Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/TJnkt-lHplFCPy9CuMKA7u3W20U.roa
File: TJnkt-lHplFCPy9CuMKA7u3W20U.roa (raw, json)
Hash identifier: f718IMH3jkFDyNFi8dt2BgdIRSglg+oeoIu8TjkmxWc=
Subject key identifier: 4C:99:E4:B7:E9:47:A6:51:42:3F:2F:42:B8:C2:80:EE:ED:D6:DB:45
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018A644430434B5D9CB5B8F9EC89E4D39D13
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/TJnkt-lHplFCPy9CuMKA7u3W20U.roa
Signing time: Tue 05 Sep 2023 07:35:04 +0000
ROA not before: Tue 05 Sep 2023 07:35:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 265919
IP address blocks: 89.213.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:64:44:30:43:4b:5d:9c:b5:b8:f9:ec:89:e4:d3:9d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 5 07:35:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c99e4b7e947a651423f2f42b8c280eeedd6db45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:87:36:d9:35:46:05:7e:6f:b0:84:2e:87:55:
9d:57:27:40:86:00:63:2f:4e:ba:ee:ae:a2:29:82:
1c:95:da:93:46:41:b6:f9:08:d6:e8:71:e5:68:3c:
53:3a:53:58:ac:f4:5d:09:b1:82:47:e1:82:9f:03:
c8:3b:de:e7:d0:e5:13:ed:30:b3:8e:b4:c9:bc:2b:
1d:0f:cd:24:4f:cb:d2:e2:1c:0d:3a:56:50:46:d3:
18:67:f7:ff:5b:fa:48:a7:b0:7c:0c:e4:b7:78:97:
b0:f6:41:be:c4:05:76:e3:d2:64:72:4e:aa:c4:ac:
89:b4:53:fd:07:b1:c7:41:d1:b9:9f:32:a2:25:b7:
8d:53:80:5e:cf:37:88:7c:31:ff:61:20:01:67:f4:
50:a6:ae:1c:98:ce:e2:6e:6f:98:65:57:91:7a:b9:
37:85:c4:b1:76:de:28:aa:c6:2b:1f:7e:e5:dd:51:
a7:31:4e:ee:46:c4:7b:cd:1a:69:7a:a0:c6:35:e7:
14:df:bc:69:49:46:1c:50:c0:b6:d7:b1:c2:03:75:
3d:d8:47:33:d0:3f:4c:32:81:ea:24:45:03:6a:9d:
5f:d4:dd:98:83:44:65:f1:1c:d3:8e:67:bc:d9:aa:
e1:c4:2d:5f:43:3a:33:92:7b:98:e8:fa:d3:5c:dc:
df:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:99:E4:B7:E9:47:A6:51:42:3F:2F:42:B8:C2:80:EE:ED:D6:DB:45
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/TJnkt-lHplFCPy9CuMKA7u3W20U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.5.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:8c:98:07:ce:90:92:49:c0:27:86:24:e7:41:5b:3f:dd:9f:
2d:6b:45:90:81:9d:f4:cb:ca:3b:99:13:48:1c:19:0f:7a:ce:
93:30:5e:d5:2f:71:45:97:c6:53:41:ff:3b:6a:d9:ef:c2:e6:
49:70:b1:f2:1f:d9:0a:d3:9c:45:ba:7d:b5:a1:56:a1:3b:0e:
20:fe:04:2d:b7:b6:34:c1:d1:4b:64:59:dd:5a:7a:5a:9e:18:
ce:03:d0:fe:f8:7a:7e:9f:cb:66:4b:dd:ea:3e:55:fd:dd:32:
75:f8:d0:b1:b1:0c:34:91:a7:ac:92:21:e2:b2:b2:28:23:86:
4f:7d:43:9a:a2:6b:b4:45:86:61:72:4c:df:4c:47:43:af:30:
c6:0e:8a:44:56:b0:42:64:87:8e:d4:57:c4:92:64:fd:65:03:
fe:3b:2b:11:a7:0f:fa:23:70:f7:1f:e4:0a:04:2c:b9:55:8e:
93:3a:4f:95:ed:ca:d8:2a:9a:81:1c:9d:f6:d0:50:0c:75:bc:
1a:b0:32:df:cc:ee:71:a7:50:da:61:3d:62:16:99:d6:d7:4d:
cc:67:49:b0:cb:53:a5:5f:34:fb:b0:54:3e:75:27:8e:15:b2:
7f:3b:1a:22:b1:e7:22:5a:73:4e:31:f7:15:f3:b5:43:6e:a7:
04:19:86:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:21:14 2025 by rpki-client