Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/_mZNsJ2usMSLIaYPN5yp3Uy4Ml4.roa
File: _mZNsJ2usMSLIaYPN5yp3Uy4Ml4.roa (raw, json)
Hash identifier: U3JSNMidUfgf3NgMDu/RSsTjkEsOdWeY3bn+HU9b4M8=
Subject key identifier: FE:66:4D:B0:9D:AE:B0:C4:8B:21:A6:0F:37:9C:A9:DD:4C:B8:32:5E
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 36BEB3B4
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/_mZNsJ2usMSLIaYPN5yp3Uy4Ml4.roa
Signing time: Mon 23 May 2022 08:02:29 +0000
ROA not before: Mon 23 May 2022 08:02:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199478
IP address blocks: 89.140.116.0/22 maxlen: 24
89.140.229.0/24 maxlen: 24
89.140.234.0/23 maxlen: 24
62.82.32.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 918467508 (0x36beb3b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: May 23 08:02:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe664db09daeb0c48b21a60f379ca9dd4cb8325e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b4:fc:47:49:fb:9f:dd:04:0a:e1:c8:c1:fa:
fa:8d:88:c0:6a:e9:99:05:49:67:d0:9e:68:a9:4f:
26:b1:ea:96:f4:df:d2:52:cd:7a:de:cd:61:67:76:
b1:12:c1:23:14:cd:da:0c:61:6f:e4:8a:5f:fc:7a:
00:b6:bd:32:ec:98:2e:c8:d9:b1:53:81:0a:35:2d:
0f:2b:ab:21:a6:ba:8f:4c:25:58:a1:b2:6a:c4:14:
04:99:91:1b:b4:09:0b:88:b4:80:57:06:78:af:01:
4a:5e:77:f1:be:16:d6:b5:34:8d:bb:b9:6d:89:97:
ac:3f:fd:6b:e0:76:39:2c:9e:95:f9:a8:fd:1f:2c:
a2:7f:5a:db:b0:02:c0:e7:a5:af:dd:e5:1c:aa:17:
d5:2d:7f:ac:f8:4a:25:0f:57:f3:cf:f8:6a:53:03:
10:e8:a0:5f:06:fb:ad:42:ad:fc:58:f6:6e:1a:b4:
d5:12:15:d4:79:0c:40:02:fe:5e:c9:8e:09:b5:3c:
e1:2c:f2:80:f7:0a:ea:55:1f:68:50:6f:bb:c8:2b:
30:f0:c0:ee:0e:84:82:6e:11:35:4d:1e:84:2d:c8:
7b:2a:f0:d8:04:c9:0b:f6:54:b8:84:ce:de:6b:b7:
39:87:02:5a:1f:65:82:83:f4:74:b6:35:58:d3:f6:
0a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:66:4D:B0:9D:AE:B0:C4:8B:21:A6:0F:37:9C:A9:DD:4C:B8:32:5E
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/_mZNsJ2usMSLIaYPN5yp3Uy4Ml4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.82.32.0/23
89.140.116.0/22
89.140.229.0/24
89.140.234.0/23
Signature Algorithm: sha256WithRSAEncryption
23:1c:37:44:da:8b:39:e2:85:93:12:1a:b3:d0:39:01:b3:f6:
2c:dd:af:ac:1b:66:f5:79:a5:c3:32:88:77:6e:df:79:5b:dd:
e4:b9:87:c3:e7:68:f7:c4:96:56:26:3f:7c:b5:90:ec:b6:4e:
80:f8:2e:fc:92:6c:05:f9:01:b6:55:0c:18:10:aa:3e:d6:ac:
8d:9b:c3:6f:e5:7c:8c:46:9a:65:32:f6:c6:02:83:ce:be:81:
4d:7d:fa:81:31:2e:d3:93:4c:09:fe:b2:4e:dc:e3:c9:35:d4:
2e:e8:b3:38:ce:f0:22:83:08:8c:ee:cf:f1:91:15:dd:91:33:
4e:20:9b:67:6d:93:e1:3f:83:cc:32:31:44:23:8d:a3:5a:14:
a2:35:28:41:fe:5e:8f:94:33:45:36:38:58:f9:30:27:f8:20:
b5:54:1c:f3:99:cf:77:77:69:45:52:e5:82:2e:53:31:ca:0d:
94:49:d3:00:a4:87:04:de:fb:de:e3:63:49:77:98:87:9d:cb:
1d:ba:b6:11:1f:88:6f:03:6b:25:b5:97:c7:19:26:b3:1d:a5:
84:de:ad:06:3b:ce:33:aa:bc:ad:54:2b:b9:f5:db:8c:6f:63:
f9:44:ac:4b:82:fc:d8:36:9e:cb:d8:ac:f8:60:ba:38:d7:03:
85:7f:77:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:51:13 2025 by rpki-client