Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/CMIapAPwI9Oy6RrWqD-_Omd1--I.roa
File: CMIapAPwI9Oy6RrWqD-_Omd1--I.roa (raw, json)
Hash identifier: uTn4f9MelIYvwxrJKTyMIwj5z3reUlEA1ZHp+q0xAbc=
Subject key identifier: 08:C2:1A:A4:03:F0:23:D3:B2:E9:1A:D6:A8:3F:BF:3A:67:75:FB:E2
Certificate issuer: /CN=0ef47d753d25289fd98794974aa0536010567bd9
Certificate serial: 018C19BF1221EED4E9581C60292882CB4FC9
Authority key identifier: 0E:F4:7D:75:3D:25:28:9F:D9:87:94:97:4A:A0:53:60:10:56:7B:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/CMIapAPwI9Oy6RrWqD-_Omd1--I.roa
Signing time: Wed 29 Nov 2023 06:23:21 +0000
ROA not before: Wed 29 Nov 2023 06:23:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 104.129.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:19:bf:12:21:ee:d4:e9:58:1c:60:29:28:82:cb:4f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef47d753d25289fd98794974aa0536010567bd9
Validity
Not Before: Nov 29 06:23:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08c21aa403f023d3b2e91ad6a83fbf3a6775fbe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d9:97:c6:3a:33:38:f8:d6:71:49:0f:cf:be:
ef:54:fa:00:2f:bd:3e:1d:2d:0d:d9:57:be:02:8e:
0b:90:ab:a7:9b:cc:b4:ec:eb:9d:0e:dd:58:22:46:
98:c6:5d:04:06:63:a3:bb:e9:53:e6:00:76:42:7d:
6d:22:fa:75:be:4f:8f:42:54:9d:ea:17:5d:dc:30:
48:a4:7a:25:5f:2b:4f:af:f0:95:5e:de:f9:6c:b1:
b1:3a:d6:7e:bd:ac:9d:26:ab:c0:d3:47:8e:2f:3e:
4e:59:8d:e1:ea:6a:44:4d:f3:40:73:41:9a:eb:55:
1e:48:36:26:e0:6c:a5:3e:63:4e:7f:0d:6b:6b:3a:
44:65:6e:8c:38:60:8c:e3:12:58:8b:d4:f9:55:7e:
00:e7:5c:99:f4:b9:9d:42:59:dc:2a:4f:9c:b7:59:
e1:90:5d:fb:bf:fe:c8:2b:7f:12:89:77:f1:1a:92:
97:e3:5f:8b:99:be:e6:df:3a:ad:2d:d6:22:b3:06:
bc:5f:bb:9c:5a:01:21:10:90:74:75:6a:76:72:e6:
8f:8a:7f:1c:ea:f3:e8:a8:ac:4d:5d:b6:e0:36:12:
58:03:c2:37:0d:f1:a1:df:ea:9b:67:ba:76:8e:a4:
ff:81:17:83:64:27:52:d7:d3:07:ec:16:e4:8a:e1:
ea:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C2:1A:A4:03:F0:23:D3:B2:E9:1A:D6:A8:3F:BF:3A:67:75:FB:E2
X509v3 Authority Key Identifier:
keyid:0E:F4:7D:75:3D:25:28:9F:D9:87:94:97:4A:A0:53:60:10:56:7B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/CMIapAPwI9Oy6RrWqD-_Omd1--I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.129.174.0/24
Signature Algorithm: sha256WithRSAEncryption
42:1e:dc:28:9e:40:46:40:59:e1:03:9e:5c:15:2a:0e:0c:d9:
c2:a4:75:e7:bc:b5:a6:68:b8:ca:fb:cf:91:0c:a5:40:7b:44:
