Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/TxmP4kusVbyQeqyKoThZ4ijJ1tc.roa
File: TxmP4kusVbyQeqyKoThZ4ijJ1tc.roa (raw, json)
Hash identifier: ta2MUdxy/BITI5q6TxZCwwtElahhfZLshSOjl2I4J34=
Subject key identifier: 4F:19:8F:E2:4B:AC:55:BC:90:7A:AC:8A:A1:38:59:E2:28:C9:D6:D7
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 01892A373CD207A995B0F8A3CB627E148DED
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/TxmP4kusVbyQeqyKoThZ4ijJ1tc.roa
Signing time: Thu 06 Jul 2023 08:00:10 +0000
ROA not before: Thu 06 Jul 2023 08:00:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.23.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2a:37:3c:d2:07:a9:95:b0:f8:a3:cb:62:7e:14:8d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Jul 6 08:00:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f198fe24bac55bc907aac8aa13859e228c9d6d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fb:4e:e5:03:b9:be:fa:d4:6c:5c:f9:ba:d0:
58:ca:5d:e7:07:bf:e7:67:54:51:a8:03:bc:70:9c:
d3:e5:a7:99:86:55:8d:5a:97:14:7b:eb:72:1b:eb:
f2:44:28:f9:9b:c1:83:31:c0:58:4a:3b:96:8a:a0:
f2:14:08:ed:dd:fe:dd:dd:7b:9b:84:90:d0:30:07:
0a:59:fe:fa:0d:cc:10:a9:50:ec:97:2e:f7:cb:ed:
35:36:cc:cf:f5:8a:2f:37:0b:91:ac:46:d2:e3:91:
eb:d6:a9:b4:32:66:85:27:e0:44:e3:f2:8e:5d:7f:
c7:0b:cb:e8:c7:35:9d:8a:ab:33:7a:d0:e2:53:13:
54:85:6d:24:75:95:6e:ed:8c:e4:76:cd:21:18:05:
a0:eb:26:7f:45:9d:7f:9c:c2:8c:1c:b2:95:e6:e1:
1e:c1:cf:d4:82:76:22:b8:84:6c:1a:fe:45:6a:6c:
65:c6:40:67:a2:bc:3b:94:d4:ea:63:48:72:d8:8b:
bd:ab:06:d1:42:31:f5:bf:90:43:bf:67:92:5e:64:
3d:d2:ad:e6:df:1f:91:5f:9e:88:28:fb:cc:82:e2:
14:5f:87:b1:a4:89:b2:85:34:d0:00:1a:33:06:63:
32:0d:a1:d9:83:40:e8:e2:80:c4:15:b7:72:3f:b3:
9d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:19:8F:E2:4B:AC:55:BC:90:7A:AC:8A:A1:38:59:E2:28:C9:D6:D7
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/TxmP4kusVbyQeqyKoThZ4ijJ1tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.80.0/24
Signature Algorithm: sha256WithRSAEncryption
51:03:56:c1:d6:54:ab:1d:a9:3b:ac:0e:e4:29:45:9e:b7:3b:
49:5c:91:99:04:a0:ef:ed:32:ad:21:32:ba:c3:22:89:08:a6:
15:b5:e8:27:f3:22:22:9d:cf:62:58:62:92:ae:2e:f8:fb:1b:
05:6d:99:78:04:82:d0:75:54:99:52:34:65:b7:ed:75:dc:56:
d7:4b:09:76:66:11:a5:6a:90:f1:de:37:20:19:15:07:91:95:
04:d8:e9:11:27:d0:21:15:07:23:43:06:c7:9b:05:7b:49:77:
82:63:fb:26:be:86:11:d9:f5:d5:fd:f8:8f:2b:f2:14:aa:1e:
a0:05:31:7e:86:a5:7a:dd:61:de:6c:44:c0:4c:c1:6d:27:e9:
56:c3:db:f0:0b:d9:be:57:97:21:6b:7d:45:62:f9:41:42:af:
04:a2:c5:0e:4a:62:92:fa:2d:97:d0:8b:8c:f7:f9:45:fb:16:
6f:e8:58:d0:85:25:ad:e3:c1:30:64:d6:96:60:ee:ff:3d:17:
0b:34:09:57:69:75:e7:ab:1d:36:b4:e5:7c:c6:93:87:a6:39:
01:76:1d:48:5a:12:c2:ea:59:91:be:0f:d1:af:b3:6d:fe:46:
25:6d:4f:5d:96:4e:ba:f6:25:f4:9f:fe:5b:be:62:97:83:9e:
5e:7e:f5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:28:07 2025 by rpki-client