Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/OtFwlYR6cPZ8H3tKx_0M7DROJso.roa
File: OtFwlYR6cPZ8H3tKx_0M7DROJso.roa (raw, json)
Hash identifier: WBdfMEHfnpMGGJN4A5w/1M5FwJPBxBEKGhYewZRsm3k=
Subject key identifier: 3A:D1:70:95:84:7A:70:F6:7C:1F:7B:4A:C7:FD:0C:EC:34:4E:26:CA
Certificate issuer: /CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6
Certificate serial: 018570C2DA1A14D316040678105867F2F11D
Authority key identifier: F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/OtFwlYR6cPZ8H3tKx_0M7DROJso.roa
Signing time: Mon 02 Jan 2023 04:34:56 +0000
ROA not before: Mon 02 Jan 2023 04:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212699
IP address blocks: 89.38.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:c2:da:1a:14:d3:16:04:06:78:10:58:67:f2:f1:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6
Validity
Not Before: Jan 2 04:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ad17095847a70f67c1f7b4ac7fd0cec344e26ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0b:f1:40:c9:fa:cd:3a:b2:b2:99:32:d6:3a:
71:27:89:5d:2e:50:47:92:88:3e:82:86:73:4c:9e:
24:7f:c9:91:0c:c2:dd:19:24:ff:0a:25:3d:97:9c:
60:23:fc:b3:3a:bd:0b:42:bc:a2:15:bf:53:c8:fb:
58:65:b7:f4:db:e1:5b:9d:83:19:8e:1b:23:ea:bf:
4a:c9:42:1c:84:a8:72:21:3c:fa:87:f1:91:00:23:
40:76:44:54:7b:93:36:41:03:d1:72:74:ad:db:a8:
85:67:d4:b3:a2:17:51:ae:54:15:66:17:31:18:8e:
f6:79:f4:a1:8e:f7:63:e3:c0:df:75:c3:53:d2:d2:
f6:9e:c6:f3:13:69:7f:d3:3b:3c:48:69:5b:98:28:
6e:8b:0f:63:4a:5d:f3:ad:fd:23:61:a1:f5:42:f1:
44:55:ff:d9:54:86:1d:97:92:d9:eb:ff:ff:36:8c:
79:80:9b:87:e9:b6:48:39:fe:18:bb:a5:69:5f:c0:
8e:d6:bc:31:02:7a:d5:0f:b1:2f:37:91:32:70:9b:
39:46:40:27:34:61:72:be:48:20:4c:f9:0c:6c:68:
1f:b4:3f:35:84:c2:8f:8f:03:b1:51:70:19:39:0a:
e5:d2:1e:d1:11:52:f7:4e:c2:38:64:14:54:3b:dd:
90:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D1:70:95:84:7A:70:F6:7C:1F:7B:4A:C7:FD:0C:EC:34:4E:26:CA
X509v3 Authority Key Identifier:
keyid:F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/OtFwlYR6cPZ8H3tKx_0M7DROJso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.105.0/24
Signature Algorithm: sha256WithRSAEncryption
32:3f:fa:37:ef:5f:6d:26:a5:18:17:b3:c5:f6:fc:2f:58:4e:
53:ab:20:4a:1d:6a:ca:a8:d8:e0:12:f6:4e:f3:ca:f7:a3:dd:
70:94:71:18:1b:de:7f:05:be:d4:76:5d:8c:f9:20:b7:55:a4:
fe:ac:b7:2f:f2:f7:f2:5e:79:f7:3f:92:24:50:e8:06:5d:ea:
0d:fa:da:e8:a9:6c:da:12:f1:16:f5:f8:ce:e7:f3:be:f5:bd:
6f:16:50:b8:0b:95:18:75:dd:20:a5:e5:27:50:be:7b:36:2b:
f8:41:48:f7:75:51:f7:36:71:e5:8c:b3:70:89:38:7d:df:b4:
bb:d6:c2:3c:0b:35:9e:0e:e5:c7:16:28:6f:2f:8a:11:69:15:
08:75:08:f9:d3:ec:e2:bb:9f:51:f5:6c:47:8c:ee:f6:62:ca:
c5:cd:42:e2:a0:64:a8:c0:18:36:72:36:12:3c:78:8f:c2:ed:
08:de:0e:52:74:5d:11:21:e6:62:05:e2:30:45:58:da:0f:77:
61:ae:f1:33:97:d6:d4:1d:bb:05:e1:db:59:6e:09:37:e7:d9:
e9:67:71:3d:de:1a:8c:c3:36:c3:68:b3:37:5f:88:ef:68:14:
1e:12:ae:3c:b6:cc:78:b2:19:b0:01:18:43:4d:a0:da:80:8a:
da:72:05:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:07 2025 by rpki-client