a7:40:37:9f:bd:6f:55:8b:1f:85:f2:62:49:2c:14:4c:8f:08:
30:f6:a6:d5:00:c6:37:2f:66:a1:c8:e1:69:71:ea:07:b1:7f:
14:6f:ff:e9:9f:da:11:8c:88:78:dc:fc:a8:32:e2:bd:7a:ff:
97:02:b2:1b:8b:14:b9:f9:79:15:bc:23:6c:61:71:13:8b:e4:
25:1c:0d:f1:fe:e1:4d:42:ad:3a:eb:3f:56:fd:8e:39:e4:26:
74:dc:27:86:1d:78:73:0f:9b:15:2c:91:df:c6:ed:00:b9:98:
f2:a8:53:48:ab:e9:15:e1:ce:14:bb:03:05:00:cc:64:af:b8:
ee:6d:14:3d:f9:c0:0e:b2:84:98:a6:81:71:39:c3:69:21:5d:
96:ee:20:65:20:fa:de:f7:fe:9c:f5:75:ce:5b:98:c7:73:79:
e7:82:91:9e:da:dd:e8:5c:22:06:06:66:55:6d:49:34:95:23:
89:5f:b2:ce:53:8c:9a:d7:68:d8:4a:d2:bd:5a:d7:af:5c:8f:
74:41:f0:f0:92:18:00:2f:8d:95:4e:bd:3f:cc:59:26:79:36:
ac:9e:b5:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYwZvxIh7tTpWBxgKSiCy0/JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZjQ3ZDc1M2QyNTI4OWZkOTg3OTQ5NzRhYTA1MzYwMTA1
NjdiZDkwHhcNMjMxMTI5MDYyMzIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOGMyMWFhNDAzZjAyM2QzYjJlOTFhZDZhODNmYmYzYTY3NzVmYmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtmXxjozOPjWcUkPz77vVPoAL70+
HS0N2Ve+Ao4LkKunm8y07OudDt1YIkaYxl0EBmOju+lT5gB2Qn1tIvp1vk+PQlSd
6hdd3DBIpHolXytPr/CVXt75bLGxOtZ+vaydJqvA00eOLz5OWY3h6mpETfNAc0Ga
61UeSDYm4GylPmNOfw1razpEZW6MOGCM4xJYi9T5VX4A51yZ9LmdQlncKk+ct1nh
kF37v/7IK38SiXfxGpKX41+Lmb7m3zqtLdYiswa8X7ucWgEhEJB0dWp2cuaPin8c
6vPoqKxNXbbgNhJYA8I3DfGh3+qbZ7p2jqT/gReDZCdS19MH7BbkiuHqbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAjCGqQD8CPTsuka1qg/vzpndfviMB8GA1UdIwQY
MBaAFA70fXU9JSif2YeUl0qgU2AQVnvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHZSOWRUMGxLSl9aaDVTWFNxQlRZQkJXZTlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9kZDhiYzUtODZlZi00MTM1LWJmMWYt
YTRjOGQ5ODk1YTQzLzEvQ01JYXBBUHdJOU95NlJyV3FELV9PbWQxLS1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9kZDhiYzUtODZlZi00MTM1LWJmMWYtYTRjOGQ5ODk1YTQz
LzEvRHZSOWRUMGxLSl9aaDVTWFNxQlRZQkJXZTlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIGuMA0G
CSqGSIb3DQEBCwUAA4IBAQBCHtwonkBGQFnhA55cFSoODNnCpHXnvLWmaLjK+8+R
DKVAe0SnQDefvW9Vix+F8mJJLBRMjwgw9qbVAMY3L2ahyOFpceoHsX8Ub//pn9oR
jIh43PyoMuK9ev+XArIbixS5+XkVvCNsYXETi+QlHA3x/uFNQq066z9W/Y455CZ0
3CeGHXhzD5sVLJHfxu0AuZjyqFNIq+kV4c4UuwMFAMxkr7jubRQ9+cAOsoSYpoFx
OcNpIV2W7iBlIPre9/6c9XXOW5jHc3nngpGe2t3oXCIGBmZVbUk0lSOJX7LOU4ya
12jYStK9WtevXI90QfDwkhgAL42VTr0/zFkmeTasnrU6
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:10 2025 by rpki-client