Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/RSc1zk6xFoZWKtzdh09Wl6osdW4.roa
File: RSc1zk6xFoZWKtzdh09Wl6osdW4.roa (raw, json)
Hash identifier: WTImXs5bvbwCPeE91XUio1gsPnjP1IgoEArLxAmEK74=
Subject key identifier: 45:27:35:CE:4E:B1:16:86:56:2A:DC:DD:87:4F:56:97:AA:2C:75:6E
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 01856B811D8A25D95715D3A04A8648F7DA60
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/RSc1zk6xFoZWKtzdh09Wl6osdW4.roa
Signing time: Sun 01 Jan 2023 04:05:01 +0000
ROA not before: Sun 01 Jan 2023 04:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49737
IP address blocks: 89.25.32.0/24 maxlen: 24
89.25.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:81:1d:8a:25:d9:57:15:d3:a0:4a:86:48:f7:da:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 1 04:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=452735ce4eb11686562adcdd874f5697aa2c756e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:24:38:b4:09:cd:32:38:26:1c:0e:ee:bc:89:
08:0c:07:d3:72:9a:27:b9:7e:88:ec:20:c2:8e:47:
19:f7:ad:0f:43:8f:a7:d1:3a:94:cf:6a:57:ad:e7:
bb:cd:a8:96:54:78:96:9e:33:db:7a:11:a2:52:8e:
f8:b8:af:b4:f8:a1:d2:0d:be:07:b0:18:ec:43:3a:
7e:67:fd:99:16:08:61:56:36:fa:9a:b6:3d:a7:9e:
ae:6d:a1:d7:14:04:d0:fd:4f:e7:1e:ee:12:20:b6:
14:31:49:20:ad:c6:6a:b3:64:8d:fc:36:e3:66:13:
65:e1:58:29:3e:9e:d0:4a:bb:5b:f9:b1:6e:1a:17:
6c:b6:9a:87:a6:67:16:e9:e7:8a:bf:5e:9f:cb:39:
2b:ab:93:dc:5c:bc:24:1b:aa:8c:1d:88:da:30:05:
a8:95:bd:aa:2e:5a:8b:fe:a7:a9:ec:cb:d9:f4:0e:
c4:6e:c3:66:f5:76:43:bf:6a:75:b3:6d:2d:97:ea:
64:fe:44:31:e6:7b:69:44:88:c7:3a:7d:9a:a4:81:
f4:f3:1e:8f:2a:b9:e1:38:01:83:40:d0:ea:ad:58:
ba:3d:70:f7:45:2e:57:6b:74:ed:e9:a9:eb:03:d5:
0e:1c:4d:94:b4:75:61:85:06:6e:79:cb:d0:4b:1f:
fc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:27:35:CE:4E:B1:16:86:56:2A:DC:DD:87:4F:56:97:AA:2C:75:6E
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/RSc1zk6xFoZWKtzdh09Wl6osdW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.25.32.0/24
89.25.48.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:52:a2:c0:72:c9:f8:95:50:3f:a9:f9:9f:47:17:63:15:3d:
71:b8:dd:1c:58:f1:56:26:88:ed:a1:8c:26:c8:bb:de:a8:6e:
8a:aa:bc:7c:b3:9e:32:27:65:6a:73:ad:5d:51:45:0c:52:4f:
05:69:a0:cc:6d:48:45:7d:55:80:43:28:11:2f:2f:b0:e7:57:
33:55:ac:72:fd:fc:77:56:6d:56:96:1a:05:f1:b3:95:18:29:
59:76:76:87:1c:2b:a6:d0:48:85:31:d4:b1:36:41:92:6d:6c:
e8:e3:7d:a6:83:02:44:83:70:da:c9:37:d8:65:20:0e:19:c2:
58:62:97:3a:89:08:10:53:88:ee:23:6c:47:e0:18:39:48:51:
68:c5:ec:17:da:27:bb:41:24:b0:32:76:20:ee:d3:c8:2c:85:
c9:de:1c:9d:06:b1:e2:b5:80:bc:7c:51:49:4d:b8:84:61:d3:
08:7e:9d:fb:2b:17:01:0b:81:a6:56:73:e0:7e:c4:aa:65:32:
bd:38:13:cf:d7:41:e8:bb:52:5e:65:98:5d:4a:b1:1a:34:10:
8b:8f:f4:4a:36:4b:3c:11:80:18:fd:19:c6:8a:90:2d:a0:37:
42:0e:70:b3:d3:22:9b:93:9c:1e:0c:6d:b2:d2:4d:66:85:19:
48:be:c6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:47 2025 by rpki-client