Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/_p6GFxdFwxW9keyCBqDc4UPxIZ8.roa
File: _p6GFxdFwxW9keyCBqDc4UPxIZ8.roa (raw, json)
Hash identifier: XZJw3eMtmicNtSyja4SNcbV8rqcJ5c3yespYiZlTbME=
Subject key identifier: FE:9E:86:17:17:45:C3:15:BD:91:EC:82:06:A0:DC:E1:43:F1:21:9F
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 018B471FC60084C4798514B0D3167C223AB7
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/_p6GFxdFwxW9keyCBqDc4UPxIZ8.roa
Signing time: Thu 19 Oct 2023 08:49:06 +0000
ROA not before: Thu 19 Oct 2023 08:49:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 141.226.240.0/24 maxlen: 24
141.226.246.0/24 maxlen: 24
141.226.244.0/24 maxlen: 24
141.226.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:47:1f:c6:00:84:c4:79:85:14:b0:d3:16:7c:22:3a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Oct 19 08:49:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe9e86171745c315bd91ec8206a0dce143f1219f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2b:fb:41:11:5b:4c:78:92:fd:02:e7:e7:b6:
50:63:64:b7:77:a0:f6:4e:4b:e6:7a:65:dc:00:fe:
08:62:1e:df:f8:16:ba:f8:21:df:73:86:b1:4a:13:
b9:b7:3f:a9:e1:da:67:a5:d2:bd:b9:5d:70:a0:f8:
d8:a4:a4:62:cd:ca:85:c9:b6:78:1e:95:65:f9:4e:
54:be:f3:71:44:b0:35:61:4b:a0:e4:7c:80:e9:7d:
28:e5:82:4e:85:dc:11:e7:68:a7:92:7e:48:9a:67:
8c:5d:37:48:c6:5e:0f:df:9a:1f:94:f5:d7:19:35:
c5:26:df:2b:59:9d:be:c3:d5:e0:39:04:1a:ff:1b:
04:d6:a5:87:de:9e:c5:ae:cc:a4:a6:db:61:64:57:
4c:e1:ce:93:2c:e3:47:91:12:02:b3:34:86:45:bf:
db:a5:47:f2:09:9b:23:bb:ef:8c:83:91:e0:8a:d2:
f6:4d:da:6e:cc:a6:30:52:65:5e:fb:e0:c1:ad:32:
d8:9f:bb:fd:dc:84:dd:77:40:ba:e8:7e:8f:a8:a9:
a2:fa:34:15:bd:f1:fa:06:5a:17:cc:26:69:72:89:
4e:8d:a6:d0:ee:d6:db:2e:9b:0d:ba:63:75:04:38:
cc:28:f6:8d:76:a1:61:27:08:a9:65:cf:28:47:14:
da:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9E:86:17:17:45:C3:15:BD:91:EC:82:06:A0:DC:E1:43:F1:21:9F
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/_p6GFxdFwxW9keyCBqDc4UPxIZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.240.0/24
141.226.244.0/24
141.226.246.0/23
Signature Algorithm: sha256WithRSAEncryption
01:a6:7b:ee:07:b9:5e:77:d5:33:b7:50:6d:07:6a:23:37:4b:
93:62:78:89:83:b8:8c:6e:71:4d:f0:72:e9:59:47:8d:0f:f9:
75:9e:2b:99:eb:ad:12:df:63:6d:94:b6:4f:99:bd:3f:96:a9:
c5:c0:17:de:d6:b6:aa:a3:54:fe:ae:76:f8:f3:42:ff:25:68:
ae:ac:5b:95:09:89:59:0d:82:6f:05:34:0b:e6:4e:9d:36:72:
65:0b:13:a6:b0:27:0b:12:26:70:b5:9e:9c:88:c0:75:90:ba:
22:d9:49:e0:cc:1a:cb:ff:ab:8d:ea:f9:ec:6b:85:e5:cc:f6:
c5:67:09:0e:59:e6:74:00:f6:07:be:f1:e5:e4:72:91:45:ef:
93:04:63:49:dd:b3:c2:0b:43:56:e8:72:9c:9c:d1:b6:f2:fa:
a5:77:b5:2e:6a:e8:db:a1:fa:a9:2e:fe:b6:cf:b3:ce:54:2c:
e8:04:db:7e:15:81:19:34:56:7b:e1:dd:77:e0:47:59:3c:a2:
2d:74:6e:b7:55:a4:db:26:33:5c:2f:90:2d:88:87:6a:27:f6:
ec:c6:6b:6c:27:08:d3:88:63:6e:7b:99:a7:8f:72:38:1f:44:
5b:e5:8b:51:e0:4d:7e:cd:6d:c7:19:13:9c:d7:44:e4:5e:d7:
cd:65:71:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:21 2025 by rpki-client