Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/j0FGaRDNUgUmveXvDjrSN5w8eKA.roa
File: j0FGaRDNUgUmveXvDjrSN5w8eKA.roa (raw, json)
Hash identifier: iDHG/QpVf3tNX943b1nHdI8TJ9Uv/x7SVsj+seEEhzE=
Subject key identifier: 8F:41:46:69:10:CD:52:05:26:BD:E5:EF:0E:3A:D2:37:9C:3C:78:A0
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018C8BE39A1FBC3164AECA99D52C0A75AB35
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/j0FGaRDNUgUmveXvDjrSN5w8eKA.roa
Signing time: Thu 21 Dec 2023 10:19:58 +0000
ROA not before: Thu 21 Dec 2023 10:19:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57974
IP address blocks: 89.213.181.0/24 maxlen: 24
89.213.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8b:e3:9a:1f:bc:31:64:ae:ca:99:d5:2c:0a:75:ab:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Dec 21 10:19:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f41466910cd520526bde5ef0e3ad2379c3c78a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a0:33:62:4d:cc:15:97:04:74:c2:02:78:c5:
02:bd:0c:00:f1:42:2b:52:31:dc:e7:68:47:99:49:
51:3f:20:85:5c:77:36:f2:a3:7e:30:c7:b5:86:df:
b2:5f:02:32:f7:c0:18:69:f5:49:1a:65:2a:c6:a8:
22:22:0a:62:c6:ee:40:0e:69:21:d6:9e:9b:f1:d2:
32:f8:b5:75:67:8b:e1:c9:2b:49:d6:ec:ed:25:ab:
7c:ff:49:37:bf:c6:d3:d4:2a:95:b2:0c:e3:43:e3:
76:c2:62:9f:86:73:f1:46:58:e0:a5:fb:c2:7b:d6:
98:26:3a:8b:10:cd:69:08:6a:43:39:f1:4d:2d:ef:
eb:ed:0c:b2:84:b8:a8:2b:b6:4c:4e:0d:7c:60:ca:
05:93:cf:7c:7f:b5:b2:44:2d:6f:6a:13:65:a4:ae:
83:01:30:7d:56:b1:b8:ca:d7:88:24:0d:0f:13:e2:
6b:29:0f:35:f5:e0:e3:dd:31:47:8a:23:73:9b:f6:
c6:b9:bc:55:23:60:cf:b7:01:c5:9b:ac:dd:e7:0b:
74:8e:b1:14:f4:d0:98:9c:7d:9d:b9:1d:c2:1f:09:
c4:8c:32:8a:60:29:48:7d:c0:15:bc:f3:c0:4a:a1:
a8:a1:4f:4c:c8:0e:e2:b4:ad:cd:57:0e:14:88:68:
89:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:41:46:69:10:CD:52:05:26:BD:E5:EF:0E:3A:D2:37:9C:3C:78:A0
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/j0FGaRDNUgUmveXvDjrSN5w8eKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.147.0/24
89.213.181.0/24
Signature Algorithm: sha256WithRSAEncryption
15:ac:ca:25:e7:65:9a:3b:f9:be:28:3d:f8:f7:1d:69:2d:65:
41:d7:26:ae:a7:62:b3:69:13:e3:b6:eb:da:d7:f4:7a:3f:fe:
bd:8c:7a:84:f5:01:4e:61:c5:22:0d:85:54:ea:2e:b9:ae:48:
48:9b:c0:c2:78:3d:d9:63:36:39:79:9d:95:7b:17:94:c8:ec:
da:6f:05:78:1a:4c:33:f9:88:20:15:80:75:63:7a:d3:22:80:
ac:33:33:43:8e:2a:67:c5:39:fd:37:a9:e7:5e:2c:4c:d4:69:
97:aa:7c:d1:90:0c:6c:79:8e:27:ac:0f:8a:ee:59:2c:d3:ae:
8c:21:06:f6:e7:60:85:d6:77:43:40:65:ca:c2:7b:b2:ce:1c:
19:b0:11:6d:75:57:32:e5:4e:22:26:0f:66:21:16:94:60:2d:
ae:07:13:61:5d:db:54:5c:32:22:32:43:d4:24:43:7f:a4:d2:
49:4c:65:e0:1b:5c:7f:4f:d9:bf:f1:17:55:31:ef:62:7b:40:
78:d7:36:81:b2:80:01:5c:d0:eb:38:eb:85:ad:89:8a:a5:84:
ca:ad:58:e9:4f:b4:91:18:31:34:93:70:e0:c7:f9:1b:0a:50:
13:a2:20:dc:73:10:a7:85:58:d5:70:11:44:08:ef:3e:13:a2:
67:eb:b0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:18:40 2025 by rpki-client