Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/OvTtd2LOntC0PDKJq0_L7FwmpVE.roa
File: OvTtd2LOntC0PDKJq0_L7FwmpVE.roa (raw, json)
Hash identifier: ky7TwbxC6GCVJDCPvCBKMt2KntUI3wkH1nqj9pvVhts=
Subject key identifier: 3A:F4:ED:77:62:CE:9E:D0:B4:3C:32:89:AB:4F:CB:EC:5C:26:A5:51
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0188FDBBB5787274439DB3FC6CFA4CA3AE7D
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/OvTtd2LOntC0PDKJq0_L7FwmpVE.roa
Signing time: Tue 27 Jun 2023 16:41:57 +0000
ROA not before: Tue 27 Jun 2023 16:41:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 14.102.239.0/24 maxlen: 24
14.102.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fd:bb:b5:78:72:74:43:9d:b3:fc:6c:fa:4c:a3:ae:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 27 16:41:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3af4ed7762ce9ed0b43c3289ab4fcbec5c26a551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ec:d6:85:d9:26:c9:c2:64:ae:c0:19:5b:68:
33:13:d1:d5:4d:b8:c9:6a:8c:a3:46:ba:e8:65:8d:
3a:16:b2:28:28:f9:79:3b:df:fb:c4:5b:f8:95:2a:
0d:66:82:e1:fd:f4:06:a0:91:d1:05:44:f2:53:7d:
9e:60:59:8e:ff:ae:81:cb:7a:ee:e6:ce:a3:8f:85:
4b:3a:12:e9:79:9b:ac:17:30:c3:89:8b:02:08:66:
dd:fa:95:c4:49:38:7c:16:3a:ce:35:ac:c5:37:77:
04:a8:0e:a3:61:ab:f7:1c:61:17:68:e7:6a:ae:81:
e1:9d:50:08:4e:53:58:39:76:54:eb:74:dc:1b:cb:
87:20:0d:ed:a3:c1:21:90:bd:0a:7f:30:55:4a:cd:
c9:6a:bd:e3:0b:f6:93:58:9c:83:02:5c:51:ce:17:
33:31:73:c2:27:34:37:42:0c:a0:4d:22:dd:b4:7a:
fd:43:7b:52:3d:ed:36:65:aa:89:1f:aa:23:94:a8:
56:36:c2:5a:37:72:60:56:af:83:f8:e6:0d:61:34:
b1:26:3b:13:db:c1:8c:9e:29:52:50:ee:be:ff:30:
30:e7:6b:3e:09:1d:40:20:df:da:08:17:cd:9c:c2:
37:3a:03:ae:7e:0c:a4:80:87:33:c8:38:53:a2:7c:
c1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F4:ED:77:62:CE:9E:D0:B4:3C:32:89:AB:4F:CB:EC:5C:26:A5:51
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/OvTtd2LOntC0PDKJq0_L7FwmpVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.236.0/24
14.102.239.0/24
Signature Algorithm: sha256WithRSAEncryption
57:7a:41:1f:1a:fd:9a:1a:9f:44:67:bf:25:5c:8c:05:1e:04:
40:04:90:62:a8:e8:60:45:29:dd:dc:63:c4:6b:f2:16:58:84:
9b:8f:59:f3:72:2a:3d:c4:c3:13:52:6c:ed:2d:08:d3:09:4c:
c6:5a:ba:c0:ca:1e:f4:84:b6:7c:4f:dc:31:1f:ab:65:91:33:
59:fb:e2:ce:4e:ba:cb:df:ea:f8:d2:89:24:a7:c8:3b:ab:5f:
70:44:de:86:eb:ed:b7:d7:bc:a7:f4:05:14:a1:82:1b:3f:18:
f9:43:4c:9f:4b:7b:1b:f0:5e:ba:1c:21:bf:97:a6:9c:42:40:
9c:a7:1d:84:0b:1b:35:6c:41:74:80:50:ff:a1:3f:08:cb:30:
b6:65:51:d5:6f:6d:0d:dd:90:ed:c3:0f:98:0c:1c:4d:92:29:
5b:af:1f:f7:ab:82:d0:7f:71:1a:e0:cc:79:b5:f3:54:d7:c4:
cc:f5:57:38:7d:07:c2:11:e4:a5:f7:54:64:b4:4f:f9:a8:1d:
f6:74:82:84:2e:af:29:16:cd:0f:1b:98:66:27:07:2c:4b:2b:
0a:90:14:05:40:9d:df:b5:6c:20:81:4d:7b:49:ee:f3:fb:c2:
6b:77:6f:85:78:34:03:1d:86:0c:da:15:df:93:3b:02:ed:cc:
aa:21:cb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:55 2025 by rpki-client