Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/nMg8TgHor6y2vgFd98ybIm-inds.roa
File: nMg8TgHor6y2vgFd98ybIm-inds.roa (raw, json)
Hash identifier: XuvfA8DmW0l7/eBhCVx+KOHJGaZ+6Cp/Lr4K4DGSHJs=
Subject key identifier: 9C:C8:3C:4E:01:E8:AF:AC:B6:BE:01:5D:F7:CC:9B:22:6F:A2:9D:DB
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 018C81FACC2AEB0240790EBF27E356B8B369
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/nMg8TgHor6y2vgFd98ybIm-inds.roa
Signing time: Tue 19 Dec 2023 12:09:06 +0000
ROA not before: Tue 19 Dec 2023 12:09:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5650
IP address blocks: 89.117.212.0/24 maxlen: 24
89.117.214.0/24 maxlen: 24
86.38.191.0/24 maxlen: 24
89.117.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:81:fa:cc:2a:eb:02:40:79:0e:bf:27:e3:56:b8:b3:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Dec 19 12:09:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9cc83c4e01e8afacb6be015df7cc9b226fa29ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e9:5e:bb:72:73:92:72:2d:f4:c9:2a:1f:89:
c2:c9:4b:70:78:66:50:7b:1d:03:01:38:9f:92:26:
9e:57:0c:b4:2a:04:2b:71:01:f4:74:f3:7c:25:75:
94:74:5d:a9:1f:40:c0:1c:ca:a5:6e:ac:25:81:e7:
1d:50:57:b0:2b:6d:e7:90:c1:2c:f6:18:f4:ff:69:
df:e8:a1:c4:7f:33:a7:1f:fe:4c:94:18:6d:f8:75:
9e:bd:3b:2a:c6:68:e3:e8:d9:4c:94:c1:2a:fb:37:
4d:e8:6f:2f:25:6f:be:13:1d:85:b4:af:4d:c9:ea:
6c:a8:75:06:61:52:6c:61:f0:ea:ac:53:46:3d:ef:
11:80:00:84:b5:37:e1:55:09:56:21:16:0e:fc:e0:
23:2a:44:7d:c5:18:f9:18:94:5f:72:92:0a:df:72:
16:82:65:dc:bb:50:fc:b4:e9:6d:17:f7:c0:9c:16:
51:2c:cb:bc:5c:62:29:5e:44:31:6c:70:d7:9b:23:
06:70:60:2b:09:b6:fa:3b:7c:71:42:22:32:15:b8:
e9:55:6b:ac:1d:62:49:be:42:25:6b:11:92:b9:56:
d2:1c:e3:58:30:b9:a0:b4:42:00:5a:5e:97:81:e5:
b8:20:5c:2e:7c:94:1d:a7:af:14:fb:f8:bb:46:5c:
01:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C8:3C:4E:01:E8:AF:AC:B6:BE:01:5D:F7:CC:9B:22:6F:A2:9D:DB
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/nMg8TgHor6y2vgFd98ybIm-inds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.191.0/24
89.117.212.0/24
89.117.214.0/24
89.117.251.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:f3:f9:7c:f6:1c:49:2f:15:d5:04:06:d9:fc:4a:04:33:64:
5c:b9:89:c4:95:43:bd:56:a6:be:25:d2:78:df:54:53:af:ff:
71:22:05:18:92:f3:eb:06:e3:d5:80:b7:e0:36:ed:9f:c5:d6:
48:9d:13:b7:ad:9f:9e:c1:fe:16:22:5d:5c:c7:f6:5b:53:00:
b3:7c:e8:79:f6:c5:27:aa:98:92:5a:2b:19:d4:c3:1f:a6:c5:
25:e1:a5:89:35:99:3e:7c:b6:32:df:2e:96:04:8b:0e:e5:67:
c2:9a:ee:f8:93:07:29:1f:ac:4e:de:77:12:9c:2e:c4:77:55:
2a:51:df:c1:c6:62:e6:76:37:b9:c7:d2:7f:42:ac:50:0c:1c:
98:f9:2e:9f:06:94:db:31:10:b5:96:23:9e:8e:9e:8e:4d:63:
bc:86:85:d5:23:53:57:b5:d2:fc:79:67:da:20:56:b7:7b:96:
8a:64:58:9a:8d:47:d0:30:e3:59:b6:99:31:d8:58:89:0b:bc:
b6:07:14:0a:d2:f2:8a:7e:11:88:69:27:27:a7:c9:cc:dd:20:
8f:44:04:04:cd:3b:b9:6d:c6:80:c9:a1:ec:fd:5a:0d:9f:ad:
20:e2:fa:a9:eb:87:32:ea:be:58:47:5d:51:99:3a:d6:1e:3a:
a0:e8:9b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:29 2025 by rpki-client