Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/lpTH01SflqnXskClJIZwmMVwhcg.roa
File: lpTH01SflqnXskClJIZwmMVwhcg.roa (raw, json)
Hash identifier: DaxWgsY/7qJ5jDC6J0BRdjgxtl0d9fVs5+iU6qg5Mig=
Subject key identifier: 96:94:C7:D3:54:9F:96:A9:D7:B2:40:A5:24:86:70:98:C5:70:85:C8
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 01828B9CC981F343C813583787E1AEA99435
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/lpTH01SflqnXskClJIZwmMVwhcg.roa
Signing time: Thu 11 Aug 2022 06:34:44 +0000
ROA not before: Thu 11 Aug 2022 06:34:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207591
IP address blocks: 147.234.79.0/24 maxlen: 24
147.234.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8b:9c:c9:81:f3:43:c8:13:58:37:87:e1:ae:a9:94:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Aug 11 06:34:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9694c7d3549f96a9d7b240a524867098c57085c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f6:a3:dd:c3:cd:50:e2:df:6f:a0:81:03:a3:
a8:c9:9b:44:b3:5b:4c:e2:37:d9:09:86:92:0b:0a:
35:bc:5b:53:8b:ab:98:8e:2f:07:db:98:4e:73:d1:
e1:89:e8:5d:05:57:7a:9c:96:df:17:de:29:20:2f:
e2:c6:a5:bb:14:62:91:dd:2d:a9:05:9d:70:be:fe:
12:2b:e9:03:c5:03:af:a1:77:37:c6:19:1c:5e:c7:
dd:a6:ad:7e:8a:2a:b0:f8:da:73:21:d5:a4:1c:9f:
8e:56:e9:24:bd:91:6f:54:da:b9:ff:ab:39:e2:c7:
e3:1b:b9:0f:7b:32:c2:36:ac:08:da:bc:46:7d:2f:
fa:42:fe:4b:66:d1:e4:6b:97:9f:1c:58:fb:65:8f:
1c:d0:89:85:44:e7:08:73:85:66:12:c0:e3:f8:f4:
8c:a2:50:3f:4a:44:13:33:46:c8:f8:8b:1c:ed:d6:
a9:c3:76:fb:fc:2f:0c:ea:7e:e6:60:cd:ef:95:30:
9d:de:b9:c6:8c:f1:d9:1a:05:1a:a8:7e:3e:ab:8e:
46:5a:d0:41:29:c5:aa:fd:d4:34:77:77:c8:77:a0:
71:0d:5c:d9:2e:ae:63:d0:2b:59:a2:d4:59:98:a1:
77:e1:82:14:13:9f:d8:1e:47:4b:5c:bb:48:a8:b3:
2e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:94:C7:D3:54:9F:96:A9:D7:B2:40:A5:24:86:70:98:C5:70:85:C8
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/lpTH01SflqnXskClJIZwmMVwhcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.234.78.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:b1:73:d8:84:59:74:11:03:da:4f:b6:50:d3:b6:35:5b:61:
cb:fc:6d:9f:5a:12:b1:09:f2:ee:32:b6:80:70:de:dd:c9:ad:
62:d2:d8:45:0f:a2:69:8b:27:2b:df:d8:70:f5:8f:30:cf:d3:
94:8f:ae:57:96:90:e6:36:51:8a:06:56:7a:0c:b6:11:50:66:
d1:24:c1:ed:2a:80:7f:13:76:fc:19:c8:33:8e:b3:03:2c:67:
75:da:75:24:eb:dd:98:10:d2:9a:cb:dc:ae:6b:7c:c6:d5:cc:
c1:77:f0:44:95:b5:c8:1c:98:81:7e:01:a7:ee:15:0b:5b:ff:
a7:31:c7:25:3c:9a:02:38:48:50:a3:eb:bf:99:ea:da:ac:b2:
af:1b:5f:d9:29:fd:85:5e:51:a9:d7:73:13:f7:d4:98:9a:86:
b4:0f:59:ba:06:b4:1e:ad:5e:e2:cb:5c:ca:86:3b:c5:87:d2:
c7:58:b3:32:da:26:b4:f9:2e:b6:c5:f5:04:23:2d:d5:0c:52:
ef:e8:84:ca:d3:c1:80:ee:a2:66:ce:d7:6f:1d:76:80:a8:f3:
d9:f2:d9:5a:c0:e5:30:47:2a:4f:29:79:ff:a2:10:7c:94:38:
25:26:ac:b5:8e:ed:50:33:a5:fb:8b:fb:fb:48:88:e3:97:4c:
9a:4e:94:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:54 2025 by rpki-client