Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Ys9_aZrhaVUVcDgqSrsh8bzw5ww.roa
File: Ys9_aZrhaVUVcDgqSrsh8bzw5ww.roa (raw, json)
Hash identifier: OFXCeh+iKXhDC28/O/fr5DAie53tPHQEgMGOzreUQrA=
Subject key identifier: 62:CF:7F:69:9A:E1:69:55:15:70:38:2A:4A:BB:21:F1:BC:F0:E7:0C
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018C7C677DFF7467B13FA21B6D2B4F4CACDD
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Ys9_aZrhaVUVcDgqSrsh8bzw5ww.roa
Signing time: Mon 18 Dec 2023 10:10:06 +0000
ROA not before: Mon 18 Dec 2023 10:10:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58955
IP address blocks: 89.213.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7c:67:7d:ff:74:67:b1:3f:a2:1b:6d:2b:4f:4c:ac:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Dec 18 10:10:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62cf7f699ae169551570382a4abb21f1bcf0e70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2d:2d:52:1b:11:49:12:27:69:ab:4f:82:20:
20:bb:25:e2:e0:72:87:d0:83:e2:28:c1:58:ed:03:
a2:39:7b:ca:29:52:77:c1:81:82:62:cf:81:60:60:
e6:68:71:3e:a6:b3:67:53:ca:d0:d8:41:20:bc:4b:
50:68:fb:4b:a7:98:c0:0b:0d:6b:0f:3b:c3:c8:c8:
c8:d0:13:48:99:0c:ef:a7:78:97:82:3e:76:3c:27:
eb:b3:19:bc:61:56:59:d6:c0:31:e3:39:04:b5:cd:
0e:5a:51:3e:e0:40:9c:b6:bb:81:ea:7f:e2:5d:a8:
31:9a:8c:89:3f:f6:40:1d:b4:4b:e7:55:f2:c1:a3:
3d:fe:13:95:28:01:32:49:d5:5b:a2:6b:54:d6:3d:
60:2b:09:0d:6a:87:14:90:63:6a:68:8d:19:7b:99:
c1:30:8c:7f:30:c3:69:e4:69:74:7c:c3:5e:d6:a7:
76:77:f1:e5:b3:3a:b7:bc:8f:e3:21:0b:2d:eb:96:
66:8b:ad:02:c1:78:06:1d:17:92:4a:ef:c6:a0:fa:
bf:b0:a0:8b:cd:b5:58:a5:94:23:e1:dd:84:cb:aa:
fa:9c:9d:a2:4e:b8:df:f4:ef:4f:a9:98:ec:fc:cd:
19:01:cd:4c:ef:2a:ff:fb:16:a4:34:69:ba:0f:87:
95:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CF:7F:69:9A:E1:69:55:15:70:38:2A:4A:BB:21:F1:BC:F0:E7:0C
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Ys9_aZrhaVUVcDgqSrsh8bzw5ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.177.0/24
Signature Algorithm: sha256WithRSAEncryption
34:d1:30:9a:ef:33:c5:cd:b4:01:06:90:7b:6f:66:8b:c6:65:
15:2f:c7:b6:98:8c:0d:a3:a8:4c:d4:97:bd:87:05:1f:b6:4d:
1c:37:70:42:81:32:3b:01:b0:42:df:8b:51:af:b4:e0:9d:45:
0a:fa:20:f4:b1:2b:a4:23:3d:99:59:5c:65:2b:2d:58:a2:97:
b3:68:d5:97:c9:d8:fd:cd:92:39:96:ab:e3:7f:0f:47:7d:4e:
e0:9d:54:8d:ff:21:f9:02:03:66:14:2a:7e:13:22:0c:86:f7:
f2:d8:e7:ed:ed:76:d8:9f:61:5d:45:04:a8:d8:96:ab:aa:de:
e2:45:49:29:16:27:2c:4b:5b:1b:2f:58:ef:73:5e:1d:c7:37:
df:d8:c3:c6:86:2e:8c:77:11:77:ec:e1:45:d1:45:f8:37:9e:
84:d7:df:d6:c9:03:85:52:ab:63:4b:67:e7:35:8d:14:52:32:
04:df:0b:27:b5:fc:3d:c5:59:2e:0e:a4:a5:7c:34:00:f4:f1:
bf:f4:21:28:93:c7:c4:46:b6:8c:aa:df:04:6a:78:13:0f:02:
4a:ab:c6:9e:67:54:65:be:6d:87:2a:b8:6f:1f:ae:95:8d:b4:
6e:15:68:1e:2d:ed:62:35:a0:1b:19:e4:56:72:72:67:40:54:
69:35:c6:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYx8Z33/dGexP6IbbStPTKzdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjMxMjE4MTAxMDA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MmNmN2Y2OTlhZTE2OTU1MTU3MDM4MmE0YWJiMjFmMWJjZjBlNzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAty0tUhsRSRInaatPgiAguyXi4HKH
0IPiKMFY7QOiOXvKKVJ3wYGCYs+BYGDmaHE+prNnU8rQ2EEgvEtQaPtLp5jACw1r
DzvDyMjI0BNImQzvp3iXgj52PCfrsxm8YVZZ1sAx4zkEtc0OWlE+4ECctruB6n/i
XagxmoyJP/ZAHbRL51XywaM9/hOVKAEySdVbomtU1j1gKwkNaocUkGNqaI0Ze5nB
MIx/MMNp5Gl0fMNe1qd2d/Hlszq3vI/jIQst65Zmi60CwXgGHReSSu/GoPq/sKCL
zbVYpZQj4d2Ey6r6nJ2iTrjf9O9PqZjs/M0ZAc1M7yr/+xakNGm6D4eViwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGLPf2ma4WlVFXA4Kkq7IfG88OcMMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvWXM5X2FacmhhVlVWY0RncVNyc2g4Ynp3NXd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWdWxMA0G
CSqGSIb3DQEBCwUAA4IBAQA00TCa7zPFzbQBBpB7b2aLxmUVL8e2mIwNo6hM1Je9
hwUftk0cN3BCgTI7AbBC34tRr7TgnUUK+iD0sSukIz2ZWVxlKy1YopezaNWXydj9
zZI5lqvjfw9HfU7gnVSN/yH5AgNmFCp+EyIMhvfy2Oft7XbYn2FdRQSo2Jarqt7i
RUkpFicsS1sbL1jvc14dxzff2MPGhi6MdxF37OFF0UX4N56E19/WyQOFUqtjS2fn
NY0UUjIE3wsntfw9xVkuDqSlfDQA9PG/9CEok8fERraMqt8EangTDwJKq8aeZ1Rl
vm2HKrhvH66VjbRuFWgeLe1iNaAbGeRWcnJnQFRpNcaW
-----END CERTIFICATE-----
Generated at Wed Apr 9 13:11:15 2025 by rpki-client