Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/ti4LBCH5QDvaaGaBjhmO39cbBiY.roa
File: ti4LBCH5QDvaaGaBjhmO39cbBiY.roa (raw, json)
Hash identifier: gs8pCfS4QQcoxLztzvXY+lmQKiGqpe4D6pbrB89lM+M=
Subject key identifier: B6:2E:0B:04:21:F9:40:3B:DA:68:66:81:8E:19:8E:DF:D7:1B:06:26
Certificate issuer: /CN=50741158f3ed65bee1bde12f34f895afb0dd50d5
Certificate serial: 116FE76E
Authority key identifier: 50:74:11:58:F3:ED:65:BE:E1:BD:E1:2F:34:F8:95:AF:B0:DD:50:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/ti4LBCH5QDvaaGaBjhmO39cbBiY.roa
Signing time: Sun 02 Jan 2022 12:56:16 +0000
ROA not before: Sun 02 Jan 2022 12:56:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6810
IP address blocks: 147.235.59.0/24 maxlen: 24
147.235.70.0/24 maxlen: 24
147.235.70.0/23 maxlen: 23
147.235.71.0/24 maxlen: 24
147.235.0.0/16 maxlen: 21
147.235.31.0/24 maxlen: 24
147.235.180.0/24 maxlen: 24
147.235.180.0/23 maxlen: 23
147.235.181.0/24 maxlen: 24
147.235.180.0/22 maxlen: 22
147.235.182.0/24 maxlen: 24
147.235.182.0/23 maxlen: 23
147.235.183.0/24 maxlen: 24
147.235.192.0/19 maxlen: 19
147.235.192.0/22 maxlen: 22
147.235.192.0/24 maxlen: 24
147.235.196.0/22 maxlen: 22
147.235.194.0/24 maxlen: 24
147.235.199.0/24 maxlen: 24
147.235.194.0/23 maxlen: 24
147.235.195.0/24 maxlen: 24
147.235.193.0/24 maxlen: 24
147.235.198.0/24 maxlen: 24
147.235.196.0/23 maxlen: 24
147.235.197.0/24 maxlen: 24
147.235.198.0/23 maxlen: 24
147.235.196.0/24 maxlen: 24
147.235.96.0/22 maxlen: 22
147.235.97.0/24 maxlen: 24
147.235.96.0/24 maxlen: 24
147.235.96.0/23 maxlen: 23
147.235.98.0/23 maxlen: 23
147.235.98.0/24 maxlen: 24
147.235.99.0/24 maxlen: 24
147.235.111.0/24 maxlen: 24
147.235.202.0/23 maxlen: 24
147.235.206.0/24 maxlen: 24
147.235.206.0/23 maxlen: 24
147.235.200.0/21 maxlen: 21
147.235.200.0/22 maxlen: 22
147.235.201.0/24 maxlen: 24
147.235.202.0/24 maxlen: 24
147.235.203.0/24 maxlen: 24
147.235.204.0/24 maxlen: 24
147.235.204.0/23 maxlen: 24
147.235.204.0/22 maxlen: 22
147.235.205.0/24 maxlen: 24
147.235.200.0/24 maxlen: 24
147.235.200.0/23 maxlen: 24
147.235.211.0/24 maxlen: 24
147.235.213.0/24 maxlen: 24
147.235.208.0/22 maxlen: 23
147.235.208.0/24 maxlen: 24
147.235.209.0/24 maxlen: 24
147.235.210.0/24 maxlen: 24
147.235.207.0/24 maxlen: 24
147.235.212.0/23 maxlen: 23
147.235.212.0/24 maxlen: 24
147.235.212.0/22 maxlen: 23
147.235.215.0/24 maxlen: 24
147.235.216.0/24 maxlen: 24
147.235.216.0/22 maxlen: 23
147.235.214.0/24 maxlen: 24
147.235.218.0/23 maxlen: 23
147.235.218.0/24 maxlen: 24
147.235.219.0/24 maxlen: 24
147.235.216.0/21 maxlen: 21
147.235.217.0/24 maxlen: 24
147.235.222.0/23 maxlen: 23
147.235.222.0/24 maxlen: 24
147.235.220.0/22 maxlen: 22
147.235.223.0/24 maxlen: 24
