Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/IRRcnWKUzphgVKhj6nyJFBTWEK0.roa
File: IRRcnWKUzphgVKhj6nyJFBTWEK0.roa (raw, json)
Hash identifier: Ns9BZaYV/XusPvpI61OUhx53abekjsKWwqD/uX5e7lI=
Subject key identifier: 21:14:5C:9D:62:94:CE:98:60:54:A8:63:EA:7C:89:14:14:D6:10:AD
Certificate issuer: /CN=7015ed275005408d2a86a2303701744430eda34a
Certificate serial: 018BCDF3ED9FDA1D495F55DD0E3724B37F74
Authority key identifier: 70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/IRRcnWKUzphgVKhj6nyJFBTWEK0.roa
Signing time: Tue 14 Nov 2023 13:09:57 +0000
ROA not before: Tue 14 Nov 2023 13:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22683
IP address blocks: 149.59.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cd:f3:ed:9f:da:1d:49:5f:55:dd:0e:37:24:b3:7f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7015ed275005408d2a86a2303701744430eda34a
Validity
Not Before: Nov 14 13:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21145c9d6294ce986054a863ea7c891414d610ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:69:9c:8d:d6:75:cd:fb:f7:4a:58:2a:75:87:
96:4c:fe:4e:2b:25:b5:2d:96:be:3f:80:9d:3f:5b:
10:b0:21:9b:da:64:81:50:dc:2c:22:cc:40:f8:18:
70:6b:8e:d7:4b:4e:38:36:74:4f:d4:06:d8:72:d0:
16:d5:73:1e:5d:db:27:30:4e:7a:48:98:86:7f:47:
62:c9:6c:60:e1:6f:3f:c2:6d:a6:d9:b5:32:cb:06:
2f:1e:a3:0c:c3:72:3d:b5:1e:cf:a9:73:ed:60:14:
2e:66:69:4f:a8:df:40:7b:76:42:51:5a:c0:8f:86:
11:9c:6c:b4:c5:9a:65:13:b4:60:4c:68:f9:5a:a9:
40:6a:95:37:02:f6:dd:a9:4f:41:99:55:9b:30:0c:
94:8e:32:06:51:9b:6e:e3:d2:22:40:d1:68:99:cb:
79:7b:9a:bb:c7:53:43:d7:7d:c1:c3:27:5d:49:69:
a2:75:88:88:c4:ab:84:93:36:89:4d:c6:64:5f:6d:
ba:f3:e8:46:0b:2f:4a:51:16:76:43:82:b4:67:39:
ee:e8:46:3d:9b:dc:7e:64:f2:41:29:40:e9:22:5c:
39:75:6c:7f:2d:84:10:05:14:0b:61:79:ef:ca:df:
bf:74:00:f2:e3:d1:b7:55:bb:cb:3e:b1:00:58:bc:
5f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:14:5C:9D:62:94:CE:98:60:54:A8:63:EA:7C:89:14:14:D6:10:AD
X509v3 Authority Key Identifier:
keyid:70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/IRRcnWKUzphgVKhj6nyJFBTWEK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.59.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a0:fd:5b:59:67:84:dd:cd:a9:67:66:99:2b:42:cb:4a:94:25:
43:a3:b5:55:e1:c1:89:9e:e5:98:17:b6:18:28:29:c5:1e:14:
ce:72:a4:0f:76:26:69:4c:94:be:c8:2e:26:3f:90:11:d5:44:
41:89:c6:e4:62:07:da:98:6a:f9:4b:7b:33:63:4e:87:5b:c4:
df:02:b5:d2:70:ce:9b:84:a0:00:36:a2:dc:fa:b3:9d:9b:7e:
00:51:65:17:e2:37:97:4f:e3:c9:d1:36:4a:b4:35:1d:f8:20:
f3:b9:61:d0:1c:31:98:02:bd:5d:43:04:c6:0c:c7:3b:28:17:
70:1b:bc:27:89:1a:ef:f9:af:ee:c8:6d:4f:75:c6:45:80:7e:
ab:5d:fc:bc:1e:a1:a5:9a:3b:3c:dd:e9:7f:05:33:07:6f:24:
f3:5d:50:02:d3:d7:96:af:9c:5c:92:c7:b4:cd:e3:f0:f2:b8:
21:7b:38:f1:ac:e9:6f:36:98:b5:63:b9:68:82:c7:8e:91:ab:
ce:06:e7:49:26:91:26:81:73:17:6c:fa:b4:31:79:e3:1a:0b:
91:01:22:f6:d2:79:cb:ad:41:11:9f:cb:d6:a4:ae:77:34:63:
ab:55:67:e1:67:5a:96:d0:07:ff:49:be:ec:0c:2e:03:39:6e:
02:81:f0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:09 2025 by rpki-client