Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7STSB0tFW1A2x69zc8298EknTxM.roa
File: 7STSB0tFW1A2x69zc8298EknTxM.roa (raw, json)
Hash identifier: vfhxvKQtqxoZe8dr2LSiePivOg7Cx5etNtOOeA/eENc=
Subject key identifier: ED:24:D2:07:4B:45:5B:50:36:C7:AF:73:73:CD:BD:F0:49:27:4F:13
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0186A8AB8DBA4DC75006F0AD430F2EDFC69E
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7STSB0tFW1A2x69zc8298EknTxM.roa
Signing time: Fri 03 Mar 2023 18:11:00 +0000
ROA not before: Fri 03 Mar 2023 18:11:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212953
IP address blocks: 14.102.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a8:ab:8d:ba:4d:c7:50:06:f0:ad:43:0f:2e:df:c6:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Mar 3 18:11:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed24d2074b455b5036c7af7373cdbdf049274f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:29:7a:41:b0:5c:27:04:72:2a:8b:95:41:16:
65:4d:10:89:85:2e:36:cc:c9:f8:74:2c:d9:14:eb:
d6:f3:91:eb:64:3d:13:bd:1d:d6:a3:34:bc:32:10:
93:96:0d:43:9e:dd:6f:98:91:40:e1:49:70:68:75:
c6:86:71:b9:a4:68:1f:67:bf:aa:6e:3c:97:ab:03:
a4:84:aa:74:33:5b:d5:49:2f:ad:98:97:fb:85:69:
c4:04:31:0f:63:06:d8:ba:f4:89:7a:17:4d:46:86:
51:f9:fc:a1:fa:e7:b8:60:66:46:04:ed:0a:f0:03:
c6:8f:29:ab:d0:cc:a4:ae:e1:26:83:0f:ee:ec:40:
37:3c:1a:70:f1:e3:3d:dd:6f:ec:fd:4e:db:4f:74:
47:28:e0:81:f0:03:ab:e8:03:7f:86:2f:ff:51:e1:
a7:0c:5d:77:e2:4d:3b:9f:2f:e7:49:ae:be:7f:cd:
d2:b7:cc:ac:7a:44:60:16:64:82:05:45:1f:83:a4:
b5:80:22:16:5f:62:bf:16:58:48:50:68:8e:26:40:
c1:4e:ff:26:5b:c4:6e:a8:30:37:0d:04:9c:a3:4a:
ad:36:90:6b:48:75:fa:34:a3:30:63:1f:60:39:56:
b5:d6:e7:69:32:ab:e9:a6:e8:15:5a:c5:f5:ef:0e:
33:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:24:D2:07:4B:45:5B:50:36:C7:AF:73:73:CD:BD:F0:49:27:4F:13
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7STSB0tFW1A2x69zc8298EknTxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.235.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:9f:8e:95:c8:5a:e2:41:b5:07:8d:4f:68:39:2c:be:ac:00:
f0:06:63:af:fc:20:52:cf:ff:c6:9c:b0:57:55:bc:0d:9d:68:
f2:de:c5:72:d6:86:76:d0:c3:d7:21:5c:e3:46:5e:a7:11:49:
14:26:6e:88:3d:c1:1f:45:43:12:e1:77:63:bb:50:fe:c0:97:
3a:07:ef:17:68:ca:26:33:ef:a7:cb:50:96:55:bd:d6:fd:7a:
61:46:d1:83:0d:ef:1b:89:75:6c:21:7b:8e:38:0f:f2:e8:2d:
4b:c6:dd:d0:19:52:1e:3d:6c:58:6a:43:65:7c:64:db:b7:7c:
20:c8:a8:72:bc:8a:3e:cd:df:80:62:fc:0d:a6:b4:e1:86:09:
8d:54:81:97:13:38:58:bc:3b:94:fa:62:0d:70:cf:05:78:8f:
96:c7:52:64:c6:26:d1:b8:37:85:77:e3:d2:07:27:e2:5d:28:
a7:51:81:53:83:84:d0:4e:5a:37:ba:89:e2:55:a0:92:08:77:
9f:85:77:03:ba:3f:9c:6b:6c:59:34:0b:62:d9:86:a6:0f:49:
07:cd:de:fc:c4:b3:b2:4d:c1:86:2c:c6:01:52:45:80:13:67:
69:63:c2:81:13:11:97:da:3d:a7:2e:00:bb:69:f9:04:84:7b:
23:ac:19:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:35 2025 by rpki-client