Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/A3MToLPbC5oAPnvTnIfgfzyihC4.roa
File: A3MToLPbC5oAPnvTnIfgfzyihC4.roa (raw, json)
Hash identifier: LMqcjPqutPmR5BuRhsIEysmZUf8np0CrWQD7QFpPZS8=
Subject key identifier: 03:73:13:A0:B3:DB:0B:9A:00:3E:7B:D3:9C:87:E0:7F:3C:A2:84:2E
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018A032A19E5C876F2AC36BF5E131A82EF76
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/A3MToLPbC5oAPnvTnIfgfzyihC4.roa
Signing time: Thu 17 Aug 2023 11:03:25 +0000
ROA not before: Thu 17 Aug 2023 11:03:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43581
IP address blocks: 89.23.105.0/24 maxlen: 24
89.23.110.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:03:2a:19:e5:c8:76:f2:ac:36:bf:5e:13:1a:82:ef:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Aug 17 11:03:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=037313a0b3db0b9a003e7bd39c87e07f3ca2842e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9b:1e:26:d8:1f:1c:13:ab:c3:5f:1b:9b:51:
8a:d6:2f:34:b9:d2:77:85:09:7c:6a:1a:1f:ba:a3:
7c:5d:4e:c2:5c:a9:6e:30:4c:b5:81:35:ef:40:37:
58:42:15:f3:52:fd:9f:fc:fa:f2:53:ea:51:de:5d:
f2:07:b2:b3:d4:0a:c3:78:41:a2:4c:a2:90:a2:48:
57:3c:35:20:c0:e7:61:91:95:87:92:ca:e9:8f:38:
cc:8a:41:d4:e0:d3:f4:6c:37:60:0d:92:f7:ca:8a:
f2:50:64:c6:dd:d6:ed:e0:f5:1d:15:b9:71:4e:5e:
4e:84:8a:a5:b3:ad:82:1f:5d:1a:f5:d4:3f:dd:49:
4b:fd:5f:64:3d:35:d9:75:52:fe:35:fa:9f:cd:32:
e5:54:34:f3:1f:b9:2d:88:a6:d4:77:01:79:42:ac:
56:21:d1:91:9d:4a:a0:62:4f:cb:e9:8f:80:1c:f7:
b5:b6:19:2c:d2:b9:f0:fe:0f:d6:91:67:1e:54:32:
2e:ff:08:29:c8:17:b3:3d:f5:3f:8c:0a:68:94:26:
cd:05:4d:72:78:97:41:a7:06:f5:85:1d:0c:f9:c6:
38:8e:16:c1:50:6c:d9:20:0a:bd:1c:cb:87:ea:e6:
bb:4f:84:58:5b:95:d0:d7:ba:46:07:51:87:ab:4a:
dd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:73:13:A0:B3:DB:0B:9A:00:3E:7B:D3:9C:87:E0:7F:3C:A2:84:2E
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/A3MToLPbC5oAPnvTnIfgfzyihC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.105.0/24
89.23.110.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:7a:f0:83:20:7a:fc:30:93:41:36:61:9c:60:5f:b3:55:30:
70:64:e4:34:1d:56:a9:03:5a:c8:a8:d5:12:31:d6:de:87:bc:
9d:90:d0:97:d8:e7:d7:9a:09:c2:4d:0a:96:33:2f:13:2d:d8:
70:8c:e5:fb:88:96:e1:ca:bf:7e:d1:5b:4b:a2:2f:ab:b4:d5:
b7:4a:b2:d6:9c:0c:9f:08:22:08:2a:23:94:28:1d:0d:df:f7:
bc:cf:dd:73:6c:79:2c:0c:4c:15:76:ca:66:91:c8:cf:f8:6e:
87:11:79:93:4b:da:7e:34:de:c3:ea:c8:ae:d7:8b:4f:96:09:
1c:07:98:84:94:e3:fb:b8:63:58:ca:05:10:78:44:0b:94:21:
ac:c8:c4:45:bb:44:43:8e:f1:54:28:f6:d8:a8:0d:f5:73:30:
95:32:a6:da:77:ea:05:f5:5c:64:20:ac:14:ad:e5:e4:dc:f3:
df:9d:45:ca:60:27:63:61:71:2a:b9:df:f4:0b:e8:46:d2:c0:
31:a2:c5:0a:f1:42:d6:5e:ea:78:db:0a:74:7d:66:e3:3f:38:
79:4c:e0:52:47:58:79:f3:2a:27:86:f7:bf:ca:7d:10:c5:63:
bd:d1:7c:49:3f:72:fe:11:28:92:58:54:bb:0b:c2:16:4a:d6:
40:9e:c1:95
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYoDKhnlyHbyrDa/XhMagu92MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl
NWVjZjIwHhcNMjMwODE3MTEwMzI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzczMTNhMGIzZGIwYjlhMDAzZTdiZDM5Yzg3ZTA3ZjNjYTI4NDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJseJtgfHBOrw18bm1GK1i80udJ3
hQl8ahofuqN8XU7CXKluMEy1gTXvQDdYQhXzUv2f/PryU+pR3l3yB7Kz1ArDeEGi
TKKQokhXPDUgwOdhkZWHksrpjzjMikHU4NP0bDdgDZL3yoryUGTG3dbt4PUdFblx
Tl5OhIqls62CH10a9dQ/3UlL/V9kPTXZdVL+NfqfzTLlVDTzH7ktiKbUdwF5QqxW
IdGRnUqgYk/L6Y+AHPe1thks0rnw/g/WkWceVDIu/wgpyBezPfU/jApolCbNBU1y
eJdBpwb1hR0M+cY4jhbBUGzZIAq9HMuH6ua7T4RYW5XQ17pGB1GHq0rdVwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFANzE6Cz2wuaAD5705yH4H88ooQuMB8GA1UdIwQY
MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt
MTcxYzM2N2JlNzgyLzEvQTNNVG9MUGJDNW9BUG52VG5JZmdmenlpaEM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy
LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWRdpAwQA
WRduMA0GCSqGSIb3DQEBCwUAA4IBAQC0evCDIHr8MJNBNmGcYF+zVTBwZOQ0HVap
A1rIqNUSMdbeh7ydkNCX2OfXmgnCTQqWMy8TLdhwjOX7iJbhyr9+0VtLoi+rtNW3
SrLWnAyfCCIIKiOUKB0N3/e8z91zbHksDEwVdspmkcjP+G6HEXmTS9p+NN7D6siu
14tPlgkcB5iElOP7uGNYygUQeEQLlCGsyMRFu0RDjvFUKPbYqA31czCVMqbad+oF
9VxkIKwUreXk3PPfnUXKYCdjYXEqud/0C+hG0sAxosUK8ULWXup42wp0fWbjPzh5
TOBSR1h58yonhve/yn0QxWO90XxJP3L+ESiSWFS7C8IWStZAnsGV
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:49 2025 by rpki-client