Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/OQmfbzWy9qqSzCd2mgN6hT7DxWw.roa
File: OQmfbzWy9qqSzCd2mgN6hT7DxWw.roa (raw, json)
Hash identifier: 93B7+tTXLYJMu9G4lEl0yJtnu4ClJU/zub56FQhztpI=
Subject key identifier: 39:09:9F:6F:35:B2:F6:AA:92:CC:27:76:9A:03:7A:85:3E:C3:C5:6C
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 01828B9CC5169B6F737CFDDBEE8A10BB6ED0
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/OQmfbzWy9qqSzCd2mgN6hT7DxWw.roa
Signing time: Thu 11 Aug 2022 06:34:43 +0000
ROA not before: Thu 11 Aug 2022 06:34:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201415
IP address blocks: 147.234.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8b:9c:c5:16:9b:6f:73:7c:fd:db:ee:8a:10:bb:6e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Aug 11 06:34:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=39099f6f35b2f6aa92cc27769a037a853ec3c56c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7e:63:29:2a:34:0e:31:c6:35:b2:1f:93:f7:
cc:62:e5:25:3a:e3:5b:27:8c:4e:e7:c5:d6:aa:14:
9d:ae:b2:49:c3:b1:b4:79:bc:53:f2:4f:3c:73:7d:
0f:44:bd:7d:f6:e7:a4:b8:d7:11:63:78:ea:a5:29:
8f:c3:f7:9f:56:17:8a:80:0a:41:30:9e:2e:9e:15:
38:1a:78:a9:57:f3:4e:4f:f1:90:95:a5:e4:2c:e6:
21:ef:b7:4b:a5:99:5d:47:ea:23:46:14:68:0c:ba:
f0:af:9b:1c:f6:89:f0:b7:25:f3:6a:ac:10:48:b1:
af:91:55:fc:f2:58:72:c7:ea:d2:49:fe:0c:e9:58:
25:7f:07:b1:a2:87:53:4a:09:b5:38:3d:e6:ce:9c:
3c:d0:5a:d6:cf:a1:4a:57:18:fd:08:48:cc:63:58:
17:e2:24:1a:98:94:66:b8:54:e7:9a:96:5a:ab:6a:
32:a4:d5:33:d2:87:5b:4c:9b:3e:30:82:58:12:74:
49:a3:3e:79:9b:78:9e:72:a9:e8:73:59:4e:d5:03:
8a:d0:12:52:29:09:57:ca:5c:99:c6:3e:55:34:f9:
c4:48:c1:06:29:18:7c:ca:26:99:de:19:11:73:5b:
20:f7:30:d1:a0:ea:26:0f:20:14:6b:1f:3b:a9:3b:
c6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:09:9F:6F:35:B2:F6:AA:92:CC:27:76:9A:03:7A:85:3E:C3:C5:6C
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/OQmfbzWy9qqSzCd2mgN6hT7DxWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.234.76.0/24
Signature Algorithm: sha256WithRSAEncryption
be:05:a6:02:aa:81:8a:d5:d8:fd:b8:a2:a6:cc:4d:eb:33:77:
1b:74:8e:7d:b7:83:98:e6:70:8f:6f:a4:be:d4:05:eb:7c:4e:
b6:de:a5:4d:a3:da:93:5d:b9:4d:8a:da:9d:04:aa:2e:92:9a:
0e:45:bb:7d:51:5b:ef:f6:a7:58:a6:46:3e:5e:51:61:be:60:
44:61:80:0a:50:03:38:b9:bf:78:8a:11:ee:02:56:3f:12:01:
0e:49:10:7f:aa:29:f1:c9:d8:b9:bf:0e:06:2c:df:b6:79:98:
5f:56:43:7e:b4:fd:6e:52:18:2a:79:bb:c4:58:b9:0a:86:12:
2c:13:21:da:02:20:f3:9b:ab:6b:b7:53:95:c3:01:e0:82:0c:
27:7e:54:bd:60:8e:44:24:2d:1a:bd:fa:68:ef:d1:ed:89:12:
97:a7:b4:55:52:73:5c:41:bd:f1:61:88:6c:f2:b7:56:4d:88:
01:49:5c:bc:e3:3b:2b:69:57:2a:c7:e1:0e:45:07:5f:14:1a:
51:da:9e:93:37:47:30:ee:83:a0:55:ff:98:c8:36:fb:40:2f:
7d:6d:98:c9:ce:25:3c:a1:1e:cf:f7:a0:3e:71:42:5a:7b:a1:
cc:c7:ed:ee:ff:16:42:0b:f4:1b:25:e3:14:c5:69:e6:dc:5e:
9b:bb:f0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:56:16 2025 by rpki-client