Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/hYZkMyxQ8W5k4XH1iz2YikPV-jI.roa
File: hYZkMyxQ8W5k4XH1iz2YikPV-jI.roa (raw, json)
Hash identifier: 25VFh9PMQbYp1q6Enk2iJlv/jm0R0s9uVEivO81fk08=
Subject key identifier: 85:86:64:33:2C:50:F1:6E:64:E1:71:F5:8B:3D:98:8A:43:D5:FA:32
Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Certificate serial: 018572280E0308619AE4DC962F139169A864
Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/hYZkMyxQ8W5k4XH1iz2YikPV-jI.roa
Signing time: Mon 02 Jan 2023 11:05:05 +0000
ROA not before: Mon 02 Jan 2023 11:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58238
IP address blocks: 89.188.166.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:28:0e:03:08:61:9a:e4:dc:96:2f:13:91:69:a8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Validity
Not Before: Jan 2 11:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=858664332c50f16e64e171f58b3d988a43d5fa32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:35:52:fc:1a:ac:49:a2:02:b8:70:c3:fd:ec:
e2:7e:3b:ca:88:b9:d0:8a:2e:40:b3:2e:ec:4b:30:
c3:f4:8a:5e:8d:d7:45:2d:9b:3c:e8:2d:53:88:20:
27:a1:e1:13:76:47:24:ee:67:f1:24:e0:1a:50:8c:
6b:75:ad:72:49:90:2b:4b:8a:e4:cd:43:09:fd:88:
93:9f:4e:22:06:bb:68:94:1b:5e:1d:ab:91:10:9d:
ce:ff:00:a4:34:6a:38:88:cf:51:ea:c6:18:68:3d:
eb:47:d2:3f:32:74:e1:f8:17:ac:b5:b1:4f:7b:1b:
b2:ed:a1:91:14:eb:b9:82:bf:b7:51:fe:1f:5b:c5:
3d:24:3a:33:b1:77:43:0e:35:4e:67:37:c7:5c:e3:
48:17:d6:7b:68:6e:de:29:03:05:9e:32:11:52:bf:
92:3f:71:ca:48:83:cb:ba:60:5b:4a:ae:a5:60:42:
36:6d:fc:dc:13:37:23:09:40:e2:dc:14:b6:cd:88:
a8:ae:54:b3:0e:b8:f7:80:75:84:c4:fd:f6:d4:f4:
66:82:55:98:bd:a8:d6:dc:6b:21:9b:d9:ce:f3:0c:
dd:f5:06:0e:03:7e:61:5f:0b:1c:d7:14:88:2f:3f:
bc:71:b9:28:3d:1d:a6:0d:b1:b0:4e:5d:70:a4:0f:
8b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:86:64:33:2C:50:F1:6E:64:E1:71:F5:8B:3D:98:8A:43:D5:FA:32
X509v3 Authority Key Identifier:
keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/hYZkMyxQ8W5k4XH1iz2YikPV-jI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.188.166.0/24
Signature Algorithm: sha256WithRSAEncryption
16:a3:0f:2b:f5:b4:4d:e2:47:9c:be:21:a8:c6:79:f9:1a:ba:
74:59:e6:1c:9f:5f:04:94:3b:9d:85:22:c0:d3:71:b1:9e:25:
4a:6c:28:d3:73:3f:8d:7f:43:d7:15:ce:a0:e1:be:98:9b:22:
dc:ff:77:5d:d8:9e:09:a6:65:48:56:f4:93:ef:8f:6c:78:86:
b0:07:4a:6a:7e:8c:1f:54:45:40:6a:98:22:52:e3:91:56:c8:
86:31:f2:0d:9a:b7:34:f7:12:d7:e1:db:f5:de:45:1c:d2:c7:
9d:84:9f:3d:ec:32:b9:d7:b6:30:0d:69:e4:8e:35:09:b4:72:
90:68:24:73:f9:8c:22:3f:c4:93:8f:2f:13:79:8a:78:18:c5:
82:de:f3:63:73:c0:2b:b1:b4:73:49:c4:aa:44:53:75:da:74:
5e:19:c6:51:e2:66:c7:38:41:d8:04:83:f8:10:c5:a0:c2:e4:
67:85:14:21:13:3c:52:9f:ae:e1:85:79:9c:c0:4f:39:bb:f0:
64:66:22:73:93:2f:5d:e4:78:29:95:cd:d4:93:03:98:a0:b8:
f5:02:9e:c6:ee:f1:cd:40:01:d7:95:84:99:f2:7d:63:f1:e9:
21:49:67:2b:30:99:cc:b9:06:c5:ea:3f:cd:fa:2c:01:6c:c1:
15:c1:32:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:41:58 2025 by rpki-client