Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/psfA3Z8RC3F77SqGvdLr4o3Ad9Q.roa
File: psfA3Z8RC3F77SqGvdLr4o3Ad9Q.roa (raw, json)
Hash identifier: 3VWqjn+59AWVCj4op5bUzpxNkgQOhbR9lUrNEcAfpac=
Subject key identifier: A6:C7:C0:DD:9F:11:0B:71:7B:ED:2A:86:BD:D2:EB:E2:8D:C0:77:D4
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018B943F45D59C2EE2C7F57B3553B57FDFC8
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/psfA3Z8RC3F77SqGvdLr4o3Ad9Q.roa
Signing time: Fri 03 Nov 2023 08:14:16 +0000
ROA not before: Fri 03 Nov 2023 08:14:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 109.176.245.0/24 maxlen: 24
89.213.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:94:3f:45:d5:9c:2e:e2:c7:f5:7b:35:53:b5:7f:df:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 3 08:14:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6c7c0dd9f110b717bed2a86bdd2ebe28dc077d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:67:74:b6:66:61:cd:db:0b:88:46:d3:9e:35:
92:63:99:36:bb:b5:9e:ae:6c:2b:e6:a8:ae:32:6f:
f0:e9:32:8b:59:62:a2:99:9c:e4:84:15:7b:48:55:
78:61:26:c5:e9:31:ba:c2:44:ec:60:a2:80:ba:e7:
7a:64:76:e1:86:0e:91:2a:1d:13:4c:6f:99:3a:98:
1d:b5:f0:88:47:99:6d:bb:c4:d8:1f:32:06:83:9c:
9b:21:75:d0:76:37:31:8c:ba:6d:46:4a:61:b5:cd:
f1:3e:56:93:e7:36:1f:4b:c1:16:1b:d9:a8:a3:e5:
b4:d5:12:54:32:6f:f1:28:94:04:e9:86:5d:bf:8f:
f7:61:41:0f:a5:e9:fd:1a:e0:fa:fc:cd:1b:52:67:
a1:d8:c9:38:42:c8:af:35:db:56:eb:34:02:81:f1:
bc:57:f7:e2:86:5c:31:88:d7:57:e7:87:46:6d:02:
94:28:7c:68:a5:7c:04:5d:74:a1:0f:e6:2b:d8:68:
28:04:31:42:f4:6c:4d:fa:b9:10:b1:ae:72:53:f5:
3d:55:5b:ac:3f:1b:19:d7:14:c1:8a:59:02:40:c7:
be:20:3f:e7:1e:6f:4c:fe:84:49:e9:5b:1e:5f:a2:
24:17:08:a2:9c:54:e7:79:f4:e9:05:34:11:74:40:
38:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C7:C0:DD:9F:11:0B:71:7B:ED:2A:86:BD:D2:EB:E2:8D:C0:77:D4
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/psfA3Z8RC3F77SqGvdLr4o3Ad9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.157.0/24
109.176.245.0/24
Signature Algorithm: sha256WithRSAEncryption
69:e7:80:12:59:6e:1b:b7:0e:c7:b5:bc:d5:71:b3:15:69:7d:
50:c1:c3:d7:7d:fa:1f:e7:7d:94:cf:ad:bc:44:af:11:31:b4:
21:63:aa:b6:23:02:c8:62:84:24:e6:84:4e:a5:23:bc:ed:b6:
5c:06:96:6c:60:a4:9d:44:83:d8:5e:ed:82:09:37:5e:05:59:
4c:f0:44:13:6a:ef:38:19:5f:5d:2d:18:dd:d6:cb:20:59:6a:
7e:6e:30:ec:ed:d2:bc:3d:b0:3e:c4:c5:97:3d:88:e2:25:89:
00:e5:55:79:11:05:be:12:5d:99:b4:1d:fa:f8:1d:59:da:e4:
75:78:0b:1f:30:b3:ec:2e:04:ec:0e:87:49:32:0f:b0:72:03:
bc:13:b0:4e:7c:4a:e1:7e:89:48:ff:c7:f5:e9:77:54:82:2a:
e8:50:2a:dd:99:9d:12:ea:48:0e:61:c3:f1:b8:28:07:fa:b9:
8c:cb:03:fc:76:d2:2c:a6:fc:e8:16:b9:01:1d:2e:25:ed:b5:
f0:5f:44:1c:89:46:9d:52:7b:01:5a:53:b3:f3:02:78:2b:13:
5b:71:cf:af:91:3c:ff:3d:88:c3:60:49:22:7f:09:ba:d0:42:
c8:ee:ef:2f:b6:13:8e:54:f1:c3:fd:3d:a6:c1:ba:f9:97:83:
dc:24:17:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:09:02 2025 by rpki-client