Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/3jirM1pJMdTDX5wXnGNenLy5aTg.roa
File: 3jirM1pJMdTDX5wXnGNenLy5aTg.roa (raw, json)
Hash identifier: JRhsWCP+4ShZ66f1G9moWzKhlvHKFEaTNK1QmdE6Ylk=
Subject key identifier: DE:38:AB:33:5A:49:31:D4:C3:5F:9C:17:9C:63:5E:9C:BC:B9:69:38
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 0185730CD3814DF1DA21D8BFB72C33927F23
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/3jirM1pJMdTDX5wXnGNenLy5aTg.roa
Signing time: Mon 02 Jan 2023 15:14:58 +0000
ROA not before: Mon 02 Jan 2023 15:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204831
IP address blocks: 147.234.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:0c:d3:81:4d:f1:da:21:d8:bf:b7:2c:33:92:7f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Jan 2 15:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de38ab335a4931d4c35f9c179c635e9cbcb96938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:60:8a:52:eb:e0:16:3e:46:6d:a2:ec:81:28:
fa:54:d3:00:9a:02:11:78:97:61:c9:13:b0:d2:ec:
ee:2f:7a:63:cd:42:ab:6e:0b:d0:ef:73:ac:16:46:
d0:4b:4a:d4:fd:8a:4a:d1:41:ef:dd:56:f8:3d:2b:
95:8b:98:3e:3b:c9:ba:06:63:4c:be:8f:b0:c4:a5:
83:b8:bf:c2:fb:2f:63:83:e1:82:22:31:f3:bf:43:
c1:b0:a4:d5:09:05:f9:60:93:48:42:b8:e9:34:b2:
0d:16:01:7a:7a:eb:ff:9c:a5:dc:a4:14:f7:53:76:
7f:34:b9:86:20:e1:2e:c2:03:77:12:34:9e:a9:d7:
51:1d:6a:51:c1:55:bc:92:33:cb:39:0d:e0:6e:7e:
db:ea:d8:13:0e:e2:63:99:49:2d:53:be:35:b2:16:
60:50:31:5d:f8:e6:f9:f8:d6:96:20:4c:a2:75:63:
98:b8:a1:18:d0:30:6f:53:50:ab:7c:97:fa:87:19:
fa:b1:3c:27:84:aa:d5:44:c3:cc:cc:4a:e3:ad:ed:
f9:3d:b7:40:f0:2f:07:1a:3c:8e:f7:cd:2a:d8:e6:
f7:e1:ec:14:90:65:6e:05:b5:c4:6b:7b:97:71:ed:
cd:92:a3:e0:54:33:31:84:e0:26:3a:d6:a2:b1:9f:
df:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:38:AB:33:5A:49:31:D4:C3:5F:9C:17:9C:63:5E:9C:BC:B9:69:38
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/3jirM1pJMdTDX5wXnGNenLy5aTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.234.25.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:0e:b4:58:c8:9d:19:5e:ba:66:28:4e:77:20:77:04:1b:12:
f2:0b:9a:99:32:0d:7f:33:41:6c:3c:b9:5d:9a:c6:be:7b:94:
9c:c7:52:ce:70:c5:d9:c5:5a:9c:ec:b5:0e:02:22:d7:43:3f:
99:ce:95:3c:07:17:fa:c7:57:15:50:1a:f1:33:81:86:08:19:
cb:5c:c8:ca:a0:e8:ce:de:09:86:70:f0:95:e0:99:46:b4:37:
5d:11:59:f6:2d:c8:70:22:01:8c:42:9f:71:9b:7d:6f:b8:c6:
ff:f5:19:bb:64:91:dc:e7:29:96:ab:e9:c6:c0:29:7d:22:87:
ca:36:0f:4b:7e:ee:4f:a2:83:09:3c:92:fb:65:4c:52:2f:99:
62:27:60:b6:6a:f5:c8:b5:63:58:7f:45:9e:a8:16:2f:e6:e4:
f7:1e:66:8d:d2:aa:1c:97:79:a4:30:46:67:12:00:46:89:cc:
b7:46:b3:b0:01:22:0b:c6:57:0c:01:cc:c2:e4:ba:fd:f2:8b:
c4:f0:30:78:46:88:d2:10:72:a2:b2:f9:4c:2b:eb:5b:35:0b:
8d:e5:2f:2d:10:a2:1c:17:2e:13:e2:66:14:0c:52:08:78:fd:
8e:d3:cd:c7:5c:e6:88:41:f3:c5:9c:75:ce:a7:c8:6c:63:ea:
ff:fd:d9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:52 2025 by rpki-client