Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/I6cvB7M2BWO36Xbdjp1ORFgWPJk.roa
File: I6cvB7M2BWO36Xbdjp1ORFgWPJk.roa (raw, json)
Hash identifier: mJuy6t+X/xnvGcYUpflki5JPpxbUi43+NX+wb5X6/Z0=
Subject key identifier: 23:A7:2F:07:B3:36:05:63:B7:E9:76:DD:8E:9D:4E:44:58:16:3C:99
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 0188511F498629F2E776E6B8C9EE06B3C8D4
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/I6cvB7M2BWO36Xbdjp1ORFgWPJk.roa
Signing time: Thu 25 May 2023 04:16:24 +0000
ROA not before: Thu 25 May 2023 04:16:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 141.226.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:51:1f:49:86:29:f2:e7:76:e6:b8:c9:ee:06:b3:c8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: May 25 04:16:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23a72f07b3360563b7e976dd8e9d4e4458163c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:57:b8:19:83:fb:a8:5e:ae:52:b5:30:86:75:
b6:60:f4:e2:4a:11:07:fa:c0:c9:25:ff:1c:6c:a0:
1b:a4:77:3a:e8:97:7a:ee:00:2c:27:55:b7:cc:b3:
af:31:af:2a:ea:3c:da:08:ff:63:ce:53:f1:0c:65:
e7:04:28:e8:66:ca:7f:e7:0e:9b:7d:d0:f8:06:1f:
ea:92:61:f8:91:18:33:f7:a6:31:7b:82:57:56:c4:
54:66:36:a2:14:e7:99:76:1a:bc:54:72:cb:67:b0:
30:b9:a6:45:3c:6b:ef:b6:4b:31:f8:fa:4a:13:05:
57:5b:5f:47:8c:1f:69:0a:f3:67:d3:22:a8:0d:f4:
4b:98:1f:72:13:9d:2b:37:f1:fa:83:36:f3:fb:2e:
c2:9b:59:ab:96:9d:58:a2:6c:94:6a:0d:36:3e:85:
70:be:98:e9:ac:5c:2b:52:5c:76:46:63:ad:56:12:
99:1b:88:fc:13:64:49:e6:ce:a3:47:74:4a:5e:d4:
3d:1e:19:8c:da:bf:fb:ed:2f:6f:23:5e:d9:f9:39:
24:3a:08:fb:61:68:88:77:35:46:29:1c:dd:e5:ba:
cc:dd:6d:1b:13:7e:db:c8:79:8a:44:37:66:59:33:
28:63:45:4f:f8:c6:92:5f:b7:d8:64:56:16:be:fe:
b6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A7:2F:07:B3:36:05:63:B7:E9:76:DD:8E:9D:4E:44:58:16:3C:99
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/I6cvB7M2BWO36Xbdjp1ORFgWPJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.246.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:ac:f4:a9:35:be:11:4d:0a:b2:bc:a0:4b:fb:d3:3f:c6:cb:
ad:bc:fb:18:5f:bd:ea:a5:1d:9f:3f:75:81:80:7f:f1:63:03:
75:e3:14:6b:29:f4:d7:53:32:84:a1:5e:79:cd:13:72:8d:71:
65:8a:51:c8:c4:8c:c0:ea:63:44:de:3a:6d:55:7d:89:8a:f0:
1d:2a:31:b6:d2:5b:c4:56:7b:80:e0:30:00:42:3a:d1:f3:6e:
50:0b:57:ae:cd:a2:dc:80:86:27:1c:de:84:28:8f:dd:f3:d0:
48:21:b7:50:c2:e5:6f:13:c3:74:b4:7a:fb:d8:85:67:a0:ed:
e3:95:2d:a3:4b:bb:d9:4c:6a:8c:a4:44:d8:be:bc:e5:8a:9a:
02:af:bc:f0:c6:84:13:7b:89:6b:17:48:26:34:b1:43:ef:d8:
65:dd:af:3a:16:b0:7c:6b:44:81:69:9b:39:ba:69:30:6e:85:
3a:3e:f1:66:15:22:02:05:f9:90:8c:f9:28:bc:e1:8a:a5:c4:
9e:83:dd:52:a2:a5:cb:b5:fd:c1:b7:2a:e1:68:19:4c:d6:3e:
96:83:78:92:4b:7e:0b:94:f8:3a:82:19:55:f7:94:e3:3f:59:
6f:5f:1d:40:2e:f7:77:9f:e5:fd:e9:10:0d:d9:3b:d4:0d:58:
78:3c:14:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:35 2025 by rpki-client