Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/N3jr23grm_K6mb30aSmYD46HHzk.roa
File: N3jr23grm_K6mb30aSmYD46HHzk.roa (raw, json)
Hash identifier: YlzGRwxHorIuRz4bqvbQ+W92ahpY6kjHDk0swVRJSu4=
Subject key identifier: 37:78:EB:DB:78:2B:9B:F2:BA:99:BD:F4:69:29:98:0F:8E:87:1F:39
Certificate issuer: /CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Certificate serial: 018BDCF31B39F00A1FFBE6D00E122CA17DAA
Authority key identifier: B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/N3jr23grm_K6mb30aSmYD46HHzk.roa
Signing time: Fri 17 Nov 2023 11:03:21 +0000
ROA not before: Fri 17 Nov 2023 11:03:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29066
IP address blocks: 89.38.43.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dc:f3:1b:39:f0:0a:1f:fb:e6:d0:0e:12:2c:a1:7d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Validity
Not Before: Nov 17 11:03:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3778ebdb782b9bf2ba99bdf46929980f8e871f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:87:a0:d8:4a:7e:26:b0:de:9d:d1:6a:4b:8d:
d6:2a:2e:78:ec:eb:20:90:83:d1:18:c3:b5:fb:d6:
e1:e4:f5:5c:8d:21:71:9c:40:25:21:71:10:3f:37:
48:f9:02:49:9a:f6:65:8f:73:5b:f7:ab:39:a9:f3:
88:fc:1d:27:9c:a1:42:7b:5a:b9:89:35:9e:03:54:
7c:61:4e:ed:c5:b7:c1:6d:9f:3b:23:cc:3c:34:f2:
5a:af:7a:40:9e:03:31:d5:0d:73:37:97:ad:fa:13:
b9:a8:a7:a8:0e:e3:0a:dc:a2:86:8e:4e:6e:25:a6:
f3:bb:f3:60:0b:b7:f0:6d:ac:b5:9f:99:35:dc:9b:
2d:67:2a:18:00:84:4b:cc:73:6d:c2:59:b7:4a:3a:
19:aa:30:4c:15:de:a0:15:bf:1e:9d:b8:eb:e2:5f:
af:38:99:a8:1f:6c:8e:ac:20:5b:9c:25:e9:c5:10:
54:c4:91:71:5d:d2:79:2e:6f:3c:62:25:38:d4:65:
b7:88:3e:e7:c3:f2:ca:db:c6:d5:76:2e:e8:45:35:
89:6c:e6:1d:4e:22:54:95:91:8a:2c:3e:e0:d4:a5:
00:fa:54:32:7a:f7:90:90:06:48:ce:93:a9:31:cc:
50:22:ad:de:8d:a5:63:7e:92:34:ec:3e:81:d2:66:
6b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:78:EB:DB:78:2B:9B:F2:BA:99:BD:F4:69:29:98:0F:8E:87:1F:39
X509v3 Authority Key Identifier:
keyid:B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/N3jr23grm_K6mb30aSmYD46HHzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.43.0/24
Signature Algorithm: sha256WithRSAEncryption
17:6e:8d:80:92:2a:b5:44:57:53:47:c5:d8:fc:40:05:81:07:
2e:fc:aa:d0:0c:a0:31:34:6b:4b:e1:c3:41:e9:7b:a6:cf:82:
37:65:94:c1:35:d2:f5:ec:05:02:25:ce:2f:31:8a:45:bc:49:
50:d0:f5:09:7b:e8:f9:29:09:be:bc:54:ae:43:74:34:e5:d5:
a9:be:f3:92:19:10:90:48:0b:5f:0e:92:b3:9a:3d:ab:b0:24:
55:ed:44:5b:d5:2d:f2:8b:4b:d0:c5:05:d6:6b:61:0f:3c:d7:
00:80:7d:0b:95:55:a2:89:d8:49:ac:9e:a0:64:7b:9e:2a:71:
0d:d4:32:67:fe:a8:0a:25:9b:6e:a7:18:f2:07:fc:a1:c6:e4:
c8:cc:90:b6:ec:6e:c0:3a:d6:17:4b:0a:6e:ad:fc:7e:3f:04:
ae:03:7c:a1:f3:12:31:29:ea:f1:4d:31:85:eb:03:dd:1e:8f:
c8:e8:36:91:9a:eb:2d:2d:b8:8f:a5:01:98:53:74:af:e6:b5:
11:2b:7c:9f:10:04:86:e8:81:2b:26:2a:bf:79:63:56:6f:bd:
62:f1:f4:f1:01:f0:8b:9b:7d:14:9e:bd:35:15:fc:a7:f9:d5:
74:bc:dd:aa:43:8f:87:da:b6:a5:38:01:2a:c5:77:ea:0e:26:
f3:68:b5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:35:29 2025 by rpki-client