Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MvgFCN6YiiJkHUco521927flwtw.roa
File: MvgFCN6YiiJkHUco521927flwtw.roa (raw, json)
Hash identifier: jADZ5DoEORTD/o2xKVUK95g5VtNtk3CDeJpgjH5mERo=
Subject key identifier: 32:F8:05:08:DE:98:8A:22:64:1D:47:28:E7:6D:7D:DB:B7:E5:C2:DC
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018B3E66CE9B5989E78D0A9C0FC308ECA3B4
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MvgFCN6YiiJkHUco521927flwtw.roa
Signing time: Tue 17 Oct 2023 16:10:06 +0000
ROA not before: Tue 17 Oct 2023 16:10:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 271842
IP address blocks: 89.213.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3e:66:ce:9b:59:89:e7:8d:0a:9c:0f:c3:08:ec:a3:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 17 16:10:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32f80508de988a22641d4728e76d7ddbb7e5c2dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:50:80:5d:f5:6d:a7:76:2c:b4:40:f0:b9:6f:
c8:c6:b6:31:ac:36:a8:96:ce:c4:3a:b6:c4:94:1d:
c6:45:7a:2d:c3:32:71:e7:4f:29:15:82:32:30:57:
25:77:24:38:f5:20:d1:7d:4b:92:b1:12:57:f9:28:
ac:9e:f0:db:9e:e5:df:95:1d:15:b1:0e:a9:89:7d:
1f:a3:1f:db:be:b1:d9:a8:d9:68:49:e6:9c:82:6e:
e1:c5:d8:d4:e9:a2:a2:c3:e9:46:8b:4b:be:cd:e0:
68:fe:35:fb:b4:33:7c:fa:fc:16:96:a7:1e:c2:be:
35:97:81:ce:5a:87:7d:bc:e1:26:1c:79:92:86:04:
51:9f:9c:cf:02:a6:9f:87:44:d2:08:65:7c:c1:2b:
24:fb:15:31:bc:b9:b9:62:0a:ab:c8:56:2c:ed:dc:
8f:2e:7b:6f:83:1e:6f:b2:ca:96:17:ef:98:d8:15:
55:e8:72:d5:37:a2:5c:0e:fc:ff:ca:cd:5d:e2:2a:
1f:14:e8:9c:03:b1:e2:15:1d:60:19:48:06:60:0d:
27:c7:44:1b:49:0f:47:5f:20:7c:92:66:de:ad:f2:
38:68:ad:1c:0b:19:59:1f:08:76:87:5b:a6:82:fe:
43:a0:47:7b:2e:8a:74:1c:30:0e:bc:e0:f4:86:a5:
28:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F8:05:08:DE:98:8A:22:64:1D:47:28:E7:6D:7D:DB:B7:E5:C2:DC
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MvgFCN6YiiJkHUco521927flwtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.159.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:60:e0:63:7d:98:0e:9a:c3:1f:cb:84:36:98:a5:bb:f9:de:
4c:d7:ef:b6:7c:89:dd:bf:ac:55:f2:98:4b:8a:3a:50:ef:1c:
1f:79:99:d6:d0:f0:13:ec:38:bf:a7:a2:0c:48:70:02:3f:3c:
bf:b6:cd:20:ba:e3:a6:f4:78:6e:76:78:22:93:02:9a:fc:a8:
26:35:e2:3a:75:99:33:ba:6a:47:47:d9:0e:3a:a0:47:ec:0a:
35:94:7d:6c:a1:cc:61:3d:2b:db:72:f6:a0:32:2f:c7:fc:63:
1d:70:f4:03:90:89:c8:d8:6d:12:a4:78:ab:73:39:a8:23:78:
1a:fd:ec:20:6c:db:12:3c:2f:bf:14:0e:89:a2:b3:14:01:6d:
2b:79:6b:22:af:f1:ab:42:6a:73:3f:91:2b:2a:b8:1a:13:a5:
3e:e9:a2:88:92:2b:d8:46:ad:ef:ab:7f:df:67:42:c2:0b:01:
74:38:3b:f1:bf:24:02:2b:72:b8:87:55:55:2f:69:ef:23:ac:
dc:5a:34:42:03:ce:d4:aa:cf:e4:c2:d6:d7:d4:ca:6b:88:e4:
45:f4:00:58:b1:a4:37:2d:99:34:09:5e:61:38:3d:b2:b2:e1:
51:45:a6:bb:8d:c1:61:b7:39:18:23:6b:d1:69:67:f1:81:f3:
0b:4e:30:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:30:20 2025 by rpki-client