Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5JWuIDMtl3_Xun3nz2LCCLMhicg.roa
File: 5JWuIDMtl3_Xun3nz2LCCLMhicg.roa (raw, json)
Hash identifier: H+b9DsipDMFC/cW/fgBvQlV+zpR63HXc55wQZ9fD/s8=
Subject key identifier: E4:95:AE:20:33:2D:97:7F:D7:BA:7D:E7:CF:62:C2:08:B3:21:89:C8
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018901BD679582E362B0C59E9B29C1C6BDB0
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5JWuIDMtl3_Xun3nz2LCCLMhicg.roa
Signing time: Wed 28 Jun 2023 11:22:17 +0000
ROA not before: Wed 28 Jun 2023 11:22:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210110
IP address blocks: 89.213.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:01:bd:67:95:82:e3:62:b0:c5:9e:9b:29:c1:c6:bd:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 28 11:22:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e495ae20332d977fd7ba7de7cf62c208b32189c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:42:d6:d1:c1:15:c3:ff:5a:42:2c:06:d5:15:
bb:41:97:34:ef:a5:5c:9a:8e:3b:8b:6c:bb:21:71:
9e:17:59:a4:fe:06:61:14:77:67:a4:c7:4f:62:83:
aa:85:ea:5e:29:05:3a:0a:6b:08:71:df:b9:c0:50:
c1:8a:bd:89:b1:96:b8:06:8d:18:4e:84:bd:dc:54:
bc:5f:07:14:c3:75:c6:c1:1b:44:7a:b1:28:04:11:
3e:90:27:7f:dd:73:25:5e:2d:c3:c7:44:5a:8c:2e:
32:fd:1a:3d:50:3d:11:11:86:d5:a1:79:d2:82:92:
b1:1c:0d:ef:24:d0:70:0f:dd:16:05:cb:b0:ce:8b:
51:a0:8a:2e:54:4d:ac:ab:ed:6a:a1:8e:55:4e:01:
cb:2c:df:32:21:5d:05:8b:3e:79:25:81:c3:0d:48:
69:6d:17:e0:93:24:a6:30:a9:f8:4e:3e:53:13:64:
7b:17:fd:c0:a8:d7:b4:51:70:4a:6b:a9:fa:b2:9e:
54:e3:92:b8:e8:18:db:35:e0:8d:8c:2c:bc:f0:c2:
c4:3f:e7:d1:c7:21:fb:d1:8e:4a:03:75:46:55:6a:
39:81:76:4c:fa:4d:ba:26:42:9f:f4:56:ab:73:e7:
de:0e:8a:0d:1f:af:56:c1:2b:7e:73:75:30:6f:2f:
23:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:95:AE:20:33:2D:97:7F:D7:BA:7D:E7:CF:62:C2:08:B3:21:89:C8
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5JWuIDMtl3_Xun3nz2LCCLMhicg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.128.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:67:d4:30:db:fc:7a:1a:a2:5c:4b:73:03:12:44:e3:fa:bc:
a3:99:a2:76:0e:76:b0:c9:d4:4b:5e:61:63:c8:82:5b:e7:ae:
2f:26:2e:a7:ae:c8:52:6a:f7:16:f6:bc:fd:b9:05:b1:9c:62:
4e:a4:43:e6:44:f0:c6:6a:1f:cd:ad:98:37:2b:14:bf:c5:2a:
30:33:3b:42:9a:41:05:8c:66:43:ef:40:2c:f5:10:ef:d0:56:
37:52:ae:08:c2:dd:4b:03:4d:fb:af:2a:76:78:c2:69:3b:4e:
b6:cf:0c:83:a5:c1:0b:51:64:91:d9:d1:fd:1b:62:27:75:b7:
40:63:ce:27:85:d9:de:e5:dd:03:7c:b7:59:d0:10:2c:16:5f:
8d:46:af:0e:a5:62:1f:e9:0d:ca:72:e6:3a:ed:09:f1:e0:2e:
a3:df:fa:36:ff:ea:7a:1b:47:c1:dc:43:56:d7:0b:f9:2f:df:
d0:93:b9:9e:48:96:a4:23:34:bf:99:f3:3d:c4:f6:53:9a:bf:
ed:ca:0e:db:75:43:6a:4a:04:d2:e2:e2:1b:74:7b:f1:82:6a:
ab:fe:36:5a:fc:3f:5e:26:52:c8:9e:54:0e:ad:0b:49:b8:e8:
2c:5d:26:28:4b:eb:09:77:20:22:c6:c6:a9:ff:d7:38:6a:44:
c6:73:5c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:19:23 2025 by rpki-client