Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/_T9RCmmYIU0N8mvZb7yqQlEITt8.roa
File: _T9RCmmYIU0N8mvZb7yqQlEITt8.roa (raw, json)
Hash identifier: UofBeXcjE1CcRPG+UkdC88WN8+zELFXoKlEfwiimDKs=
Subject key identifier: FD:3F:51:0A:69:98:21:4D:0D:F2:6B:D9:6F:BC:AA:42:51:08:4E:DF
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 0189D6A278AF0CD74AB41D566006B0793C8F
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/_T9RCmmYIU0N8mvZb7yqQlEITt8.roa
Signing time: Tue 08 Aug 2023 19:31:59 +0000
ROA not before: Tue 08 Aug 2023 19:31:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20616
IP address blocks: 89.34.107.0/24 maxlen: 24
89.35.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d6:a2:78:af:0c:d7:4a:b4:1d:56:60:06:b0:79:3c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Aug 8 19:31:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd3f510a6998214d0df26bd96fbcaa4251084edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7f:eb:8d:f3:43:cc:c1:4a:12:5c:09:e7:3f:
c5:41:7f:76:32:d6:49:d3:46:16:ea:ff:e1:40:ea:
cd:2a:b8:3e:6f:37:47:ee:eb:ee:62:13:17:bc:8b:
7c:7a:51:ba:14:d6:c7:df:93:ee:65:bf:42:d2:a6:
f0:10:fa:6d:e5:64:46:34:e5:23:6a:33:1a:11:fe:
47:80:25:07:eb:e2:45:fc:7d:05:8f:ac:2a:e2:9d:
58:49:bb:c1:03:3d:b5:89:27:29:fc:a8:13:1d:e8:
48:18:f7:a9:0e:68:83:08:12:de:2f:b8:f4:75:f4:
47:ae:56:4b:fa:1d:0a:7f:ee:ff:20:b5:ed:4d:4e:
5d:91:d0:ab:90:b1:e9:1b:ca:7d:3b:e2:5b:ee:36:
10:76:56:5f:98:96:cd:9c:45:a3:d9:ca:6b:12:bb:
e4:4b:20:e6:fb:3b:50:89:e2:db:b6:07:d4:b2:07:
c1:6d:9c:de:04:dc:6b:86:94:02:bc:91:0c:60:6f:
ad:ac:6b:92:5c:c2:03:a8:1f:6b:1f:c7:0a:66:91:
da:76:ac:7a:1c:67:81:79:2d:6d:10:3b:b4:df:b9:
48:de:5d:31:da:bb:df:e1:b7:95:5a:f9:e5:ce:66:
12:ea:12:4d:a4:e3:d2:a3:a7:a3:7a:50:9a:13:b3:
d7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3F:51:0A:69:98:21:4D:0D:F2:6B:D9:6F:BC:AA:42:51:08:4E:DF
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/_T9RCmmYIU0N8mvZb7yqQlEITt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.107.0/24
89.35.204.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:70:c3:19:4c:2c:a2:86:f9:37:a6:b8:e1:e8:9a:da:15:dd:
16:4c:b1:95:2e:f5:b8:ae:74:bd:bb:c5:01:77:fc:ad:17:53:
ae:3c:3d:2e:69:3c:10:e8:02:4d:51:dd:aa:e8:7c:7e:25:5d:
f0:c9:2a:4b:c5:2d:61:24:77:57:2f:f5:ba:fd:d4:9c:83:b8:
22:b2:d1:42:29:1c:3b:89:51:ff:3d:fc:bb:b0:17:37:af:99:
33:ec:db:3c:01:ae:aa:d2:f0:4d:8e:96:34:bf:7e:11:f3:8c:
98:71:fd:28:19:98:b2:f4:3b:ea:e8:5f:cd:94:54:6d:12:91:
49:29:7a:a5:52:66:ca:fa:39:6e:8c:32:af:6b:5b:7e:56:c8:
97:61:ea:54:f3:ce:fa:5b:62:ab:85:88:b3:f9:f6:c3:5a:4e:
ff:ef:22:a6:38:01:7a:1d:0a:21:83:17:00:7f:02:79:8e:f1:
7b:68:20:8e:63:c6:72:b3:4d:e4:42:76:5a:c9:af:1f:ea:31:
f1:dc:1b:bd:ca:2e:a7:d8:86:9d:80:35:f2:82:93:99:9a:6f:
06:4e:20:a4:1e:b2:7a:cc:46:6a:e8:4f:96:7d:f5:2e:f1:18:
65:92:53:3c:08:30:82:f6:5d:52:d6:e8:9b:83:38:79:cd:db:
aa:73:59:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:42 2025 by rpki-client