Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/B5xaTNS2fz0gEYeAuKC34VzQba0.roa
File: B5xaTNS2fz0gEYeAuKC34VzQba0.roa (raw, json)
Hash identifier: dfkrWwkdo00AfgKmAOcsZEoeAEajCJWIfvIqg3LU1LU=
Subject key identifier: 07:9C:5A:4C:D4:B6:7F:3D:20:11:87:80:B8:A0:B7:E1:5C:D0:6D:AD
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018BD7FD45EF7D1079160CDCAF732DAB9E3E
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/B5xaTNS2fz0gEYeAuKC34VzQba0.roa
Signing time: Thu 16 Nov 2023 11:56:21 +0000
ROA not before: Thu 16 Nov 2023 11:56:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43581
IP address blocks: 89.23.105.0/24 maxlen: 24
89.23.106.0/24 maxlen: 24
89.23.110.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d7:fd:45:ef:7d:10:79:16:0c:dc:af:73:2d:ab:9e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Nov 16 11:56:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=079c5a4cd4b67f3d20118780b8a0b7e15cd06dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8b:55:73:61:7d:41:07:e8:0d:46:40:42:1b:
af:4a:7c:56:3b:eb:f5:95:d7:70:b2:e5:03:d5:04:
4c:98:64:18:9f:e7:f2:b9:80:b6:25:88:1b:8c:f7:
66:a7:e5:da:e8:a9:f3:78:24:f7:28:3f:73:8d:81:
fa:d7:19:a5:c8:74:f8:ed:52:d7:0e:6c:8c:d2:4f:
72:b1:b8:0e:37:e5:5f:ef:52:50:0b:eb:a6:1f:bc:
40:45:28:2a:de:0e:47:8e:e2:9e:5b:95:e9:b6:64:
0d:10:58:e5:1e:3f:2f:ce:5a:b2:3a:4e:3a:71:a2:
4a:ba:43:f6:15:2e:25:ef:03:6c:a2:a6:9b:79:54:
38:eb:dd:e7:27:e8:5e:0c:85:d2:2b:8d:64:6c:7b:
fb:df:64:45:98:b6:23:87:a1:b0:75:aa:b6:fb:da:
b8:fd:5a:d6:c3:68:65:c2:e3:da:55:28:fc:df:9b:
f1:cb:de:f6:3e:5c:0e:72:f0:85:f2:4c:7d:c3:dc:
be:27:a6:5f:a6:d4:11:a1:76:81:24:09:06:42:b4:
2f:e9:9b:0b:02:c9:0c:ea:6a:94:5f:dc:21:39:00:
7d:b1:b7:c3:4c:03:40:3f:82:b9:73:f5:88:75:13:
40:10:48:17:4c:78:4a:f0:0d:ed:1c:84:29:32:5d:
f0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:9C:5A:4C:D4:B6:7F:3D:20:11:87:80:B8:A0:B7:E1:5C:D0:6D:AD
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/B5xaTNS2fz0gEYeAuKC34VzQba0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.105.0-89.23.106.255
89.23.110.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:a6:47:9a:ac:e8:8a:6e:8c:77:01:96:49:8c:72:6e:5a:c4:
71:c8:82:bc:08:22:d0:f9:2c:2e:25:01:70:e0:cc:a0:3c:80:
66:d1:e0:60:30:3c:6d:64:a2:b9:92:7e:74:a6:d4:fc:2f:f6:
e2:c3:9f:70:fa:b0:a5:76:f5:88:0a:2b:a0:9b:5d:b1:2b:2d:
59:38:1c:da:af:c5:38:b4:20:49:b1:0d:6e:04:5c:b1:5b:3a:
b5:a3:be:e8:09:c0:20:fe:2a:2e:11:8d:c2:28:dc:ca:e4:71:
75:6a:f1:cd:2a:a1:55:45:fc:d8:60:82:8a:f6:a1:c9:68:31:
de:10:09:a6:ab:93:c2:d5:71:de:8b:c8:0c:a2:f0:d0:10:b5:
32:54:28:45:a7:4a:23:67:c6:f4:69:0d:51:da:59:0e:27:3a:
fd:66:d2:6b:80:9b:91:e1:8f:9a:f8:f0:46:04:e6:92:f9:96:
7d:1a:dc:b9:0a:0f:bc:26:80:9d:5a:c4:5a:94:3e:47:1a:3f:
4b:ce:16:d5:2d:f2:eb:ca:72:50:52:15:29:1a:49:2e:ea:64:
1c:5a:c4:a2:1f:07:be:fa:95:c0:0b:88:3d:4a:14:32:be:b4:
a9:b4:9f:cd:26:a0:c7:24:0e:fe:3c:9a:80:1a:cc:72:91:7e:
c5:59:5b:68
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:04 2025 by rpki-client