Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/kXkNYW-l6ngnWwMrRXSIZfymuxc.roa
File: kXkNYW-l6ngnWwMrRXSIZfymuxc.roa (raw, json)
Hash identifier: P+6u4evf5AJseVUnLzChUcQJ00eJJoX4FpJnoGcALH4=
Subject key identifier: 91:79:0D:61:6F:A5:EA:78:27:5B:03:2B:45:74:88:65:FC:A6:BB:17
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 01856E41E4EFCD7641369C5E7A11599D0425
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/kXkNYW-l6ngnWwMrRXSIZfymuxc.roa
Signing time: Sun 01 Jan 2023 16:54:50 +0000
ROA not before: Sun 01 Jan 2023 16:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207752
IP address blocks: 89.44.141.0/24 maxlen: 24
89.44.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:41:e4:ef:cd:76:41:36:9c:5e:7a:11:59:9d:04:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 16:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91790d616fa5ea78275b032b45748865fca6bb17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:83:3a:6e:78:d3:57:8a:34:5b:7e:83:70:4d:
19:f7:3b:a4:72:e8:91:eb:9b:5f:3f:f6:fb:ad:f8:
90:4b:a6:64:63:69:e5:90:e8:45:fc:26:85:5a:f5:
bc:d4:14:7b:d9:7d:9d:29:3d:01:ea:dc:78:21:fc:
66:f9:4f:36:97:9c:c2:32:f2:60:e9:eb:97:30:93:
9a:65:1a:1f:79:4f:af:43:af:b6:5b:9d:0f:6d:89:
4a:ce:d1:63:c2:85:52:2f:f7:b6:ac:3a:59:94:a2:
1a:0d:a3:4d:f3:0f:b0:90:46:1d:12:d1:32:f2:65:
1b:a5:ba:ad:fc:55:95:e7:40:4c:14:ec:ff:ad:26:
c0:91:31:fd:36:b6:64:f7:a0:bc:a6:cb:ce:3f:f8:
ed:eb:28:e4:7c:18:75:49:c9:a3:d2:43:fb:47:f4:
c8:a8:6b:fc:f4:19:dc:13:b3:6d:c7:b1:92:75:f7:
73:12:c5:8d:04:da:22:d9:ec:2f:7c:e8:d4:7f:bf:
43:fc:42:b3:ea:e4:8f:47:f8:c5:9d:e8:9c:9e:5c:
02:5d:9a:d2:a3:b9:4d:4a:7a:c8:0b:07:23:11:72:
90:90:a6:e7:85:8c:0c:8e:cf:37:2a:4a:be:62:fb:
ce:b1:89:e3:9a:b4:f2:3b:7d:40:02:21:d7:b2:cf:
a2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:79:0D:61:6F:A5:EA:78:27:5B:03:2B:45:74:88:65:FC:A6:BB:17
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/kXkNYW-l6ngnWwMrRXSIZfymuxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.140.0/23
Signature Algorithm: sha256WithRSAEncryption
75:c6:4c:90:23:8a:57:e4:af:e0:78:dc:21:5d:ce:95:ea:b8:
13:12:db:fc:eb:74:02:d4:90:b8:80:bc:00:d4:ee:6b:74:0d:
fe:38:a8:81:ef:c7:62:db:a7:7f:15:d0:4a:45:a5:51:87:b6:
02:2a:1e:88:91:49:92:28:c8:b7:76:8d:e6:95:42:70:41:04:
d0:ad:1f:9d:54:83:a7:2b:da:0f:6c:ce:0e:c3:00:92:df:7a:
33:ef:16:6a:bc:0d:1e:41:b1:d2:77:20:a3:48:a6:8f:21:74:
f7:50:85:08:8b:08:10:af:ca:2b:e4:c1:5d:5e:e7:b8:20:ee:
41:13:8a:2f:fa:6d:98:65:82:aa:a9:5d:54:79:3f:50:85:90:
46:ac:d2:95:22:7d:54:6b:d9:e2:d0:f5:bc:24:98:3a:3f:f4:
16:42:20:7c:94:6a:62:37:fb:c2:f2:58:aa:51:96:3a:1e:34:
3c:59:8a:a8:d7:af:56:09:d1:33:1e:99:77:28:c3:49:ae:d5:
c1:62:7d:e3:64:75:92:e2:aa:60:a0:61:e7:22:76:f7:c7:76:
8f:20:ab:fe:4d:5b:e9:de:b0:dd:55:bb:4f:aa:a5:11:8c:ce:
f7:14:9c:04:65:ec:8c:ac:04:72:7a:85:83:94:d8:08:19:b4:
9a:c1:bc:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:46 2025 by rpki-client