Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/NS4yLzQa2HV9GHtSgiI4oqCCZwM.roa
File: NS4yLzQa2HV9GHtSgiI4oqCCZwM.roa (raw, json)
Hash identifier: dX4XLLT4dr+kgyipa4esphH6JTZqGL4h0bRap881mwo=
Subject key identifier: 35:2E:32:2F:34:1A:D8:75:7D:18:7B:52:82:22:38:A2:A0:82:67:03
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 018BB82E3279959C09B9ADD8D4C5D9F05D4F
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/NS4yLzQa2HV9GHtSgiI4oqCCZwM.roa
Signing time: Fri 10 Nov 2023 07:41:57 +0000
ROA not before: Fri 10 Nov 2023 07:41:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 141.226.240.0/24 maxlen: 24
141.226.246.0/24 maxlen: 24
141.226.244.0/24 maxlen: 24
141.226.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b8:2e:32:79:95:9c:09:b9:ad:d8:d4:c5:d9:f0:5d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Nov 10 07:41:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=352e322f341ad8757d187b52822238a2a0826703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:0e:3f:b7:c0:06:79:4a:bf:cd:c0:b7:0a:a9:
4f:ad:d1:35:0f:20:a5:86:af:31:c4:5c:9f:31:ee:
bb:95:ab:7f:9d:c8:cb:38:48:f5:a8:fb:2d:3a:57:
4e:72:6b:d6:39:50:db:62:64:df:8b:c0:ca:53:2d:
a0:3f:b1:8d:62:ea:63:43:90:55:5d:67:5b:96:e5:
81:ea:f2:c8:8b:37:33:bb:38:d6:ca:c4:4d:eb:68:
c8:e4:80:95:3b:21:98:41:ca:09:01:c8:be:ed:23:
0e:38:fb:a5:2f:97:ad:70:cc:a0:81:05:58:fc:2f:
22:fd:0b:4c:74:0e:d0:5b:be:53:aa:42:89:20:d7:
37:ad:84:15:28:79:3a:08:46:2f:4d:45:6d:1d:12:
84:44:17:7b:43:46:2e:4c:7e:17:8e:ce:4a:73:93:
05:e1:64:6d:30:ce:96:8b:92:60:90:e1:e3:8d:a4:
33:e9:6c:5f:63:34:ff:44:73:84:e7:92:cb:b8:7a:
da:32:f6:bc:de:d2:a1:d8:3d:17:78:c1:0b:80:8a:
b5:be:4e:19:b5:0b:b6:a0:bb:32:05:53:7b:c7:4f:
18:f1:24:07:81:7c:d2:df:92:15:11:16:43:56:a7:
77:9f:a6:d5:11:c9:49:46:44:fd:de:79:a7:46:a9:
1a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2E:32:2F:34:1A:D8:75:7D:18:7B:52:82:22:38:A2:A0:82:67:03
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/NS4yLzQa2HV9GHtSgiI4oqCCZwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.240.0/24
141.226.244.0/24
141.226.246.0/23
Signature Algorithm: sha256WithRSAEncryption
15:db:c2:85:fc:ab:ea:1d:0d:3e:30:07:ef:b5:00:e9:7a:c3:
e5:b0:9e:d7:21:f6:32:cc:62:1b:3e:49:47:b5:b1:c8:72:85:
26:f3:19:71:21:3a:79:e8:ab:f9:94:c9:22:b6:55:ab:35:ec:
a4:f8:e2:b6:52:b1:f4:43:4e:fe:e8:45:99:30:7d:e5:89:31:
57:ce:bc:5e:fc:28:0d:25:cb:df:1c:14:d4:09:cf:7d:da:b8:
81:13:b6:a0:a5:ed:64:1a:41:6d:da:18:de:5e:4c:fb:12:cb:
5a:f4:b9:24:06:2e:48:c4:3b:f0:8a:63:99:af:ba:68:2c:f9:
2a:04:9d:b1:43:aa:2a:d3:be:77:0a:b4:2c:9b:44:6f:d0:15:
53:05:3b:3b:24:8a:13:06:d3:9b:d6:6c:db:17:9d:ce:0f:19:
d5:9f:28:1c:53:7e:a8:1f:2b:7f:48:00:c4:a2:ae:ac:83:fa:
ae:79:32:98:f1:18:1f:39:bf:ae:ce:01:17:0a:cf:b0:98:18:
c2:66:14:ff:2f:eb:d3:df:bd:93:f1:bd:68:e3:b0:af:52:11:
f9:37:99:7f:02:47:ea:f0:eb:28:88:f4:54:4b:23:70:7f:5a:
f9:ce:0a:cd:35:4e:7b:81:11:7b:c6:c0:ba:26:eb:8b:a2:e8:
b1:da:02:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:57 2025 by rpki-client