Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/2nHiGTpJVISFBmz5mZjCI4POcBM.roa
File: 2nHiGTpJVISFBmz5mZjCI4POcBM.roa (raw, json)
Hash identifier: ZxOBkyF/g0MOUprxAEsRjotxSr7XMevJME1LdEHLLH8=
Subject key identifier: DA:71:E2:19:3A:49:54:84:85:06:6C:F9:99:98:C2:23:83:CE:70:13
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 0185730CD74AE92AE73EE21B170E7A8FC62F
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/2nHiGTpJVISFBmz5mZjCI4POcBM.roa
Signing time: Mon 02 Jan 2023 15:14:59 +0000
ROA not before: Mon 02 Jan 2023 15:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207444
IP address blocks: 147.234.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:0c:d7:4a:e9:2a:e7:3e:e2:1b:17:0e:7a:8f:c6:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Jan 2 15:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da71e2193a49548485066cf99998c22383ce7013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:22:a3:d2:a6:c4:b8:38:bb:97:c0:30:3e:43:
53:e4:6e:1d:65:95:8a:0d:2e:af:9c:d3:11:dc:dc:
b9:d7:c9:6f:d2:e8:fb:3f:fe:6f:29:4f:68:03:19:
76:48:d7:bb:01:48:f9:c5:6c:f2:e4:c8:c3:16:c5:
93:ec:a8:ab:d7:2d:cd:71:69:d4:55:7b:df:5c:a2:
2b:72:68:5d:8a:1c:89:16:d7:1d:d5:04:bd:be:b1:
88:b3:ad:d4:d7:2a:cf:73:db:37:32:c9:90:07:7c:
4d:d9:b7:ea:09:85:b3:b9:18:df:b6:78:9b:0f:1f:
63:d4:83:a8:4a:b5:d9:ab:b9:91:aa:d7:58:99:49:
c1:70:ad:c2:d7:76:94:25:1f:41:6d:fa:c6:9f:cd:
82:16:18:d4:b9:58:4e:cf:46:7d:f5:7c:21:60:ee:
61:b3:79:e3:38:cf:85:7e:41:ae:67:b5:5e:5e:12:
e0:41:05:35:bf:5d:a7:04:b2:5f:0d:c8:74:05:be:
1e:9d:65:a3:91:e2:e1:01:ec:19:0a:38:05:ec:75:
df:a8:1a:22:ca:2c:16:19:61:2d:09:85:71:48:ec:
30:4a:ba:8d:c7:38:a9:b7:45:6d:df:b4:29:d8:9f:
e0:c4:5e:88:ac:46:0c:66:22:ce:d2:c7:d3:b0:a8:
1f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:71:E2:19:3A:49:54:84:85:06:6C:F9:99:98:C2:23:83:CE:70:13
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/2nHiGTpJVISFBmz5mZjCI4POcBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.234.81.0/24
Signature Algorithm: sha256WithRSAEncryption
45:5f:2e:a2:d3:f0:a7:0a:29:c8:97:07:17:dd:f9:1c:de:34:
24:08:6a:03:d1:ef:21:ca:5c:a9:73:95:cf:fd:1c:02:eb:00:
02:47:97:e7:58:27:02:26:d9:9e:e3:43:4b:10:5b:16:77:8b:
a6:b6:d8:4a:4a:d8:0b:f5:d0:d1:24:83:f5:00:7a:8d:d9:5e:
e0:de:cf:ad:78:4c:a8:49:7f:36:ea:ec:56:fc:28:bb:99:0a:
24:75:29:22:63:ed:64:12:2b:59:8b:27:09:f8:bc:36:48:4f:
b4:b2:89:f7:fc:31:bc:7d:a4:5f:03:98:68:33:ff:26:77:c9:
85:21:22:4c:18:b9:c0:f1:be:b8:71:d2:14:cd:f1:32:c3:1d:
55:30:cb:18:d6:2b:33:ca:5f:51:d8:e4:59:ce:b0:c4:b9:14:
0a:82:81:dc:2d:60:9b:69:74:7f:53:85:cb:39:c1:06:05:69:
ef:63:9e:09:83:53:71:7c:fe:b3:76:27:57:50:a2:63:cf:d8:
19:e6:0a:79:97:fd:d1:97:39:5a:8f:14:71:8c:f2:05:f0:23:
8c:87:ab:99:30:4f:09:4e:47:4f:42:8d:4b:2c:26:47:2e:2a:
43:f6:88:c2:0f:6e:71:9e:5a:8b:c7:24:8c:b6:16:f5:cc:2c:
ef:08:f0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:17 2025 by rpki-client