Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/dL47cEKGoKu8LVvUi0vBFSHQOuU.roa
File: dL47cEKGoKu8LVvUi0vBFSHQOuU.roa (raw, json)
Hash identifier: 3vCV0dflO34ywIw75njsEyo6uQxNlNf07HbhtECGqgc=
Subject key identifier: 74:BE:3B:70:42:86:A0:AB:BC:2D:5B:D4:8B:4B:C1:15:21:D0:3A:E5
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 018A69259F7B996FD378875B605FE7392CAE
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/dL47cEKGoKu8LVvUi0vBFSHQOuU.roa
Signing time: Wed 06 Sep 2023 06:19:47 +0000
ROA not before: Wed 06 Sep 2023 06:19:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 193.135.137.0/24 maxlen: 24
193.135.151.0/24 maxlen: 24
193.135.157.0/24 maxlen: 24
109.234.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:69:25:9f:7b:99:6f:d3:78:87:5b:60:5f:e7:39:2c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Sep 6 06:19:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74be3b704286a0abbc2d5bd48b4bc11521d03ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:47:f5:d9:71:1b:52:14:66:75:4e:80:a2:97:
43:8d:c7:c0:a3:b4:4e:7b:69:00:c6:ff:43:90:1b:
82:aa:75:59:7e:fc:80:ab:68:27:8f:43:28:01:4d:
1b:58:b9:a6:0d:f0:97:04:d4:e9:7b:5c:e1:42:d7:
2e:b4:77:24:2f:0d:42:97:8a:de:8d:4f:e3:cf:ba:
5f:2f:ee:f3:44:af:b6:da:9a:98:1b:fc:94:d7:57:
ba:60:1c:23:a4:bb:58:9d:64:6f:47:fc:91:b2:a8:
79:3f:a5:4a:b2:ac:e2:4b:3b:28:ed:be:6a:3a:25:
74:76:0b:ab:36:87:81:6a:d8:cf:3a:77:b4:6a:5f:
0b:ef:b8:99:c5:af:a2:81:31:06:06:99:07:3d:34:
a2:ae:6b:f8:f5:25:3d:d3:2a:9c:7e:e7:64:cd:37:
31:9b:55:1b:56:f5:a0:07:23:36:0f:97:35:b1:46:
e4:67:ed:89:07:27:27:2e:66:7c:3c:25:41:c3:df:
a3:23:31:1f:db:6c:04:3c:c1:04:c3:f6:27:b3:7d:
2c:21:b1:f6:7d:c8:1a:66:b1:97:b1:d1:bc:bf:e3:
cc:0d:10:f5:15:ea:06:09:7a:71:b0:bd:38:c8:70:
83:86:1e:69:64:63:f7:21:97:bf:41:46:7c:13:49:
d6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BE:3B:70:42:86:A0:AB:BC:2D:5B:D4:8B:4B:C1:15:21:D0:3A:E5
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/dL47cEKGoKu8LVvUi0vBFSHQOuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.74.0/24
193.135.137.0/24
193.135.151.0/24
193.135.157.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:a4:af:93:e6:bf:36:fa:2e:cb:82:08:20:a0:34:86:a2:a6:
0f:8e:e4:99:12:16:b6:81:ce:d8:e4:a0:88:07:91:27:05:15:
6d:c3:7a:90:ad:69:7b:65:22:08:e8:28:e7:1b:87:53:1a:69:
77:46:86:ad:23:4c:ba:94:50:5b:e5:3c:2e:04:22:0d:bd:41:
f4:61:f8:11:43:29:29:7c:a1:2d:2c:42:26:5f:8c:9a:d4:d9:
d6:0b:6b:d6:90:bd:2a:4c:6c:cb:c3:59:ed:4a:b3:e3:3c:6e:
75:02:b6:d5:cd:5d:3b:9e:7c:ba:33:ed:7f:36:9c:fd:23:f3:
a9:e6:02:53:fd:19:35:fb:7c:96:fe:9b:98:73:b2:9a:80:52:
a7:ad:bd:27:c1:bd:65:a4:c1:26:54:9e:cb:cb:89:6f:89:32:
5a:98:88:93:e7:8c:81:e3:e9:bf:16:28:23:53:13:f1:32:a5:
fb:a2:68:be:e5:d3:04:fb:9f:38:e8:35:21:67:cf:e8:7f:19:
82:8a:95:47:9f:f2:1f:cf:0d:bc:6a:56:71:73:8b:c0:5e:43:
d0:c2:2f:34:ec:06:a8:17:9e:6d:e2:37:05:09:64:10:f1:72:
a2:c6:37:6e:ee:04:20:1e:ab:eb:b3:f8:43:34:4e:8b:64:63:
f2:2e:56:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:30 2025 by rpki-client