Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1--qeeTCMmdz56LIWkWmS2vSFddY.roa
File: 1--qeeTCMmdz56LIWkWmS2vSFddY.roa (raw, json)
Hash identifier: YuHY/NISCuupTwODdexqbmVAx5z8hGoxoVpQs2YkuWE=
Subject key identifier: FB:EA:9E:79:30:8C:99:DC:F9:E8:B2:16:91:69:92:DA:F4:85:75:D6
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018B380BE843EAEA079AF0C52A3C9D7A98A8
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1--qeeTCMmdz56LIWkWmS2vSFddY.roa
Signing time: Mon 16 Oct 2023 10:33:06 +0000
ROA not before: Mon 16 Oct 2023 10:33:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212815
IP address blocks: 89.213.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:38:0b:e8:43:ea:ea:07:9a:f0:c5:2a:3c:9d:7a:98:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 16 10:33:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fbea9e79308c99dcf9e8b216916992daf48575d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2c:37:9d:c8:53:65:cf:2b:03:27:d9:a4:56:
d4:fc:42:8d:d9:ba:f7:a7:ab:bb:cf:de:a3:82:31:
19:91:3a:fd:2d:cb:25:0c:6b:17:0c:87:bf:90:bb:
38:9f:fd:b9:0a:d1:f4:06:92:2c:54:c6:0d:3e:f6:
86:e9:fa:56:17:1e:2c:9a:36:09:71:e7:c8:a4:31:
54:de:ae:18:c4:43:d8:31:58:2b:b7:1d:d1:a4:ff:
83:43:77:0b:91:70:59:58:58:18:5a:36:82:f4:00:
cb:95:c1:22:a8:8f:1a:14:9c:3c:2b:4e:9b:39:be:
b9:25:97:69:23:09:6d:66:fe:68:5e:b4:5f:95:94:
98:7b:a3:9a:41:25:6e:38:52:f0:94:ce:18:54:21:
a6:9c:51:3f:a9:d1:42:f8:e0:dd:f6:f6:df:2b:4a:
a6:26:ed:c0:0b:db:09:d4:32:50:07:47:0d:a4:54:
0e:11:2d:a4:ac:0c:53:23:8b:23:e7:ae:96:95:6f:
51:d9:ae:f0:8d:ba:1c:58:6c:94:a1:cd:c2:92:9f:
aa:92:88:d8:00:9b:52:ac:33:cc:46:06:4e:37:77:
be:81:cd:6f:78:1e:6c:aa:93:e1:07:b2:94:ca:11:
e7:d0:79:48:e9:a4:74:40:91:26:c2:c8:45:87:8b:
57:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:EA:9E:79:30:8C:99:DC:F9:E8:B2:16:91:69:92:DA:F4:85:75:D6
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1--qeeTCMmdz56LIWkWmS2vSFddY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.147.0/24
Signature Algorithm: sha256WithRSAEncryption
98:36:84:9b:78:f2:e8:ab:ff:54:a9:85:28:fd:6e:76:b0:44:
38:e0:fa:c3:c5:0c:b6:5e:46:fd:c3:c9:eb:12:82:63:4c:f0:
bd:6c:16:09:ce:88:f2:62:41:eb:bd:48:6d:1e:0f:22:58:56:
b5:8d:a4:aa:fe:0d:bd:a7:25:bd:db:5b:20:a5:2c:71:71:12:
64:8a:09:b9:0b:35:8b:8b:f4:b0:dc:d4:c7:43:fb:41:c7:12:
f5:f3:4e:98:91:2a:93:ee:10:a0:4c:6f:67:4c:7e:76:39:99:
c3:ff:51:bf:d7:e7:21:97:1f:b2:df:19:0d:60:ae:eb:3e:f3:
72:1d:02:9b:6a:0f:c6:c8:10:d5:25:ae:79:0c:87:08:40:0b:
ef:25:65:5c:4d:dc:91:7e:9e:f7:c3:ee:bf:f5:bb:9a:57:fa:
f1:38:59:f8:9b:f7:cf:73:11:a7:9d:0a:a8:ae:6e:ff:77:a7:
72:e3:75:46:ef:e9:37:9f:6c:b7:1b:14:74:75:29:ff:be:10:
94:52:69:0f:51:17:b3:bc:12:ae:4d:7b:ae:f5:4c:ea:b6:ae:
09:9c:6e:6d:89:c4:08:d3:1b:f4:29:9c:e1:e6:1d:b8:aa:76:
82:c3:51:3e:ca:02:d8:90:99:b0:8f:eb:15:f7:69:60:3c:bf:
ea:1e:4d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:33:28 2025 by rpki-client