Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/WHga0hF65mfjieaDXm3GHJ15H_o.roa
File: WHga0hF65mfjieaDXm3GHJ15H_o.roa (raw, json)
Hash identifier: kfMgHMooRTwtuvAfybsi0vsCe8YlNoYDIfPZa7ZPMOU=
Subject key identifier: 58:78:1A:D2:11:7A:E6:67:E3:89:E6:83:5E:6D:C6:1C:9D:79:1F:FA
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018BDD1FF824539057A4F453A99EBBD6511C
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/WHga0hF65mfjieaDXm3GHJ15H_o.roa
Signing time: Fri 17 Nov 2023 11:52:21 +0000
ROA not before: Fri 17 Nov 2023 11:52:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216159
IP address blocks: 89.213.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dd:1f:f8:24:53:90:57:a4:f4:53:a9:9e:bb:d6:51:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 17 11:52:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58781ad2117ae667e389e6835e6dc61c9d791ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ff:59:50:5a:07:c1:c9:bb:e2:45:12:5a:85:
f3:e5:63:ea:27:ad:47:d4:77:09:e1:36:cb:8b:b2:
c8:ee:3f:77:da:88:2c:22:38:79:db:32:10:49:aa:
7c:b7:cb:7e:ba:10:ca:06:71:7d:b4:59:71:77:e0:
09:0b:38:c9:88:ec:50:c6:4c:18:d5:0e:56:25:a2:
16:54:6d:61:58:bf:a9:53:46:2c:82:45:fa:9b:6b:
a1:75:48:25:50:48:2b:ee:44:6e:6f:f3:4a:13:38:
62:8e:4a:f9:3e:12:4b:2f:fd:f9:9b:e1:cc:cf:89:
f8:da:ac:70:05:71:49:4f:54:0a:2e:60:f2:6c:d6:
6a:a9:fa:5c:f3:23:49:a1:e0:4e:45:c2:8b:41:84:
34:61:3e:c1:20:90:b2:11:10:d6:7f:fa:4b:ff:7f:
1f:89:c2:90:00:30:e0:f9:7e:36:fe:fb:21:09:7b:
0f:ae:2f:5a:53:9b:d3:7b:b1:f8:0f:73:59:f1:6a:
d7:30:e8:d3:21:87:3a:a3:4b:6a:b3:42:42:c9:fc:
a6:4e:6a:5b:02:3e:61:89:a8:e5:bd:1e:e4:f4:55:
c5:76:a6:ba:8e:c4:75:51:27:bc:fa:2c:1e:de:ed:
81:6f:05:e7:54:8e:1c:05:b7:1b:fc:18:78:0c:55:
03:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:78:1A:D2:11:7A:E6:67:E3:89:E6:83:5E:6D:C6:1C:9D:79:1F:FA
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/WHga0hF65mfjieaDXm3GHJ15H_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.157.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:35:50:56:21:0c:9b:9b:2f:0f:1f:0b:7b:3b:cd:fb:6e:bb:
1b:c5:10:6f:10:05:fd:64:4f:55:66:58:13:6d:91:ce:5d:34:
96:3d:86:84:c8:8b:d9:1e:b7:9d:f8:46:ac:89:40:73:94:02:
6b:65:cf:17:56:01:55:77:c9:5f:9e:0a:1c:43:cb:2f:f6:6a:
a6:f2:9c:c7:f3:92:15:de:87:02:5b:c0:d6:d8:37:64:4e:a1:
85:95:d2:38:f8:b9:c7:76:ef:c3:16:ed:dd:8a:38:96:e4:05:
7b:58:f8:9f:0e:3e:96:03:7e:44:05:1b:a6:2e:8b:96:aa:d0:
7f:78:17:04:61:72:7f:87:e3:f9:17:81:87:75:7c:9b:70:f2:
6f:7c:1d:68:ea:59:ba:20:b4:01:ee:f9:84:cc:fa:18:4a:8d:
06:85:0a:9d:df:0a:86:d4:c7:11:d9:b5:0b:ee:3f:1f:a4:ff:
12:6a:65:1e:b2:76:01:57:6a:a0:b8:bd:08:5d:fb:5d:10:b8:
7a:7c:eb:eb:60:75:97:2a:a3:54:f8:1c:37:8c:36:c9:4f:a0:
c2:3d:2b:81:83:ec:30:8f:28:ee:04:07:06:01:cd:16:54:e0:
5d:91:21:79:23:91:b6:3d:66:27:27:ad:29:64:54:6e:7d:dd:
19:21:16:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:03:20 2025 by rpki-client