Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/RYNDE-e_q54MilrT0m4YTXMsmws.roa
File: RYNDE-e_q54MilrT0m4YTXMsmws.roa (raw, json)
Hash identifier: L8semamsfhDT/w8crL1dCfv5/vNZxiQQmTuOUVlWK6g=
Subject key identifier: 45:83:43:13:E7:BF:AB:9E:0C:8A:5A:D3:D2:6E:18:4D:73:2C:9B:0B
Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Certificate serial: 018BDE11FBC7159F358DBA32D27E2EF6BEB6
Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/RYNDE-e_q54MilrT0m4YTXMsmws.roa
Signing time: Fri 17 Nov 2023 16:16:42 +0000
ROA not before: Fri 17 Nov 2023 16:16:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39543
IP address blocks: 89.18.30.0/23 maxlen: 23
89.18.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:de:11:fb:c7:15:9f:35:8d:ba:32:d2:7e:2e:f6:be:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Validity
Not Before: Nov 17 16:16:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45834313e7bfab9e0c8a5ad3d26e184d732c9b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:26:e7:29:86:f2:e5:f4:69:3c:44:14:31:83:
a7:70:1f:a8:23:a7:66:5c:9a:2f:5b:fc:9b:e3:fd:
16:69:83:23:ce:e0:78:4a:6c:c3:68:d5:6f:d4:fa:
cb:f7:1e:61:32:3f:98:dd:e9:3f:1f:4c:d8:8b:db:
8f:b4:fc:dd:55:48:b1:c9:f9:7b:60:9f:1f:e2:de:
57:47:b9:ee:15:32:b4:39:70:44:3c:86:c8:02:cd:
c8:29:61:b8:d2:6f:20:a8:14:e7:1d:39:83:fd:bb:
73:47:c4:47:ca:b1:fa:42:3e:5a:61:20:67:1a:0d:
b4:3b:48:ab:8d:a3:f6:ca:6a:ea:4b:13:f8:43:48:
89:06:f2:9d:f3:b4:1b:1b:84:ca:76:73:be:c6:6a:
2b:9d:82:c1:ca:53:48:b7:b1:b1:50:e7:ae:36:78:
93:43:ab:32:62:cd:83:82:e9:1f:db:d2:3b:08:68:
a7:ec:94:b9:d7:1c:b2:00:70:8e:23:e7:30:57:04:
eb:43:a4:2a:67:93:d3:22:2e:f8:08:1f:99:52:f4:
a9:e5:27:c1:e0:9f:55:68:4e:46:3d:cc:35:59:eb:
e0:db:fa:c3:25:11:08:10:02:e5:c0:85:ce:e3:70:
85:24:e7:86:70:1b:72:6b:84:e1:95:b4:20:f5:f8:
1d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:83:43:13:E7:BF:AB:9E:0C:8A:5A:D3:D2:6E:18:4D:73:2C:9B:0B
X509v3 Authority Key Identifier:
keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/RYNDE-e_q54MilrT0m4YTXMsmws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.18.30.0/23
Signature Algorithm: sha256WithRSAEncryption
85:64:22:4f:60:d2:bc:76:97:a6:28:a1:c0:5b:c8:db:df:68:
50:54:88:6b:af:e4:21:7e:53:48:78:37:db:9a:20:8b:01:52:
73:6f:4c:b8:4e:ba:f8:2d:da:42:74:5f:5d:92:4c:98:37:cb:
d9:05:48:c1:b8:e9:03:7e:84:ef:ee:9d:cd:0b:4d:03:48:eb:
2f:77:6f:8f:86:5c:d7:8d:11:02:ab:66:f2:00:c7:ac:d4:03:
17:49:84:75:69:d2:3f:5c:30:7d:83:0d:00:f4:c9:c5:cb:20:
3f:31:27:64:6c:90:01:bf:8a:46:1a:6c:16:fb:9f:96:e9:3e:
99:c9:50:91:9b:0d:12:64:76:ba:2e:d5:b8:f0:4c:c9:37:a5:
27:82:9b:7e:a8:ca:1f:ab:5a:14:5c:b7:0a:d7:2b:e3:9f:dc:
07:b8:99:3c:95:46:ab:b4:d9:46:bf:4e:74:b5:2d:40:f5:33:
f3:62:83:b4:c0:db:a8:3d:67:5e:2a:d6:79:14:7f:b0:8e:cd:
b9:ea:ec:5b:96:0e:4f:92:00:79:93:6a:75:84:44:82:61:32:
1c:78:8a:86:23:4d:e3:2e:f3:5e:84:a3:c1:d5:a2:43:ac:48:
95:d3:1f:00:ae:de:5a:3b:4c:9d:e5:4f:0c:c5:b6:35:65:1f:
0c:47:12:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:34 2025 by rpki-client