Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/sl2na-UhHwfHWNYsEiOXof2T-mA.roa
File: sl2na-UhHwfHWNYsEiOXof2T-mA.roa (raw, json)
Hash identifier: yx2Yk0YF3vdd845+ujHYHg6UwJYZ2hsa3BwGF+9vgrA=
Subject key identifier: B2:5D:A7:6B:E5:21:1F:07:C7:58:D6:2C:12:23:97:A1:FD:93:FA:60
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 0182B5681EF9326CCF955E9647E29919A3EB
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/sl2na-UhHwfHWNYsEiOXof2T-mA.roa
Signing time: Fri 19 Aug 2022 09:21:15 +0000
ROA not before: Fri 19 Aug 2022 09:21:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210644
IP address blocks: 89.23.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b5:68:1e:f9:32:6c:cf:95:5e:96:47:e2:99:19:a3:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Aug 19 09:21:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b25da76be5211f07c758d62c122397a1fd93fa60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:da:ca:2b:8b:d0:3a:cd:fc:ce:fb:5d:a9:2d:
c4:4a:21:b8:78:2b:2b:9e:f9:64:18:bb:76:6e:96:
b1:60:af:49:42:9c:9e:0f:c2:49:92:8c:6c:fd:62:
a1:97:30:72:6b:31:1c:9f:66:0e:37:37:f3:b5:8b:
39:ad:d7:0e:08:a8:b5:d2:7f:d0:23:ce:aa:cd:e6:
35:ce:8f:d4:2e:31:1c:6e:c9:4d:19:fd:9a:97:15:
f5:bd:60:02:62:9e:d9:3c:86:41:b6:c1:74:b9:a8:
5b:00:03:0a:b7:b8:c6:b8:a7:1f:0a:43:a3:c0:96:
37:32:98:ef:4b:e4:05:96:2e:7b:a3:7f:e5:71:ea:
c3:b0:c1:a8:12:60:fa:ef:bd:70:38:33:3b:33:e1:
42:e3:0d:89:b5:ea:27:4b:42:f0:0a:d8:24:0d:b7:
28:6a:16:1e:8f:05:01:60:9d:da:9c:99:f3:98:86:
9e:76:04:15:07:d3:e5:27:5d:89:9f:40:da:60:00:
ac:6f:ac:3e:2c:2f:25:fc:db:4b:98:46:d7:7c:6d:
d9:14:64:80:d4:49:b5:e6:e3:de:7e:38:48:b7:30:
f4:39:fd:28:bd:7e:d3:f0:a4:11:9d:d0:71:42:36:
d6:6f:3c:c6:8c:f8:6b:42:bc:4e:45:cb:fb:eb:b5:
05:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5D:A7:6B:E5:21:1F:07:C7:58:D6:2C:12:23:97:A1:FD:93:FA:60
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/sl2na-UhHwfHWNYsEiOXof2T-mA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.103.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:4e:8f:ab:88:e9:93:55:fc:e2:ae:31:1a:e6:f9:d5:13:18:
84:ca:0e:8c:a1:46:b8:4b:7e:cd:5e:9d:76:b0:6b:4c:4d:d1:
20:4f:a8:6c:f9:18:87:5d:a6:84:9f:0e:44:e4:26:27:41:37:
2f:e7:0d:26:66:7f:3e:08:7e:a4:9c:07:d2:f7:a3:5b:67:43:
45:7a:c4:4a:39:9e:bc:a7:de:f2:38:35:c2:9a:b6:c9:1f:84:
a0:27:a9:8e:35:c4:ea:a5:3b:ef:75:e1:3b:38:60:1b:de:71:
72:4b:25:fa:bf:74:1f:be:af:b1:02:94:cc:b2:51:f6:44:1d:
22:46:be:22:c6:fe:80:dd:d7:c3:3b:06:b9:c7:21:f4:2f:da:
fc:fd:5b:ed:f7:d6:2a:15:1e:df:35:5b:f9:01:0b:43:15:15:
4b:3e:06:6a:87:ca:79:6a:7a:88:5b:5e:67:0f:53:aa:fa:68:
42:8f:f7:a1:20:1e:dc:ab:37:e2:91:f6:9b:15:0d:45:72:7c:
0d:00:bc:3b:b3:4f:e0:12:9f:58:a9:cc:8c:e8:58:97:64:5f:
d7:0e:4f:ef:ef:31:6a:a4:f1:7e:fa:db:29:82:cb:e7:87:02:
09:e8:bf:ca:a7:7a:18:a6:1b:30:ce:ce:bb:2a:ac:34:6e:a6:
7c:a4:25:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:56:25 2025 by rpki-client