Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/9LnCtncbKkeAxgvvPyD9BgNHBO0.roa
File: 9LnCtncbKkeAxgvvPyD9BgNHBO0.roa (raw, json)
Hash identifier: dBjNELDQdV/hoMKTWEXtl6uxFZ9c0JloreaengLMVC0=
Subject key identifier: F4:B9:C2:B6:77:1B:2A:47:80:C6:0B:EF:3F:20:FD:06:03:47:04:ED
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0189E3BA363D0DEF74E9CCAB828B39F7D82D
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/9LnCtncbKkeAxgvvPyD9BgNHBO0.roa
Signing time: Fri 11 Aug 2023 08:32:58 +0000
ROA not before: Fri 11 Aug 2023 08:32:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207633
IP address blocks: 89.45.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e3:ba:36:3d:0d:ef:74:e9:cc:ab:82:8b:39:f7:d8:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 11 08:32:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4b9c2b6771b2a4780c60bef3f20fd06034704ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9a:fc:0a:f5:44:a5:41:10:4b:15:86:90:7d:
9c:05:31:2a:5e:c0:d4:67:b5:bf:d3:d5:e3:ae:2a:
ae:9b:9d:de:34:23:c7:07:ca:03:ee:2c:31:ec:0f:
2e:f7:62:93:a0:c6:eb:cf:48:b7:3d:85:9e:e1:8d:
83:b2:0d:1d:f5:a6:76:5b:2b:fa:45:35:2f:ce:0f:
34:45:06:53:58:0c:27:00:c9:6a:bc:98:df:00:73:
14:97:5c:05:58:09:6f:ec:89:61:b2:f5:ee:59:1f:
cd:90:e2:4a:0c:54:cf:51:21:9b:56:a9:51:2d:90:
e6:c8:bc:7f:6f:77:e7:ce:0b:be:41:7b:0f:b2:ca:
c2:3c:f1:3f:7d:60:76:b7:8e:7f:e0:79:97:76:3a:
76:a8:69:35:92:ad:e3:c3:51:d4:d4:46:21:9a:06:
ee:b3:35:8f:09:3c:ed:39:c5:0d:42:6f:ee:4d:06:
60:15:0b:11:b9:f2:71:5e:07:e6:ca:85:ef:74:9a:
9c:5d:17:93:05:02:ff:fe:fe:9b:25:1d:b0:0b:ec:
71:c6:0f:b6:1e:ec:55:1f:db:ad:33:0d:4d:76:8c:
c6:d1:41:46:7c:b7:55:dd:f9:f5:42:74:ac:5e:79:
3f:51:09:84:9d:7c:79:93:66:59:2b:73:b8:3c:88:
9d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B9:C2:B6:77:1B:2A:47:80:C6:0B:EF:3F:20:FD:06:03:47:04:ED
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/9LnCtncbKkeAxgvvPyD9BgNHBO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.45.162.0/24
Signature Algorithm: sha256WithRSAEncryption
50:b5:f3:47:08:1b:1e:9c:93:ae:fc:f4:6b:06:93:f8:c8:8f:
e3:2e:67:b9:bd:24:41:37:16:c3:44:4a:75:87:47:55:e1:7f:
1b:b3:33:61:12:cc:1c:82:f0:66:f0:20:10:ca:b6:dd:3f:ca:
b9:d6:1a:48:ee:63:66:e8:e9:0e:65:d1:60:65:0c:e3:02:46:
0d:4a:b2:9a:2f:b3:b7:6a:ef:60:f4:ec:e9:a2:60:d7:ee:44:
19:64:e1:d4:67:1a:13:32:27:0e:12:e6:a7:b2:b6:39:f7:c4:
af:e1:0b:2a:eb:48:ea:5b:fa:d6:99:8b:d6:c7:ee:b1:7c:ed:
0e:7d:c3:f9:2f:ef:61:42:00:6d:a1:b2:e1:db:85:fc:b4:59:
cd:41:29:9a:33:0e:9a:07:cf:bc:0d:73:94:59:ac:1e:41:7b:
dc:f3:71:cb:67:42:18:fe:58:c8:5b:78:24:3c:76:25:c2:29:
9b:17:fe:d9:6c:ab:83:1f:4c:88:b0:e8:04:56:da:bc:ff:64:
90:64:79:a2:f1:ad:60:fe:49:2c:6e:19:f7:1a:0a:16:a8:bf:
33:a9:23:41:11:e8:da:7a:75:a7:24:62:cd:b4:20:fe:8c:14:
30:dc:1c:88:79:4c:60:5a:34:75:4e:fa:50:d0:36:ef:0a:cf:
3e:24:e8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:31:37 2025 by rpki-client