Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/4ovWzspQZj2eiTM36WsiPgcZOzc.roa
File: 4ovWzspQZj2eiTM36WsiPgcZOzc.roa (raw, json)
Hash identifier: ArO4jQCtymu8++FVZiYvLp1xeOqV2DDVn4g6uWkUtSg=
Subject key identifier: E2:8B:D6:CE:CA:50:66:3D:9E:89:33:37:E9:6B:22:3E:07:19:3B:37
Certificate issuer: /CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Certificate serial: 989B97
Authority key identifier: CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/4ovWzspQZj2eiTM36WsiPgcZOzc.roa
Signing time: Sat 01 Jan 2022 01:54:53 +0000
ROA not before: Sat 01 Jan 2022 01:54:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 4809
IP address blocks: 147.78.132.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10001303 (0x989b97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Validity
Not Before: Jan 1 01:54:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e28bd6ceca50663d9e893337e96b223e07193b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:28:a5:ac:db:57:2a:d3:71:05:d2:d0:32:f1:
04:4c:d4:e0:5d:5f:65:bd:e8:28:da:67:73:14:06:
82:15:4b:b5:be:e7:aa:7d:c8:66:a9:e3:c9:85:c8:
3d:da:26:af:39:27:eb:b8:5d:49:a0:16:d0:8f:a2:
3a:1c:cb:9a:43:57:2f:67:73:cc:a0:1f:6d:6d:f1:
c5:44:b6:81:7b:46:b5:41:38:ea:40:a3:c2:a1:6c:
6f:e9:53:66:54:1d:f0:40:30:cd:5d:da:ee:a1:38:
a9:b4:59:87:59:9e:07:84:49:60:c9:78:83:dc:5e:
80:72:65:e3:e7:fd:50:6b:65:50:94:db:17:3c:7f:
9e:4b:4d:20:b5:13:ca:1f:42:7b:31:c8:74:8f:08:
b1:fa:cd:08:75:8d:53:46:67:21:2f:64:f5:8b:51:
55:15:97:8b:2b:fd:4a:42:3e:ee:c1:ec:f0:b6:3a:
35:1a:f1:3f:f2:27:4b:4b:e6:3a:c4:e7:2c:a7:44:
f1:ca:30:ad:32:96:09:bc:82:b9:97:26:ec:ae:ed:
e8:a1:8d:c2:38:44:1b:01:58:fd:d7:3f:c9:91:01:
e9:a5:0a:19:0d:0f:07:1c:b2:6b:70:74:a8:26:b1:
19:9f:bb:89:8c:7a:2f:94:a5:d0:9f:b5:6d:f1:9d:
1d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8B:D6:CE:CA:50:66:3D:9E:89:33:37:E9:6B:22:3E:07:19:3B:37
X509v3 Authority Key Identifier:
keyid:CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/4ovWzspQZj2eiTM36WsiPgcZOzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.132.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:31:9b:35:e2:6b:0d:c9:2b:c0:28:f7:8b:26:7f:51:8a:3f:
89:6b:3a:04:1d:21:5f:18:44:98:64:43:e9:60:b9:53:1a:57:
3a:3e:9c:f3:72:79:8c:7e:1e:54:07:46:06:c0:0e:42:6b:f3:
31:fb:f5:06:b7:e9:f7:06:c8:96:3e:f1:3f:20:0b:fa:b8:ab:
3a:10:30:e6:d7:d9:29:29:fd:e5:bc:ae:f2:73:7d:ae:c7:bd:
0a:e7:71:dc:e3:80:4b:1b:3e:11:3f:86:d0:10:d4:d2:c7:48:
cb:e8:68:c7:ba:49:37:66:7f:6e:72:de:dd:e2:4a:78:3a:b2:
74:8f:6d:fb:5d:db:bd:b6:1a:76:f0:23:2d:59:18:1c:f0:a6:
30:17:8e:7b:9b:65:08:6d:b2:7c:06:ef:1e:bf:4b:9a:96:a1:
d0:dd:1f:f4:24:8c:ce:50:73:06:cc:04:81:2b:32:b1:3d:da:
86:dd:d0:29:89:cb:83:72:6c:87:00:bf:bb:64:ed:74:80:56:
81:33:b2:0a:6f:cc:f3:5f:4e:70:b7:79:fc:ca:b0:55:af:ff:
79:86:f9:74:e2:ba:ae:6e:b6:23:a2:6e:70:89:7a:65:14:33:
b5:0c:e7:0b:fe:db:2b:a7:45:68:6a:01:03:4c:44:3d:e8:e3:
21:bb:c4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:04 2025 by rpki-client