Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/tzTfU2SwFD0GiWr5bTq0CBussV4.roa
File: tzTfU2SwFD0GiWr5bTq0CBussV4.roa (raw, json)
Hash identifier: iH+edvRvHKGKMVuiZjwNbJEg1AExEa0oFQrZLMgmzS8=
Subject key identifier: B7:34:DF:53:64:B0:14:3D:06:89:6A:F9:6D:3A:B4:08:1B:AC:B1:5E
Certificate issuer: /CN=9ae389b1cc399e216fced8d39ec3ee89fc20b839
Certificate serial: 018606D32B311DF4A8B2C0D2EF1D9346AC00
Authority key identifier: 9A:E3:89:B1:CC:39:9E:21:6F:CE:D8:D3:9E:C3:EE:89:FC:20:B8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/tzTfU2SwFD0GiWr5bTq0CBussV4.roa
Signing time: Tue 31 Jan 2023 07:55:47 +0000
ROA not before: Tue 31 Jan 2023 07:55:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53766
IP address blocks: 136.144.98.0/23 maxlen: 23
136.144.96.0/23 maxlen: 23
136.144.102.0/23 maxlen: 23
136.144.104.0/23 maxlen: 23
136.144.100.0/23 maxlen: 23
136.144.112.0/24 maxlen: 24
136.144.109.0/24 maxlen: 24
136.144.108.0/24 maxlen: 24
136.144.111.0/24 maxlen: 24
136.144.110.0/24 maxlen: 24
136.144.106.0/23 maxlen: 23
136.144.116.0/24 maxlen: 24
136.144.115.0/24 maxlen: 24
136.144.118.0/24 maxlen: 24
136.144.117.0/24 maxlen: 24
136.144.113.0/24 maxlen: 24
136.144.114.0/24 maxlen: 24
136.144.123.0/24 maxlen: 24
136.144.122.0/24 maxlen: 24
136.144.125.0/24 maxlen: 24
136.144.124.0/24 maxlen: 24
136.144.119.0/24 maxlen: 24
136.144.121.0/24 maxlen: 24
136.144.120.0/24 maxlen: 24
136.144.126.0/24 maxlen: 24
136.144.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:06:d3:2b:31:1d:f4:a8:b2:c0:d2:ef:1d:93:46:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae389b1cc399e216fced8d39ec3ee89fc20b839
Validity
Not Before: Jan 31 07:55:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b734df5364b0143d06896af96d3ab4081bacb15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:39:f9:72:b6:99:34:90:62:26:c6:75:ba:78:
b5:58:a8:3a:c2:ec:34:d2:5c:d9:cb:3e:6d:bd:4a:
61:f2:b8:94:28:7a:c0:60:0b:6e:e2:7f:25:a2:fb:
e9:44:b2:7d:fe:85:64:3c:6e:51:ed:f3:ae:81:8d:
d7:fd:0f:b8:1e:d8:80:cc:ca:da:eb:f1:33:4d:b7:
13:2d:79:0d:59:cd:aa:6b:6a:86:97:a4:4c:bb:81:
3e:b6:4e:67:52:30:76:ca:d8:16:7a:fc:4e:d5:37:
4e:8f:5b:fc:27:2a:e4:9b:1e:11:f8:1d:1f:67:ae:
cf:7f:2d:de:f7:93:e4:43:66:ad:95:d8:c5:83:a8:
11:c9:21:59:9f:9e:37:f0:3a:7e:01:93:2b:eb:6f:
72:01:f0:f1:41:14:a6:72:3f:6e:30:7d:86:b8:e2:
1d:49:e2:7f:f9:99:95:36:53:cb:17:71:df:a7:bb:
ae:f0:92:83:b4:a1:1e:61:ca:ae:8a:e3:71:61:9f:
82:9f:e4:fd:3e:bc:7e:59:27:49:84:65:72:72:94:
9a:cd:b4:a4:11:bf:97:15:dc:c3:ce:33:0c:71:cd:
5d:5f:50:cd:ec:59:87:90:d3:e5:b8:bb:ee:97:28:
b2:b4:3e:99:ae:6a:43:f4:49:98:b8:99:f5:70:96:
4e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:34:DF:53:64:B0:14:3D:06:89:6A:F9:6D:3A:B4:08:1B:AC:B1:5E
X509v3 Authority Key Identifier:
keyid:9A:E3:89:B1:CC:39:9E:21:6F:CE:D8:D3:9E:C3:EE:89:FC:20:B8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/tzTfU2SwFD0GiWr5bTq0CBussV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.144.96.0/19
Signature Algorithm: sha256WithRSAEncryption
92:6f:49:c1:2a:0f:99:41:82:e1:7b:5d:b2:96:c9:65:cd:17:
bb:89:ea:8f:ad:95:c9:a8:a7:73:f5:01:6e:73:70:cc:b2:3e:
37:a7:fc:44:b2:eb:14:00:ab:69:56:c9:aa:36:14:ea:6a:33:
38:44:26:ff:e3:aa:f8:6b:f7:00:a4:7d:85:2d:d6:77:98:c5:
0a:aa:cc:8e:21:43:4e:f6:68:a8:1e:84:42:6e:b5:e8:9e:6f:
01:e6:c7:be:6f:48:db:a8:7b:cd:b5:de:b3:74:53:a8:5d:91:
4f:43:d4:cd:97:92:cb:43:f2:fa:46:f9:6f:c2:05:9b:3c:f2:
df:3b:68:42:f3:a3:d4:a7:80:54:7b:19:25:28:73:dd:8b:af:
90:22:7e:d7:86:59:24:cd:66:79:09:60:6b:d4:d2:8f:0c:33:
cc:46:0b:17:28:48:64:27:f1:b9:da:41:bf:67:64:bf:2b:14:
ca:fc:78:20:4f:3d:ba:80:5e:ea:0d:3b:31:38:48:b2:44:f7:
a6:72:98:0d:9c:8c:06:f0:3f:21:43:d2:8e:03:93:2c:e2:3f:
b2:c0:a7:20:ef:c0:41:42:f2:e2:71:6d:15:d3:ab:c3:16:26:
ad:55:5d:e7:a1:0c:15:f0:13:d9:21:b1:0c:f4:54:34:61:54:
26:e6:b1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:35 2025 by rpki-client