Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/iw5YElHxmCEs04y8SrypcPYU8qY.roa
File: iw5YElHxmCEs04y8SrypcPYU8qY.roa (raw, json)
Hash identifier: I5D0uEsGNvyT+rzkz53ZYxaELJ1XhqQeNT0U9P94JdI=
Subject key identifier: 8B:0E:58:12:51:F1:98:21:2C:D3:8C:BC:4A:BC:A9:70:F6:14:F2:A6
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 0185730CCCB843244C73E1D49F0751D171AA
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/iw5YElHxmCEs04y8SrypcPYU8qY.roa
Signing time: Mon 02 Jan 2023 15:14:56 +0000
ROA not before: Mon 02 Jan 2023 15:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44060
IP address blocks: 147.234.4.0/24 maxlen: 24
147.234.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:0c:cc:b8:43:24:4c:73:e1:d4:9f:07:51:d1:71:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Jan 2 15:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b0e581251f198212cd38cbc4abca970f614f2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4c:f8:02:9b:c8:4e:af:db:5a:7b:40:47:c5:
16:11:ff:2e:cc:79:1b:71:61:41:a6:3c:b9:63:42:
3b:72:fa:80:29:be:58:2b:41:8f:ed:38:c1:2a:b1:
00:24:ac:8c:8a:d9:5b:8c:6a:c5:d8:e7:7f:55:79:
bf:72:ab:5c:05:8f:0b:55:ef:86:cf:ff:13:71:dc:
c8:4f:2e:0a:ec:35:c1:7d:ff:6f:94:87:54:70:7a:
c7:86:d8:35:f8:11:e7:70:de:3c:dd:5e:fe:25:dc:
e3:ce:e0:c0:ac:a0:ad:46:97:1a:b0:06:00:f6:6b:
58:0e:5e:ab:90:a9:26:b2:97:49:40:8e:e8:bc:ac:
a4:af:ac:79:0a:28:57:74:1b:9c:f8:f3:bc:45:86:
21:42:6e:7d:b6:b0:d0:0e:19:ce:8f:2e:d2:75:38:
96:f3:6f:c4:d7:b4:b2:d7:08:4a:c9:9e:22:30:4b:
75:22:5c:2a:a1:e6:aa:16:f2:7c:b4:07:de:ea:3f:
70:98:0d:0c:01:21:32:a0:90:ee:d1:c3:a8:c1:a9:
ad:c7:46:88:c4:b5:45:cc:7d:36:c9:b9:51:3f:83:
f0:fd:4e:ca:64:cf:29:f7:9e:50:bd:2d:26:22:01:
5b:c7:1b:3d:bc:24:ab:68:38:64:b2:35:3c:8a:f9:
e6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0E:58:12:51:F1:98:21:2C:D3:8C:BC:4A:BC:A9:70:F6:14:F2:A6
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/iw5YElHxmCEs04y8SrypcPYU8qY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.234.4.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:43:3f:72:b8:f6:4a:c3:01:28:3b:b0:2b:a0:2d:93:0b:4f:
4b:da:92:02:93:fd:0f:ad:76:22:f0:2e:4e:46:88:75:c5:40:
e9:ed:65:9a:ed:d5:34:92:aa:d9:aa:60:d6:f7:ed:ec:a6:6f:
f3:cb:7c:7a:de:09:07:1d:19:9d:65:9a:a0:96:42:a4:51:00:
20:16:43:6c:0e:e7:f3:c4:ce:7b:c0:d3:d4:80:d4:bc:05:9f:
19:09:51:18:1d:f2:41:bc:fe:c6:c1:17:33:69:b6:24:13:02:
a4:86:9e:0c:6a:48:54:9c:bf:43:5f:b5:ad:a7:f2:91:c9:4e:
40:dc:f0:99:4a:6f:99:d5:85:01:2f:8c:4f:b4:73:ca:35:55:
12:91:a7:ad:33:cf:fb:f4:78:11:35:cc:27:14:c1:0b:1d:49:
03:27:6d:fa:e7:7e:13:0a:75:0f:1d:a3:ca:70:6b:d7:2c:1d:
5b:ea:25:31:e7:1f:1d:fe:b3:ad:6e:1e:f7:c5:e4:2f:70:2e:
57:b0:7b:59:7b:a2:90:76:13:0f:d6:17:66:aa:86:5f:70:87:
e8:26:b3:30:68:23:4d:35:3c:e8:ed:8f:aa:e3:50:5a:d7:81:
4f:fd:be:a1:3f:b1:b3:7a:51:a2:62:94:8f:2b:a8:ee:5d:8d:
6f:4b:13:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:02 2025 by rpki-client