Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/rqiOTULnHSqX8c18y5yJbEMgaW0.roa
File: rqiOTULnHSqX8c18y5yJbEMgaW0.roa (raw, json)
Hash identifier: wbSAagp+VHruYsKTMB16B8S3uHeWV30fd/Lup0Jv8w4=
Subject key identifier: AE:A8:8E:4D:42:E7:1D:2A:97:F1:CD:7C:CB:9C:89:6C:43:20:69:6D
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 018C2C7A9A901EE106494108E0C6BB2B0EDF
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/rqiOTULnHSqX8c18y5yJbEMgaW0.roa
Signing time: Sat 02 Dec 2023 21:41:21 +0000
ROA not before: Sat 02 Dec 2023 21:41:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42689
IP address blocks: 141.226.244.0/24 maxlen: 24
141.226.247.0/24 maxlen: 24
213.137.80.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2c:7a:9a:90:1e:e1:06:49:41:08:e0:c6:bb:2b:0e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Dec 2 21:41:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aea88e4d42e71d2a97f1cd7ccb9c896c4320696d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ad:fa:78:10:5c:37:b6:23:8d:e7:65:4b:65:
43:66:30:bf:b2:84:e9:2c:da:93:d3:e8:e1:eb:dd:
d1:ea:44:d3:26:6e:7b:41:6e:ba:19:aa:35:99:26:
86:39:77:d2:a7:3f:a0:ac:74:97:f2:43:3e:61:da:
8a:49:e0:a1:cb:fc:32:2d:69:9b:36:6f:df:5d:a5:
f2:e6:77:20:f5:0f:00:62:6a:12:83:bd:d0:00:73:
16:77:0a:51:0a:c7:68:b1:7d:44:a0:2a:3e:ed:4d:
bf:18:be:20:c9:d0:61:df:ef:38:76:a7:db:ed:a5:
6e:db:8d:cf:6b:d1:ea:38:d8:c4:40:1d:35:41:1f:
5b:6d:cb:9f:12:b7:0a:f8:06:16:a9:6c:33:aa:33:
46:24:3e:82:01:24:74:86:71:c0:67:93:72:1c:0b:
7b:b0:9d:86:a7:90:67:77:f5:5d:e9:32:f7:67:59:
13:74:d0:3c:c0:bc:96:a4:c5:98:33:ea:b9:0b:15:
bb:22:5e:1f:06:27:0e:71:c2:d7:c2:5e:67:7d:a6:
7d:08:2a:25:ed:5c:69:05:0d:fa:4f:12:70:81:22:
24:8d:16:37:6d:60:96:ba:3e:60:4a:85:6b:53:fb:
c5:d7:1f:56:e3:71:cd:a6:aa:24:61:dd:7c:67:7d:
49:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A8:8E:4D:42:E7:1D:2A:97:F1:CD:7C:CB:9C:89:6C:43:20:69:6D
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/rqiOTULnHSqX8c18y5yJbEMgaW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.244.0/24
141.226.247.0/24
213.137.80.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:c3:d3:07:03:94:4a:d4:e3:4d:6b:79:01:5f:b6:4a:4c:ca:
d7:46:a0:93:9d:b0:78:60:a4:c2:94:f2:aa:fe:81:5e:0e:7e:
c6:f9:95:f3:e7:c1:e1:27:c3:99:8f:00:98:68:95:56:62:2f:
93:a8:bf:ce:ae:0c:1e:b5:6f:08:c2:fe:9c:70:93:f6:82:da:
58:ec:f0:7e:3a:14:0a:15:8a:83:ce:16:ee:55:1a:62:70:75:
f9:74:1e:b0:58:1f:ef:a7:d4:6e:cc:4e:d9:41:de:4c:5d:33:
46:22:ae:84:dc:73:6d:a7:de:1a:8c:41:c8:5a:1c:ea:cd:08:
c9:c2:bf:5e:94:be:7c:72:98:c6:4b:d2:ab:1f:98:68:a2:b6:
c9:81:30:e2:aa:bf:58:cf:58:2c:2f:85:31:63:5a:da:7c:6d:
21:cc:28:b3:7e:99:c2:52:e4:1f:2c:f9:6c:63:f0:0d:38:67:
fc:0e:4e:b4:11:60:ec:5f:ce:75:03:19:12:e1:2d:1e:fb:c9:
41:b8:e5:3e:9c:f2:f1:38:63:7a:ab:3a:0c:e7:10:ef:ac:01:
fd:4e:92:a6:91:5b:c7:cb:13:2b:62:83:83:2c:dd:9b:13:5b:
55:e4:a8:40:a4:3a:78:03:6a:3e:cb:c9:da:0a:84:15:55:80:
64:25:0b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:58 2025 by rpki-client