Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/CT1mG6AFjBs5yNlNRMyESYaybO0.roa
File: CT1mG6AFjBs5yNlNRMyESYaybO0.roa (raw, json)
Hash identifier: gcGfon+4DaECF9CjqXzg9k3Kqq/YJpU7zIh4x/vo0tk=
Subject key identifier: 09:3D:66:1B:A0:05:8C:1B:39:C8:D9:4D:44:CC:84:49:86:B2:6C:ED
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 01828B9CC7A23228E637A9E1DECFBDBF6C68
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/CT1mG6AFjBs5yNlNRMyESYaybO0.roa
Signing time: Thu 11 Aug 2022 06:34:43 +0000
ROA not before: Thu 11 Aug 2022 06:34:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204831
IP address blocks: 147.234.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8b:9c:c7:a2:32:28:e6:37:a9:e1:de:cf:bd:bf:6c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Aug 11 06:34:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=093d661ba0058c1b39c8d94d44cc844986b26ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:03:06:7a:56:0c:47:9f:24:63:3c:22:f9:c9:
15:fe:fd:64:67:75:4c:11:c0:c6:bc:d1:b7:34:ba:
a0:65:be:22:32:dd:b4:ae:e3:58:c8:6c:00:09:d7:
dc:d4:d8:6d:a7:be:c7:7a:09:ef:e2:1b:d8:e3:f4:
c1:e0:1c:24:8e:bb:17:bb:12:f5:16:d7:db:b7:db:
c7:da:ef:b6:b0:5e:57:7d:d8:43:0d:15:60:b3:54:
18:cc:b1:cf:01:aa:32:e5:ca:4c:e9:81:a8:f8:e8:
1b:c5:1d:72:1e:d6:46:52:87:f5:b6:69:50:4e:eb:
09:63:b8:c3:e8:be:dc:c3:83:fc:1e:e6:d4:3f:50:
ba:30:41:24:79:17:3e:52:27:d4:ef:81:7d:4e:4e:
ce:e9:e3:0c:f7:79:e8:bb:1c:a3:cb:9c:4b:df:8d:
0d:b4:aa:05:db:56:33:10:df:3d:32:c7:f8:b0:2a:
2c:06:2b:a0:ca:b3:3b:dd:29:9b:f6:7a:2b:c7:47:
00:53:b9:41:80:b8:a4:cc:bd:0d:cc:d5:95:67:6d:
35:5c:0b:fb:94:89:39:6b:44:f1:c3:48:39:56:1f:
57:35:72:07:e5:75:cf:66:70:9e:ee:df:9c:f4:7b:
80:53:4b:2c:45:66:14:ff:b4:6b:6b:72:e8:ea:96:
03:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3D:66:1B:A0:05:8C:1B:39:C8:D9:4D:44:CC:84:49:86:B2:6C:ED
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/CT1mG6AFjBs5yNlNRMyESYaybO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.234.25.0/24
Signature Algorithm: sha256WithRSAEncryption
62:f5:e1:bc:34:98:32:33:fb:1b:b5:b3:ad:db:0d:c2:85:6e:
43:cf:2a:f1:37:22:46:b8:7f:2e:83:6f:7a:d3:c4:c8:0e:03:
a9:a1:5c:56:33:b9:c6:25:63:d2:23:22:a3:36:52:68:d0:9c:
1b:10:e4:d2:50:16:1b:b3:9e:c1:ff:39:70:2a:8d:36:30:6a:
39:6b:e9:f2:77:f0:da:35:73:a0:23:82:4e:0a:7e:2c:aa:43:
0b:32:36:7c:b3:69:ae:68:78:27:df:13:95:0f:f7:09:8a:94:
f2:13:ba:d0:d0:8d:4f:97:ff:94:e2:a7:3a:e1:f7:f7:e1:bb:
6d:6d:0f:4a:35:9e:09:a1:5c:80:33:4a:fe:6e:48:2d:dc:1b:
2a:32:43:3f:8e:a3:29:97:6b:43:2a:92:bc:23:5c:a2:f8:50:
6a:39:76:e1:67:3a:6a:56:e7:5a:1d:2f:26:47:35:bd:0c:32:
97:5b:c9:a1:8d:6e:fb:8e:ed:d6:46:e6:47:dc:88:cd:a3:f7:
e3:42:35:24:df:18:d2:7e:26:58:df:67:4c:b8:24:dd:3e:93:
6b:68:d4:9d:26:0d:af:a0:6f:69:9b:45:ed:1c:23:4f:6c:e4:
b1:68:49:6f:6d:1b:af:d1:d1:39:78:bc:18:57:91:35:ad:7e:
a4:05:21:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYKLnMeiMijmN6nh3s+9v2xoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi
NDUwZTYwHhcNMjIwODExMDYzNDQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTNkNjYxYmEwMDU4YzFiMzljOGQ5NGQ0NGNjODQ0OTg2YjI2Y2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgMGelYMR58kYzwi+ckV/v1kZ3VM
EcDGvNG3NLqgZb4iMt20ruNYyGwACdfc1Nhtp77Hegnv4hvY4/TB4BwkjrsXuxL1
Ftfbt9vH2u+2sF5XfdhDDRVgs1QYzLHPAaoy5cpM6YGo+OgbxR1yHtZGUof1tmlQ
TusJY7jD6L7cw4P8HubUP1C6MEEkeRc+UifU74F9Tk7O6eMM93nouxyjy5xL340N
tKoF21YzEN89Msf4sCosBiugyrM73Smb9norx0cAU7lBgLikzL0NzNWVZ201XAv7
lIk5a0Txw0g5Vh9XNXIH5XXPZnCe7t+c9HuAU0ssRWYU/7Rra3Lo6pYDfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAk9ZhugBYwbOcjZTUTMhEmGsmztMB8GA1UdIwQY
MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt
NDQzMzIyOWE4NDczLzEvQ1QxbUc2QUZqQnM1eU5sTlJNeUVTWWF5Yk8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz
LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk+oZMA0G
CSqGSIb3DQEBCwUAA4IBAQBi9eG8NJgyM/sbtbOt2w3ChW5DzyrxNyJGuH8ug296
08TIDgOpoVxWM7nGJWPSIyKjNlJo0JwbEOTSUBYbs57B/zlwKo02MGo5a+nyd/Da
NXOgI4JOCn4sqkMLMjZ8s2muaHgn3xOVD/cJipTyE7rQ0I1Pl/+U4qc64ff34btt
bQ9KNZ4JoVyAM0r+bkgt3BsqMkM/jqMpl2tDKpK8I1yi+FBqOXbhZzpqVudaHS8m
RzW9DDKXW8mhjW77ju3WRuZH3IjNo/fjQjUk3xjSfiZY32dMuCTdPpNraNSdJg2v
oG9pm0XtHCNPbOSxaElvbRuv0dE5eLwYV5E1rX6kBSHM
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:56 2023 by rpki-client on console-fra.rpki-client.org