Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/J0vzVse90ATBvReL79osBe6QjVo.roa
File: J0vzVse90ATBvReL79osBe6QjVo.roa (raw, json)
Hash identifier: +ZBDbwaWTLXgLIuq43UBuKC1wV06WjO93OBFQYCB2S8=
Subject key identifier: 27:4B:F3:56:C7:BD:D0:04:C1:BD:17:8B:EF:DA:2C:05:EE:90:8D:5A
Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd
Certificate serial: 01856E79033BEAD8D6C4D112E89288754298
Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/J0vzVse90ATBvReL79osBe6QjVo.roa
Signing time: Sun 01 Jan 2023 17:55:02 +0000
ROA not before: Sun 01 Jan 2023 17:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206487
IP address blocks: 89.39.33.0/24 maxlen: 24
89.39.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:79:03:3b:ea:d8:d6:c4:d1:12:e8:92:88:75:42:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd
Validity
Not Before: Jan 1 17:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=274bf356c7bdd004c1bd178befda2c05ee908d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:19:18:da:e8:81:1a:66:55:ef:60:6b:30:e6:
6d:57:85:53:dd:5e:0b:b2:51:9f:51:f0:aa:8e:49:
48:6d:bd:42:da:eb:98:e8:29:f9:f9:78:f2:84:b5:
1b:79:6d:18:03:b4:a2:78:9b:c0:41:da:8c:f5:58:
9c:83:5f:8e:07:43:f8:45:62:13:f8:0a:ac:6c:20:
b6:35:bb:35:97:cf:7c:a8:7b:16:96:31:97:fa:88:
8d:6e:02:77:7e:83:2f:20:88:f1:7f:bb:3c:c3:2b:
14:10:83:a5:6e:17:17:36:cd:40:7b:06:4a:bf:da:
cf:f2:21:96:88:0d:1a:55:53:df:eb:71:0e:0e:d0:
e5:0e:b0:ab:75:e4:9a:52:c2:a4:7a:8b:30:ac:8c:
f4:47:be:90:7b:41:3b:7d:bd:98:48:2c:55:2d:52:
36:91:4b:7c:9b:16:cd:72:84:64:ef:f1:e3:2f:f8:
cd:25:33:df:4c:a5:85:fe:24:7e:8c:1e:e9:ab:f2:
f1:aa:4e:ed:75:d5:0a:a1:13:45:e3:a7:07:52:17:
2e:db:e0:c5:fa:55:fa:eb:29:67:dd:62:4c:89:24:
4b:38:ee:17:34:b0:c7:b5:c3:e9:ad:60:2a:7f:e6:
4a:1b:7c:5e:36:e8:d2:7b:4b:8e:75:a5:74:75:ce:
ff:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4B:F3:56:C7:BD:D0:04:C1:BD:17:8B:EF:DA:2C:05:EE:90:8D:5A
X509v3 Authority Key Identifier:
keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/J0vzVse90ATBvReL79osBe6QjVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.33.0-89.39.34.255
Signature Algorithm: sha256WithRSAEncryption
34:c6:d6:32:51:b9:2c:b9:fb:0c:6c:99:e7:b2:16:f6:46:34:
7b:11:f9:94:54:7a:48:05:a9:49:4f:53:70:47:c0:3f:43:d1:
4d:7b:9c:56:67:9e:9c:51:44:9f:c7:df:9f:bd:f1:82:a4:6d:
4b:d9:e4:14:63:a9:36:11:8d:71:cb:d1:03:dc:3d:6b:47:f6:
76:ad:ea:69:e0:8e:61:a1:8d:68:a5:a4:91:9f:da:8d:63:1a:
d4:cb:c7:ce:0f:ea:70:6e:c5:5e:ae:45:8d:35:c4:03:73:f9:
45:8c:a1:3d:5d:58:38:20:9d:43:f2:e1:48:30:79:3a:c3:97:
91:5a:72:8c:87:63:84:95:fd:e4:6b:ef:9a:9a:66:54:24:53:
f4:a3:bc:25:1f:12:b4:12:b3:74:80:39:58:35:6e:8e:6b:79:
6e:55:53:6e:42:63:b9:78:98:4c:15:79:3d:6c:59:62:4a:bf:
cf:c4:c6:34:5b:4d:37:60:37:f3:7e:6e:e8:82:50:18:30:2f:
2b:6c:66:d7:e9:61:2e:79:84:ba:46:79:0a:da:6f:c7:1d:f6:
9d:f6:b3:48:09:eb:dc:15:e1:98:c6:25:70:68:43:35:65:46:
76:0c:17:b4:35:93:b3:56:67:0d:da:aa:10:2b:53:51:f3:e6:
56:e7:e8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:58 2025 by rpki-client