Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/7RyUlJbN7KnHqTjzgN8OxGuFu8o.roa
File: 7RyUlJbN7KnHqTjzgN8OxGuFu8o.roa (raw, json)
Hash identifier: eI4IiUSJ59lpgKEJUuO5z+BB/pFK6ReMu9ECQKsj4KU=
Subject key identifier: ED:1C:94:94:96:CD:EC:A9:C7:A9:38:F3:80:DF:0E:C4:6B:85:BB:CA
Certificate issuer: /CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5
Certificate serial: 01876FF6A7909F769CE39AA7E1AFD0F4A645
Authority key identifier: 84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/7RyUlJbN7KnHqTjzgN8OxGuFu8o.roa
Signing time: Tue 11 Apr 2023 10:57:28 +0000
ROA not before: Tue 11 Apr 2023 10:57:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35691
IP address blocks: 147.78.4.0/24 maxlen: 24
147.78.5.0/24 maxlen: 24
2a09:19c0::/48 maxlen: 48
2a09:19c0:1::/48 maxlen: 48
2a09:19c0:180::/42 maxlen: 42
2a09:19c0:140::/42 maxlen: 42
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6f:f6:a7:90:9f:76:9c:e3:9a:a7:e1:af:d0:f4:a6:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5
Validity
Not Before: Apr 11 10:57:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed1c949496cdeca9c7a938f380df0ec46b85bbca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3b:da:12:a0:6f:4d:70:d4:64:3e:20:38:21:
7f:34:e5:97:05:9c:1c:75:d0:11:a2:44:dc:df:9b:
76:8e:97:44:8d:3b:a8:79:e9:25:7c:61:34:98:74:
22:67:6d:ba:8e:73:58:d0:a8:79:f0:33:60:ea:1f:
81:82:ee:51:e3:a1:4e:1a:10:b8:3e:f5:48:1a:9a:
5c:0a:f0:c1:62:b8:24:54:76:a5:c2:a3:63:29:41:
fc:fd:54:d5:19:6e:fd:b1:1c:47:ab:79:94:34:30:
3e:88:8d:15:f9:8d:22:45:5e:2f:83:01:bf:7d:27:
b6:15:b8:3d:66:af:07:a8:bc:a5:00:92:db:e5:2c:
e6:32:fa:c6:17:04:4d:55:82:1f:3a:84:ea:a0:a5:
10:9b:98:fc:52:e9:fa:1f:d3:8d:41:6e:ac:13:bb:
45:29:97:fd:2c:38:5a:b8:ec:d6:6b:c1:5a:07:d6:
d3:e9:1e:9d:29:ff:86:e5:1e:ab:da:5f:52:a2:ab:
96:cf:e2:45:1a:9b:08:d5:ed:38:91:fb:97:8c:6d:
38:90:8c:9e:d3:cd:e2:de:d5:f8:52:5a:c5:c3:90:
63:5c:5b:3f:b1:90:4e:7c:94:4e:be:eb:06:8f:9c:
7e:54:44:60:14:21:0a:fd:70:12:20:cc:af:0b:29:
56:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:1C:94:94:96:CD:EC:A9:C7:A9:38:F3:80:DF:0E:C4:6B:85:BB:CA
X509v3 Authority Key Identifier:
keyid:84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/7RyUlJbN7KnHqTjzgN8OxGuFu8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.4.0/23
IPv6:
2a09:19c0::/47
2a09:19c0:140::-2a09:19c0:1bf:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
92:9d:49:6f:52:16:14:56:72:51:6d:20:97:27:23:dc:fc:71:
95:d3:5e:31:d8:4a:83:c9:9f:88:f9:12:96:68:18:32:57:40:
