Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/_D7N8mmcd1qm-TnED4wUT6fP3mo.roa
File: _D7N8mmcd1qm-TnED4wUT6fP3mo.roa (raw, json)
Hash identifier: Hnq7HL6iBYgiBfOe4HP3s9Qm/260g4dy6ZD1rpowBK8=
Subject key identifier: FC:3E:CD:F2:69:9C:77:5A:A6:F9:39:C4:0F:8C:14:4F:A7:CF:DE:6A
Certificate issuer: /CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Certificate serial: 01847A13B95FE4117465A8CA601967094D10
Authority key identifier: 8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/_D7N8mmcd1qm-TnED4wUT6fP3mo.roa
Signing time: Tue 15 Nov 2022 06:57:03 +0000
ROA not before: Tue 15 Nov 2022 06:57:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39232
IP address blocks: 89.219.38.0/23 maxlen: 23
89.219.48.0/21 maxlen: 21
89.219.48.0/20 maxlen: 20
89.219.56.0/21 maxlen: 21
89.219.36.0/23 maxlen: 23
89.219.36.0/22 maxlen: 22
89.219.156.0/23 maxlen: 23
89.219.156.0/22 maxlen: 22
89.219.155.0/24 maxlen: 24
89.219.158.0/23 maxlen: 23
89.219.160.0/24 maxlen: 24
89.219.164.0/23 maxlen: 23
89.219.164.0/22 maxlen: 22
89.219.163.0/24 maxlen: 24
89.219.166.0/23 maxlen: 23
89.219.171.0/24 maxlen: 24
89.219.170.0/24 maxlen: 24
89.219.170.0/23 maxlen: 23
89.219.169.0/24 maxlen: 24
89.219.172.0/22 maxlen: 22
89.219.172.0/23 maxlen: 23
89.219.174.0/23 maxlen: 23
89.219.176.0/20 maxlen: 20
89.219.176.0/21 maxlen: 21
89.219.184.0/21 maxlen: 21
89.219.132.0/23 maxlen: 23
89.219.132.0/24 maxlen: 24
89.219.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7a:13:b9:5f:e4:11:74:65:a8:ca:60:19:67:09:4d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Validity
Not Before: Nov 15 06:57:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc3ecdf2699c775aa6f939c40f8c144fa7cfde6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b5:39:a9:9e:21:89:2d:f8:11:5c:25:ac:7f:
3e:30:fb:67:1a:f4:e9:d8:e3:f5:d8:c6:80:99:15:
89:da:92:6d:c7:88:68:c0:c9:78:df:32:83:4e:29:
e2:94:4b:8d:d5:7c:b1:ef:85:92:e6:37:23:33:3a:
e8:71:df:7a:2b:1f:da:52:2d:5a:c1:3e:8c:59:ed:
b8:ae:62:ea:4c:d3:67:17:3e:a4:29:ce:3f:e7:28:
21:b5:42:47:6d:3b:4e:aa:5b:89:87:b4:90:4d:53:
da:2c:f0:a6:3b:f7:97:ee:77:a5:30:d4:f0:9e:cd:
e8:77:ca:d6:f2:d5:0c:24:25:4f:c2:fb:2c:5c:95:
37:51:ab:20:a0:84:a0:4a:e3:ec:a4:23:88:ec:89:
b3:e4:47:c8:0b:5d:23:a4:b1:06:66:07:67:e4:00:
3c:6f:2f:f7:de:37:00:0b:4c:69:e0:b9:be:05:33:
f5:f5:e0:6c:54:69:f2:52:bb:93:9a:71:b0:15:e4:
c5:f6:e9:a5:05:7a:e8:4c:4d:a8:2f:c2:3a:6b:ca:
a0:f0:a3:b6:ad:fd:7f:6d:3a:f8:25:2d:2a:3d:d3:
79:86:c4:6b:62:57:1f:02:da:0b:27:2b:0a:27:d3:
1c:41:24:48:54:71:e2:8f:5a:23:55:5e:1d:f4:c5:
c9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3E:CD:F2:69:9C:77:5A:A6:F9:39:C4:0F:8C:14:4F:A7:CF:DE:6A
X509v3 Authority Key Identifier:
keyid:8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/_D7N8mmcd1qm-TnED4wUT6fP3mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.219.36.0/22
89.219.48.0/20
89.219.132.0/23
89.219.155.0-89.219.160.255
89.219.163.0-89.219.167.255
89.219.169.0-89.219.191.255
Signature Algorithm: sha256WithRSAEncryption
b1:8f:8c:20:90:26:18:93:ad:0b:fa:0e:4f:ad:ad:83:15:23:
7e:8a:35:1c:57:26:6f:22:ba:7b:fc:07:c7:92:16:8d:9e:28:
5e:d1:f7:81:03:8c:9c:2b:ee:ac:1a:4c:5b:6f:56:06:0e:49:
bc:9a:1b:08:a5:41:ad:2b:4a:4f:f6:82:08:b3:df:9c:30:57:
6f:a9:99:cb:87:e5:b8:66:b8:b3:46:0e:0c:97:3e:03:f6:68:
8e:f9:e9:57:0c:30:a7:d4:d9:e3:ba:58:95:d0:aa:17:29:28:
c9:9d:eb:ca:03:03:23:90:bc:1c:ca:be:dd:71:d4:40:d4:52:
c9:3d:28:6d:15:29:b1:6b:1d:1c:5e:c7:a8:8b:da:f1:af:4b:
71:97:66:7c:dd:e9:e7:80:6e:98:87:26:97:54:1c:fb:41:ef:
d0:83:90:64:7e:7b:27:d8:45:ce:af:0c:c3:d2:11:e2:0e:59:
83:8f:46:be:8e:40:b7:4e:b5:dc:57:ca:ab:6b:92:f4:fb:bd:
e7:1d:1f:72:9d:56:96:ba:e3:a1:88:67:a3:9c:46:b4:e0:02:
48:47:e9:49:69:8e:d3:c8:93:28:3b:e3:7d:10:8f:4b:bf:cc:
ec:86:4a:cf:d1:b1:31:fd:c1:d3:10:c5:d8:27:d9:b2:fc:af:
e9:a7:6c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:44 2025 by rpki-client