Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/nSGKNrLSzLPLv8mceFgSE4fq6iU.roa
File: nSGKNrLSzLPLv8mceFgSE4fq6iU.roa (raw, json)
Hash identifier: 2415269eP2ToP8FGytn7MQWhGf3zLrkDw0cep/8mwaU=
Subject key identifier: 9D:21:8A:36:B2:D2:CC:B3:CB:BF:C9:9C:78:58:12:13:87:EA:EA:25
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 0184B80D074C734DF1D8CB4C5E204EA78F7A
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/nSGKNrLSzLPLv8mceFgSE4fq6iU.roa
Signing time: Sun 27 Nov 2022 07:46:12 +0000
ROA not before: Sun 27 Nov 2022 07:46:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207444
IP address blocks: 147.234.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:b8:0d:07:4c:73:4d:f1:d8:cb:4c:5e:20:4e:a7:8f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Nov 27 07:46:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d218a36b2d2ccb3cbbfc99c7858121387eaea25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:22:42:50:12:00:dd:76:ab:a9:35:48:86:ee:
ce:b2:9a:b8:98:fb:b4:be:87:35:a0:2f:d2:ae:df:
8c:74:40:0e:b8:a7:35:74:59:62:a2:88:e6:f6:41:
fc:20:eb:ec:79:22:2f:1f:34:71:69:02:78:d9:ef:
90:a8:23:50:e4:5f:d1:1d:aa:ac:fe:6b:fc:0c:2a:
b7:82:03:61:5e:f6:da:31:b7:77:b3:54:e5:aa:41:
aa:69:38:86:7b:c4:ce:49:ea:6d:b9:36:f4:0c:05:
ff:f6:c2:20:80:08:5c:bb:8d:7a:c3:e6:e0:e1:46:
c0:36:5c:8e:2e:24:2e:56:0a:55:b6:94:7f:2f:df:
7d:1d:05:1b:05:74:24:47:b4:84:e4:83:dd:f1:32:
f6:52:3b:24:a0:92:ba:d0:0e:43:93:f8:bf:3d:eb:
e7:2a:58:3e:81:4b:8a:25:cb:7a:45:5d:ef:08:c5:
bd:56:d2:a9:46:a6:2f:e4:b5:d0:99:b7:ad:50:a2:
d8:aa:62:ff:ce:8b:d0:44:29:31:b4:01:49:44:7d:
f9:88:b0:bc:99:4a:27:f0:8a:0c:dd:68:59:fb:f7:
c0:aa:f8:ea:a4:e7:c9:71:13:14:8c:4f:fd:8b:47:
85:0e:d6:24:5a:68:c2:00:f6:0e:bb:93:17:d5:84:
e2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:21:8A:36:B2:D2:CC:B3:CB:BF:C9:9C:78:58:12:13:87:EA:EA:25
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/nSGKNrLSzLPLv8mceFgSE4fq6iU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.234.81.0/24
Signature Algorithm: sha256WithRSAEncryption
22:e6:2c:2e:83:eb:26:aa:e5:06:42:37:2e:2f:05:f7:25:1f:
5f:31:74:20:fd:ca:67:e2:e8:d4:c2:4f:de:05:eb:a7:4c:5a:
4d:e4:38:91:29:4f:09:48:2e:32:75:eb:7d:52:96:ec:30:aa:
dd:75:a3:59:ca:83:90:46:3c:8a:b9:17:e2:ce:95:e4:f0:91:
ed:4f:d8:81:2a:18:bf:cf:bf:c0:01:5c:c1:af:05:ea:d6:d5:
a7:2a:60:80:53:3a:70:6e:99:26:57:19:4c:da:05:15:77:07:
7f:b7:7b:bb:24:a6:97:9f:b4:86:e0:b3:d8:b2:a2:1c:11:02:
89:93:f7:a5:e8:50:18:b4:c3:13:a5:46:e4:07:ae:92:1e:71:
6d:ba:2b:57:31:32:44:43:4a:71:f5:ef:16:79:a6:dd:f5:3f:
6b:92:e8:d9:92:0d:ca:fc:d3:2d:92:c8:41:fa:a9:af:b6:68:
34:6d:94:8e:1d:04:a4:82:34:84:b4:66:5c:cf:2f:10:b8:63:
48:2d:e6:92:9e:9f:b7:2a:3c:c3:97:68:20:68:f3:88:14:a0:
f1:98:d4:10:f7:19:5f:db:ad:23:0f:5d:91:e0:b4:42:9a:fe:
ab:b6:39:9d:3b:55:15:95:67:6d:6c:bc:61:3e:ec:99:c4:89:
12:fd:b5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:34:18 2025 by rpki-client