28:a4:29:48:c7:ff:3c:32:5e:06:a9:73:77:b4:f3:27:ed:36:
0b:95:5b:5d:58:f0:6d:52:28:40:00:4b:e8:de:ff:3e:24:1b:
3c:b9:b6:67:a8:3f:ba:23:c5:31:e1:d0:8b:f8:20:46:83:57:
9d:68:a4:fc:02:86:35:90:0a:9f:49:85:02:ad:d5:bc:9e:55:
2e:f4:b3:7b:87:01:82:1d:a2:71:07:07:35:c0:85:c9:2f:d2:
65:7c:d0:5b:32:b9:5e:5b:8d:fe:39:8b:f4:29:84:86:eb:98:
96:e4:e2:34:28:aa:4f:f7:f8:46:43:c0:5e:f4:0a:45:4d:80:
f3:45:bd:af:a9:0a:85:7c:bd:a5:b1:c3:a1:42:90:92:90:36:
61:a4:e0:74:35:df:af:ff:0a:0b:34:f7:38:f7:77:ee:09:9f:
33:cc:4c:a7:09:78:c0:e0:27:fb:44:7b:3f:c3:8f:c2:8b:14:
73:a4:d4:bb:6d:05:73:d2:f4:ae:7d:aa:b4:9c:12:1e:33:0e:
a4:bc:7e:1b:81:9d:e4:59:66:d9:f0:72:81:47:82:a3:26:40:
3e:bd:4f:ea
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgISAYdv9qeQn3ac45qn4a/Q9KZFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NDU4MmNhNzA0NzE3ZWIwYzk0YmU0ZDg5NDEzZjRiYzJk
OGI4ZTUwHhcNMjMwNDExMTA1NzI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDFjOTQ5NDk2Y2RlY2E5YzdhOTM4ZjM4MGRmMGVjNDZiODViYmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizvaEqBvTXDUZD4gOCF/NOWXBZwc
ddARokTc35t2jpdEjTuoeeklfGE0mHQiZ226jnNY0Kh58DNg6h+Bgu5R46FOGhC4
PvVIGppcCvDBYrgkVHalwqNjKUH8/VTVGW79sRxHq3mUNDA+iI0V+Y0iRV4vgwG/
fSe2Fbg9Zq8HqLylAJLb5SzmMvrGFwRNVYIfOoTqoKUQm5j8Uun6H9ONQW6sE7tF
KZf9LDhauOzWa8FaB9bT6R6dKf+G5R6r2l9SoquWz+JFGpsI1e04kfuXjG04kIye
083i3tX4UlrFw5BjXFs/sZBOfJROvusGj5x+VERgFCEK/XASIMyvCylWqQIDAQAB
o4ICLjCCAiowHQYDVR0OBBYEFO0clJSWzeypx6k484DfDsRrhbvKMB8GA1UdIwQY
MBaAFIRFgspwRxfrDJS+TYlBP0vC2LjlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEVXQ3luQkhGLXNNbEw1TmlVRV9TOExZdU9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83MzVlNDItYzYwOC00NmI2LThmNzAt
ZjIzZjY2ZjhkMjQyLzEvN1J5VWxKYk43S25IcVRqemdOOE94R3VGdThvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC83MzVlNDItYzYwOC00NmI2LThmNzAtZjIzZjY2ZjhkMjQy
LzEvaEVXQ3luQkhGLXNNbEw1TmlVRV9TOExZdU9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzAMBAIAATAGAwQBk04EMCME
AgACMB0DBwEqCRnAAAAwEgMHBioJGcABQAMHBioJGcABgDANBgkqhkiG9w0BAQsF
AAOCAQEAkp1Jb1IWFFZyUW0glycj3PxxldNeMdhKg8mfiPkSlmgYMldAKKQpSMf/
PDJeBqlzd7TzJ+02C5VbXVjwbVIoQABL6N7/PiQbPLm2Z6g/uiPFMeHQi/ggRoNX
nWik/AKGNZAKn0mFAq3VvJ5VLvSze4cBgh2icQcHNcCFyS/SZXzQWzK5XluN/jmL
9CmEhuuYluTiNCiqT/f4RkPAXvQKRU2A80W9r6kKhXy9pbHDoUKQkpA2YaTgdDXf
r/8KCzT3OPd37gmfM8xMpwl4wOAn+0R7P8OPwosUc6TUu20Fc9L0rn2qtJwSHjMO
pLx+G4Gd5Flm2fBygUeCoyZAPr1P6g==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:16 2025 by rpki-client