Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/eLESDUYoBzNd4AV1MNFdt_2ZUOA.roa
File: eLESDUYoBzNd4AV1MNFdt_2ZUOA.roa (raw, json)
Hash identifier: KTB42v5sDGot7BndJyzQIN5RE25pw1sgppHqPRYp0RI=
Subject key identifier: 78:B1:12:0D:46:28:07:33:5D:E0:05:75:30:D1:5D:B7:FD:99:50:E0
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018B380BE8922A9FD4709ACA7D31FA0ABA13
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/eLESDUYoBzNd4AV1MNFdt_2ZUOA.roa
Signing time: Mon 16 Oct 2023 10:33:06 +0000
ROA not before: Mon 16 Oct 2023 10:33:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216159
IP address blocks: 89.213.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:38:0b:e8:92:2a:9f:d4:70:9a:ca:7d:31:fa:0a:ba:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 16 10:33:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78b1120d462807335de0057530d15db7fd9950e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:10:d6:76:51:de:d2:6b:b5:fd:ec:ff:d5:9d:
f3:e4:2d:b1:01:e4:29:9e:ec:be:fa:e6:88:f1:27:
6a:74:68:79:8e:5c:31:b0:89:0c:6c:a8:ec:db:b4:
42:7c:89:e2:3e:4c:fd:3f:61:f7:7a:92:d4:33:1a:
56:94:4a:89:b8:53:c8:3f:ec:87:a4:77:64:9e:42:
9d:90:45:ed:05:23:30:e0:3b:15:55:ff:a2:6e:d9:
21:45:00:4f:d3:09:ac:71:cb:68:ae:2d:83:31:1e:
e9:5a:1d:62:7b:7d:9d:c4:d6:1c:54:23:7f:aa:72:
34:a8:3d:30:a0:e8:ab:15:66:78:51:8c:c8:86:36:
6b:61:8b:8f:0b:8c:55:67:59:17:fa:b8:b4:db:9d:
a3:db:65:6c:29:94:f7:d6:5d:0b:89:06:7c:19:49:
f7:83:ec:25:fb:25:9a:00:eb:f7:64:f5:59:27:d9:
06:72:57:ec:4d:af:a2:10:31:08:12:86:71:5f:5e:
d4:b3:8f:a4:01:b2:99:4f:c0:9b:26:c3:c8:a3:45:
6f:56:d2:e4:90:93:fa:ff:8d:de:63:39:dc:e2:ee:
fd:d4:5d:4d:aa:c8:ec:dc:34:f6:e5:f0:cd:02:c3:
db:b2:cf:da:1c:c5:00:1d:0f:67:55:3a:99:6f:78:
95:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B1:12:0D:46:28:07:33:5D:E0:05:75:30:D1:5D:B7:FD:99:50:E0
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/eLESDUYoBzNd4AV1MNFdt_2ZUOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.147.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:db:5c:77:85:0b:fa:27:18:ba:fa:7a:34:05:67:d0:ff:79:
60:f9:70:c4:d0:0f:5e:b7:58:5d:4a:fc:66:07:41:54:91:67:
30:e3:8f:83:c5:ae:62:c4:d3:76:df:0a:0b:5a:a8:43:c8:5e:
5e:19:65:b8:c1:2a:07:0a:f5:2e:21:8d:93:df:3e:67:fb:02:
25:44:28:dd:4f:63:5b:fc:9a:96:ed:c5:e8:67:3c:c1:cb:2a:
6a:46:ef:44:78:e8:4d:56:07:57:81:90:a8:32:2c:3d:d1:e2:
c9:cd:c7:c4:9e:e8:9f:6b:ce:30:47:ef:a7:0f:77:45:51:ea:
30:04:44:92:3e:45:cf:84:7f:80:b0:3d:01:e2:15:7a:7c:56:
26:20:3d:54:21:6e:cc:e5:69:ee:31:ec:8e:4f:1b:36:6d:14:
16:6d:e6:3f:06:a0:b3:39:ab:b6:36:02:f3:c6:24:7a:67:56:
56:74:6f:a6:4c:a3:10:36:ac:44:39:17:b0:b6:2a:b0:16:39:
0b:e0:a1:8d:7a:cd:4a:a7:be:5e:5c:41:16:4c:a7:c2:4d:16:
7c:b7:b4:39:2c:4f:de:14:77:99:b7:63:c3:69:98:9c:5c:b3:
f8:d8:6e:99:52:7b:da:b8:27:dc:16:85:c8:14:56:37:e5:95:
05:8f:6a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:12:17 2025 by rpki-client