147.235.220.0/24 maxlen: 24
147.235.220.0/23 maxlen: 23
147.235.221.0/24 maxlen: 24
147.235.226.0/24 maxlen: 24
2a06:c701::/32 maxlen: 32
2a06:c701:1000::/36 maxlen: 36
2a06:c700:2000::/36 maxlen: 36
2a06:c700::/32 maxlen: 48
2a06:c700::/44 maxlen: 44
2a06:c700::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 292546414 (0x116fe76e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50741158f3ed65bee1bde12f34f895afb0dd50d5
Validity
Not Before: Jan 2 12:56:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b62e0b0421f9403bda6866818e198edfd71b0626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:17:12:38:ef:69:47:83:f3:48:8e:2a:f3:76:
e8:b5:11:05:2e:31:6f:ea:8c:39:27:35:fe:38:16:
90:87:c7:6f:d9:9a:93:a4:d7:8f:c3:c3:70:b8:4d:
af:ae:34:0e:6c:25:68:df:d6:0d:9d:da:35:b6:8a:
54:ae:c8:9b:4c:2d:77:ba:83:99:b2:34:5f:a3:c6:
87:31:55:ef:73:c0:b5:ae:83:0a:ad:8f:0e:e8:5e:
14:17:b8:2a:0e:54:72:fb:1a:a5:e5:c4:ba:14:fa:
76:5d:d4:89:96:bc:2d:ce:a0:3b:ad:f7:83:e4:98:
9b:b0:66:48:39:96:43:37:4a:f9:c1:61:b3:5d:6f:
b2:91:54:f1:57:af:f0:c1:2d:bf:c7:37:00:6c:f0:
ad:21:12:59:b5:1c:73:fa:4a:9b:ac:fa:69:b9:88:
35:d6:bb:b2:e6:fe:95:19:96:ae:bb:a6:e8:e4:0b:
4b:a4:d6:a0:cb:e2:07:a2:f4:b6:71:23:7d:46:b6:
15:ae:99:59:55:d8:3e:ce:03:c7:11:94:56:6e:b7:
23:81:9a:0b:2c:6b:58:73:dd:00:bc:10:77:08:d5:
19:2c:b4:48:7c:48:26:0e:89:5f:9d:90:0b:32:da:
8f:81:6b:06:ed:89:e1:24:f9:1b:e4:ac:b1:c6:4c:
6c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:2E:0B:04:21:F9:40:3B:DA:68:66:81:8E:19:8E:DF:D7:1B:06:26
X509v3 Authority Key Identifier:
keyid:50:74:11:58:F3:ED:65:BE:E1:BD:E1:2F:34:F8:95:AF:B0:DD:50:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/ti4LBCH5QDvaaGaBjhmO39cbBiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.235.0.0/16
IPv6:
2a06:c700::/29
Signature Algorithm: sha256WithRSAEncryption
7c:4d:36:29:82:17:c0:74:10:cf:2c:22:56:79:20:ac:b8:52:
fa:52:db:05:b0:60:b9:75:f8:64:08:20:55:f2:71:30:1b:78:
61:9e:03:c9:f9:c9:a3:b9:a7:76:71:30:37:e8:2a:a8:12:21:
20:f1:d2:a7:95:25:e7:ca:ac:be:63:fc:2b:f6:51:9f:39:7a:
1e:34:81:5a:53:1c:52:23:bb:c9:53:c1:93:0c:d1:57:f6:cb:
c1:90:1f:e7:cc:d6:e5:73:59:db:d8:1e:1d:23:dd:18:5f:ef:
2c:f5:de:aa:5b:5b:6c:b6:a8:96:09:b2:c3:d6:1e:bd:64:76:
e5:30:e6:0f:88:0c:17:92:c6:80:c3:56:8f:ee:6f:9d:fa:5f:
93:7d:fd:d2:75:81:a3:dd:4f:7e:3a:ca:86:51:a5:a5:0f:52:
12:08:4a:53:fc:84:e9:90:d0:29:3d:63:42:0d:fd:ed:cd:9c:
05:a0:ae:98:e0:db:a3:35:12:39:af:19:e7:2e:75:98:8a:b7:
82:ec:b5:83:26:50:9d:d4:ce:22:bc:f5:fa:76:51:e6:60:89:
16:01:c6:e3:88:4a:90:99:b3:0b:44:7e:fb:86:fc:04:9d:0f:
f1:dd:9b:cd:2f:8e:fd:93:ab:2f:62:41:23:bb:10:c7:35:b1:
47:30:2f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:18 2024 by rpki-client on console-fra.rpki-client.org