:a2:23:4e:1c:da:c9:b8:51:d9:f2:12:
5f:6b:25:19:f9:c0:a9:fe:73:53:6f:0a:a5:f2:c3:55:80:c1:
4d:a6:69:4a:3d:15:20:88:82:de:f8:d4:fa:47:7d:49:da:89:
12:32:5c:25:78:cc:3d:02:34:a3:bf:87:21:ac:5c:76:9a:91:
33:24:ff:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 21:40:38 2025 by rpki-client