Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/41kM6dyQNeACQbU6fmr3qy38DSI.roa
File: 41kM6dyQNeACQbU6fmr3qy38DSI.roa (raw, json)
Hash identifier: HE6yEbrCuOFIaiOqBkPjM5syld4O9XBl/Ifi7LmR3wg=
Subject key identifier: E3:59:0C:E9:DC:90:35:E0:02:41:B5:3A:7E:6A:F7:AB:2D:FC:0D:22
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 018659A8150CAF312B1FC64938101C51C5CF
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/41kM6dyQNeACQbU6fmr3qy38DSI.roa
Signing time: Thu 16 Feb 2023 09:57:12 +0000
ROA not before: Thu 16 Feb 2023 09:57:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62386
IP address blocks: 89.25.35.0/24 maxlen: 24
94.155.175.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:59:a8:15:0c:af:31:2b:1f:c6:49:38:10:1c:51:c5:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Feb 16 09:57:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3590ce9dc9035e00241b53a7e6af7ab2dfc0d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1a:ba:45:18:05:71:6b:71:e9:68:2c:2f:f4:
f9:9c:ee:32:63:98:f7:2f:03:80:26:cf:cc:4c:82:
d6:8d:90:e9:c2:4c:04:ee:a8:f7:5c:14:4c:7d:76:
12:51:26:97:e0:77:85:bf:68:42:67:4c:d1:42:84:
17:de:fc:9f:c3:e0:60:cf:80:00:dd:b0:d4:c5:85:
bf:ee:ab:7b:a6:e1:5e:9e:24:7b:80:a7:f6:a7:e9:
b2:ec:85:75:07:9a:3e:94:f6:a8:70:1d:ce:31:9f:
fc:18:e5:a0:5d:cd:c5:56:6a:23:94:e5:71:98:d9:
94:c1:12:ae:df:47:aa:d3:b5:3e:8e:c7:04:07:7a:
3e:47:f8:e4:04:47:24:52:0e:74:04:fe:00:6f:41:
79:1e:d2:f5:fe:5f:a0:2b:2b:86:1e:38:5b:05:b4:
58:55:c9:1e:39:08:92:d5:b0:93:84:cc:bb:a7:62:
5a:f9:aa:2f:e5:d0:db:82:96:1b:a7:42:63:6e:4d:
76:81:4b:32:9c:bd:68:9b:6c:53:1f:bc:3f:96:1f:
4f:41:aa:64:bf:47:8d:74:4b:ec:54:77:44:48:21:
ce:06:6d:88:2a:30:60:a8:d4:3c:f3:cc:57:84:fe:
44:ad:f9:80:a2:47:74:94:bc:17:5f:f0:65:af:15:
66:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:59:0C:E9:DC:90:35:E0:02:41:B5:3A:7E:6A:F7:AB:2D:FC:0D:22
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/41kM6dyQNeACQbU6fmr3qy38DSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.25.35.0/24
94.155.175.0/24
Signature Algorithm: sha256WithRSAEncryption
11:ea:23:b2:6f:48:2e:44:39:9c:15:80:be:e1:03:21:c3:3f:
e7:99:aa:bc:cc:9e:c3:bb:6a:dd:73:c9:2c:57:47:21:5d:c9:
9c:42:cd:cc:4b:db:66:05:75:aa:67:1b:e0:ad:bb:90:b7:4b:
d7:42:76:81:34:58:f8:ee:bc:b9:cb:fe:3a:0d:e0:67:29:41:
10:c3:5a:a5:ba:d7:bf:4c:a7:11:e8:95:a2:03:92:79:2c:f4:
43:aa:cd:66:cc:59:d4:e6:1e:85:a5:ad:42:93:3b:c5:36:ed:
04:f7:27:af:93:a6:32:3c:b4:7c:61:42:eb:35:a4:6e:93:8d:
fe:aa:30:4f:5c:a9:ec:47:57:a0:df:fd:b4:da:e4:bb:92:f1:
e3:ea:9a:2a:e7:a5:eb:f1:0b:37:b0:49:e2:b8:be:1c:24:11:
0b:bd:ab:82:95:f6:b6:6b:64:31:ad:c0:73:0c:37:48:67:97:
17:9d:9e:17:ac:6c:cd:8b:72:16:82:48:77:6a:b4:9f:ee:71:
51:50:26:58:d3:38:61:92:c6:fb:4e:0e:95:5b:f3:c2:93:dc:
dc:14:5c:02:96:e9:46:6f:2b:62:f9:72:8f:9d:42:c6:d8:fb:
e3:76:a4:4e:fd:31:e5:17:2e:64:72:6f:31:6d:3f:02:1f:73:
b9:b6:49:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:16:51 2025 by rpki-client