Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/2fbFq8kyk43x6Ucz7ZKZPid8O4o.roa
File: 2fbFq8kyk43x6Ucz7ZKZPid8O4o.roa (raw, json)
Hash identifier: WzpNLJxUt7L9dbusnn4NXMFnfKPxBuft77jSYSoEem4=
Subject key identifier: D9:F6:C5:AB:C9:32:93:8D:F1:E9:47:33:ED:92:99:3E:27:7C:3B:8A
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 01828B9CC6614481ED96D06E957B0D5C12DC
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/2fbFq8kyk43x6Ucz7ZKZPid8O4o.roa
Signing time: Thu 11 Aug 2022 06:34:43 +0000
ROA not before: Thu 11 Aug 2022 06:34:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202356
IP address blocks: 147.234.87.0/24 maxlen: 24
147.234.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8b:9c:c6:61:44:81:ed:96:d0:6e:95:7b:0d:5c:12:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Aug 11 06:34:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9f6c5abc932938df1e94733ed92993e277c3b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:81:da:5c:6b:cf:b0:ba:b3:db:11:10:e6:06:
26:8d:42:7b:90:de:a5:ef:8a:e9:87:49:4b:53:78:
05:62:9d:bd:e2:6e:fa:0f:16:8b:d9:c8:77:ee:00:
f9:ca:f1:d8:ef:eb:98:f0:8f:ab:4b:23:db:b1:fb:
f2:f8:b4:e9:2d:89:1e:ad:c1:30:62:31:4c:02:1a:
3e:f3:e7:9f:de:f0:1f:99:22:eb:87:ce:7b:2e:3b:
e7:80:9d:9b:f9:5f:03:2b:44:4f:7b:d4:46:2f:40:
0f:fb:ae:5f:aa:9b:a2:06:61:d1:f1:97:98:53:a6:
aa:c3:97:58:03:f6:1a:85:74:69:6b:d9:40:67:f5:
4a:d4:67:7c:b0:17:05:19:a3:b0:d3:b6:9e:d7:c1:
96:ce:d3:75:bc:c4:64:65:f5:34:ac:f8:87:36:35:
c5:d2:85:01:e8:ed:7f:0c:25:ed:a0:7f:e1:92:69:
5f:d7:82:6d:e9:25:85:24:69:da:2c:31:36:c0:31:
e7:de:75:a8:a8:11:24:f3:59:6a:24:45:a1:e8:fa:
58:98:eb:3a:47:ab:12:45:1f:d9:ba:dc:e6:20:b2:
77:bc:6e:75:96:62:ae:6c:a3:f0:48:82:15:5a:83:
95:c4:3b:5d:71:75:42:f8:38:32:a9:bd:b2:44:33:
58:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F6:C5:AB:C9:32:93:8D:F1:E9:47:33:ED:92:99:3E:27:7C:3B:8A
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/2fbFq8kyk43x6Ucz7ZKZPid8O4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.234.32.0/24
147.234.87.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:a2:62:0e:6d:a1:29:e0:4e:cc:9e:7a:38:27:f4:da:cc:5c:
3a:a6:09:11:db:95:8d:60:cc:37:f2:a2:ef:4d:c6:25:cd:94:
51:48:b2:32:00:86:5d:f3:62:a9:ad:3e:df:ac:b7:cd:6f:17:
e8:e6:36:37:6f:14:41:37:0a:0f:ee:49:80:65:a1:f2:f2:0e:
da:65:80:0e:6f:aa:b0:b7:00:11:e0:f0:62:06:68:4b:ec:6b:
70:4f:e4:a2:cf:e1:2b:01:72:a7:13:31:a4:04:4b:f9:27:39:
4a:9c:88:d0:2b:b7:da:57:34:d5:6d:bb:15:a4:a5:49:7a:b5:
f4:16:cf:24:02:73:ec:75:bf:0a:de:4c:5a:03:30:c0:91:e1:
a8:a7:38:f0:fe:18:38:9c:99:51:c6:71:bd:f4:11:5b:ad:ae:
24:d9:2f:b1:0d:13:4d:71:7c:4f:2a:10:d8:83:8b:74:6c:49:
db:0e:35:7b:f5:9f:87:cf:e7:bc:68:e4:c5:40:37:6f:30:97:
ca:bf:41:70:1c:c8:73:b2:9e:8a:dc:5e:92:14:44:d6:85:fd:
2a:bf:77:11:e8:bd:61:a8:1f:8d:d7:ad:1b:5f:b2:d3:7f:53:
57:94:9c:53:28:18:c1:59:8e:35:33:66:4a:96:b0:79:3d:54:
ba:27:90:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:56 2024 by rpki-client on console-ams.rpki-client.org