Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/pSqgqsZfoSSOrnX6O6ucWrsoNzM.roa
File: pSqgqsZfoSSOrnX6O6ucWrsoNzM.roa (raw, json)
Hash identifier: MEkGZ8/+fibjGzR8JBESzWvdBtLY7GhoY/WORM8A08I=
Subject key identifier: A5:2A:A0:AA:C6:5F:A1:24:8E:AE:75:FA:3B:AB:9C:5A:BB:28:37:33
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 01828B9CC359A604AC842FCEC94BF12264F6
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/pSqgqsZfoSSOrnX6O6ucWrsoNzM.roa
Signing time: Thu 11 Aug 2022 06:34:42 +0000
ROA not before: Thu 11 Aug 2022 06:34:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56596
IP address blocks: 147.234.6.0/24 maxlen: 24
147.234.6.0/23 maxlen: 23
147.234.7.0/24 maxlen: 24
147.234.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8b:9c:c3:59:a6:04:ac:84:2f:ce:c9:4b:f1:22:64:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Aug 11 06:34:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a52aa0aac65fa1248eae75fa3bab9c5abb283733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c0:ca:93:43:39:eb:74:1a:e0:c1:41:77:78:
77:1d:de:51:c4:ff:ec:82:65:ab:53:06:67:56:e7:
40:53:21:d4:41:e5:e8:97:ca:a7:38:8a:16:cd:b1:
7f:06:6f:03:e3:3f:7f:11:9c:63:31:ec:d1:47:2e:
51:0a:0a:ee:0f:13:39:c0:76:f1:97:c3:4d:2b:74:
1f:6c:84:fc:09:c0:33:79:22:19:6a:97:29:21:ab:
2e:68:d4:60:74:2f:84:f9:7e:5f:9b:79:67:d9:d5:
23:dd:8e:e6:16:08:b9:4e:49:8b:8e:8d:2b:44:d5:
75:69:f4:3f:6b:a1:c4:a2:1b:fa:e2:5f:03:f4:26:
d7:5b:6a:2d:d0:9f:41:c1:64:9e:d1:a2:4c:e5:c4:
52:eb:2d:64:73:79:5b:b8:c5:09:22:8e:7a:52:1f:
42:aa:ef:67:00:a7:42:d4:27:17:ae:f5:db:e8:57:
6d:c8:63:29:c6:6f:19:99:5f:5e:6d:b0:07:2c:83:
eb:cb:d1:67:46:d8:49:70:f7:66:62:24:3d:34:35:
92:d7:cc:6b:db:fc:fb:c0:7a:ba:6a:b7:31:20:52:
36:91:87:f1:39:7b:44:79:26:c4:80:61:c9:c5:65:
32:6a:7d:42:7b:0f:c8:4c:57:13:91:c4:9f:8f:73:
0f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:2A:A0:AA:C6:5F:A1:24:8E:AE:75:FA:3B:AB:9C:5A:BB:28:37:33
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/pSqgqsZfoSSOrnX6O6ucWrsoNzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.234.6.0/23
147.234.16.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:03:a1:fa:70:2a:2d:b6:50:62:34:c2:be:34:d8:30:2b:2a:
24:46:32:79:b2:8f:76:77:43:47:b2:0b:04:c0:bf:23:77:58:
5a:6f:32:0d:c1:f1:6a:f6:5f:f1:a4:47:f7:ef:0e:f9:8d:69:
ef:7a:5a:dd:b7:64:de:de:7c:b0:ec:17:64:3c:ce:20:39:16:
bc:63:dd:86:2c:71:c7:a7:44:a9:b5:22:d5:55:fc:84:ec:7d:
3e:f4:16:ce:bc:85:47:94:74:c2:57:a7:38:55:61:14:4c:12:
49:db:7f:b0:34:72:b6:86:d6:a6:d9:4c:a6:43:dc:8c:b2:67:
a1:fe:7b:af:0f:9b:07:b3:39:d9:b8:5b:8a:55:04:3a:83:89:
b1:e5:aa:16:64:18:fe:90:ab:19:e8:1c:8a:4f:93:e3:2a:a1:
49:2d:08:95:06:88:7d:02:33:08:6f:9e:ef:63:1f:91:82:8e:
30:3e:2e:68:09:6f:d8:01:ff:61:c0:37:c6:f7:76:23:94:2b:
e4:3e:05:d4:59:33:3f:cc:d3:e2:b8:05:82:0b:f0:f1:3a:88:
d1:3b:56:2c:71:49:dd:05:72:0b:8d:1b:70:58:75:75:49:b5:
4f:ec:e9:c9:ec:97:32:94:10:3b:f1:d3:fa:3a:c3:6a:c5:e8:
5c:4b:ad:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:45 2025 by rpki-client