Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/B39M5KFWPaXVMDOm1S1AW0gvXVs.roa
File: B39M5KFWPaXVMDOm1S1AW0gvXVs.roa (raw, json)
Hash identifier: w0UJVqL9oLQXeQ0u3tI011EcAocYQB9euyUfkSXU7iM=
Subject key identifier: 07:7F:4C:E4:A1:56:3D:A5:D5:30:33:A6:D5:2D:40:5B:48:2F:5D:5B
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 018BB51BC3897CC45A597C682AC7E2CFA399
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/B39M5KFWPaXVMDOm1S1AW0gvXVs.roa
Signing time: Thu 09 Nov 2023 17:22:57 +0000
ROA not before: Thu 09 Nov 2023 17:22:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 14.102.231.0/24 maxlen: 24
14.102.236.0/24 maxlen: 24
14.102.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b5:1b:c3:89:7c:c4:5a:59:7c:68:2a:c7:e2:cf:a3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Nov 9 17:22:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=077f4ce4a1563da5d53033a6d52d405b482f5d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0b:a7:df:1b:62:f1:39:1d:f6:c7:ff:5c:d3:
bd:30:4b:06:6e:9c:e4:01:39:63:fa:4f:77:67:03:
d3:d7:89:4b:db:2f:60:02:41:21:c4:17:4d:98:5c:
43:01:c6:30:60:68:26:09:04:f1:85:69:48:ec:21:
0c:f7:c7:6a:99:a3:f3:d4:09:df:ec:b9:f2:77:a9:
2a:c9:c6:90:94:b3:e5:a4:d4:f0:52:67:14:c9:38:
27:85:fb:fa:d8:90:27:3f:9c:d5:e9:a3:4e:25:b6:
04:08:70:1b:46:1a:01:0d:cd:2e:ed:11:bc:89:3d:
ff:b2:1b:e9:13:9c:29:63:19:15:4e:ca:6c:25:51:
f3:e5:68:b1:38:60:67:4c:6f:85:39:4f:a8:5f:5d:
45:d1:e2:2d:8b:ad:99:d5:11:4c:f3:a3:52:01:25:
2e:34:f2:5a:6d:c7:1d:5e:13:1d:cf:f2:77:b3:ba:
ab:99:27:9d:9d:57:62:72:e8:95:f8:e9:36:51:b8:
90:46:34:c1:c1:5c:b2:76:c9:47:22:ac:2f:f1:49:
c1:33:c7:77:ab:72:fe:c4:be:e1:50:0b:54:1e:a7:
74:c7:ab:bb:8c:2a:84:83:e1:e1:d3:b0:f1:4a:88:
1b:7d:81:95:52:48:c7:e7:31:81:dc:56:5e:e9:fa:
0a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7F:4C:E4:A1:56:3D:A5:D5:30:33:A6:D5:2D:40:5B:48:2F:5D:5B
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/B39M5KFWPaXVMDOm1S1AW0gvXVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.231.0/24
14.102.234.0/24
14.102.236.0/24
Signature Algorithm: sha256WithRSAEncryption
79:8b:68:6d:7c:05:c2:55:44:77:13:4f:67:8b:28:7c:83:1b:
74:7f:31:35:16:36:6f:04:62:cd:d7:fa:e4:cf:37:a7:6f:ff:
89:9c:18:6e:72:31:62:35:84:58:c8:16:79:d8:ba:79:74:15:
c1:92:08:09:29:ad:9b:53:a6:b2:13:f7:81:1d:e7:18:36:e5:
95:54:58:b3:fa:e0:ec:7f:ae:d2:6f:53:bc:8e:52:24:0d:22:
86:af:4a:ed:d6:cf:6b:45:d5:73:f2:f2:44:a1:4d:e7:d9:df:
81:29:9f:f8:3b:41:cb:f6:2e:77:0e:bf:19:7a:aa:dd:6b:dd:
61:60:95:b3:9b:68:9c:ca:9a:ce:2c:ea:9c:65:db:e0:71:1e:
c9:41:59:58:91:b3:9e:f4:ff:27:72:38:73:29:97:91:75:42:
bf:aa:27:6b:3a:f1:54:65:1e:09:a5:81:ed:57:9d:6e:8b:fc:
9a:57:8e:10:f8:60:9e:2a:78:f6:b8:0f:7f:b7:38:f1:74:8e:
2f:17:0b:4a:5e:b7:42:2f:31:46:46:e3:82:5f:4a:c7:93:c3:
73:dc:87:11:4a:6d:15:94:89:3d:20:b8:a3:14:06:33:67:96:
fa:ca:ad:50:0e:b0:6f:18:f4:8d:74:f1:52:86:b5:70:76:dd:
ab:0e:2c:21
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYu1G8OJfMRaWXxoKsfiz6OZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjMxMTA5MTcyMjU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzdmNGNlNGExNTYzZGE1ZDUzMDMzYTZkNTJkNDA1YjQ4MmY1ZDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQun3xti8Tkd9sf/XNO9MEsGbpzk
ATlj+k93ZwPT14lL2y9gAkEhxBdNmFxDAcYwYGgmCQTxhWlI7CEM98dqmaPz1Anf
7Lnyd6kqycaQlLPlpNTwUmcUyTgnhfv62JAnP5zV6aNOJbYECHAbRhoBDc0u7RG8
iT3/shvpE5wpYxkVTspsJVHz5WixOGBnTG+FOU+oX11F0eIti62Z1RFM86NSASUu
NPJabccdXhMdz/J3s7qrmSednVdicuiV+Ok2UbiQRjTBwVyydslHIqwv8UnBM8d3
q3L+xL7hUAtUHqd0x6u7jCqEg+Hh07DxSogbfYGVUkjH5zGB3FZe6foKVQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFAd/TOShVj2l1TAzptUtQFtIL11bMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvQjM5TTVLRldQYVhWTURPbTFTMUFXMGd2WFZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQADmbnAwQA
DmbqAwQADmbsMA0GCSqGSIb3DQEBCwUAA4IBAQB5i2htfAXCVUR3E09niyh8gxt0
fzE1FjZvBGLN1/rkzzenb/+JnBhucjFiNYRYyBZ52Lp5dBXBkggJKa2bU6ayE/eB
HecYNuWVVFiz+uDsf67Sb1O8jlIkDSKGr0rt1s9rRdVz8vJEoU3n2d+BKZ/4O0HL
9i53Dr8Zeqrda91hYJWzm2icyprOLOqcZdvgcR7JQVlYkbOe9P8ncjhzKZeRdUK/
qidrOvFUZR4JpYHtV51ui/yaV44Q+GCeKnj2uA9/tzjxdI4vFwtKXrdCLzFGRuOC
X0rHk8Nz3IcRSm0VlIk9ILijFAYzZ5b6yq1QDrBvGPSNdPFShrVwdt2rDiwh
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:47 2025 by rpki-client