Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/_ordzGOBFJXncQmqDb11I--IznU.roa
File: _ordzGOBFJXncQmqDb11I--IznU.roa (raw, json)
Hash identifier: wF2oOzu38sd97URLhbu37psLKrm33axBggkT54dpP3s=
Subject key identifier: FE:8A:DD:CC:63:81:14:95:E7:71:09:AA:0D:BD:75:23:EF:88:CE:75
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0189AE254FC7F5AEE9D647BB2094D815215C
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/_ordzGOBFJXncQmqDb11I--IznU.roa
Signing time: Mon 31 Jul 2023 22:50:28 +0000
ROA not before: Mon 31 Jul 2023 22:50:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 14.102.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ae:25:4f:c7:f5:ae:e9:d6:47:bb:20:94:d8:15:21:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 31 22:50:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe8addcc63811495e77109aa0dbd7523ef88ce75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:24:71:90:e4:2d:eb:82:a6:a8:3e:70:31:29:
bf:c1:74:6e:3c:18:5f:4f:85:8b:55:f7:42:8d:10:
c1:c0:4c:b8:18:19:0b:19:18:b8:a5:66:42:d8:cc:
ff:65:54:76:39:8b:9f:51:9e:b6:4d:f4:d0:97:95:
e6:76:a6:54:b6:6c:30:ea:89:1d:9c:71:1d:bc:3a:
cb:ee:55:92:1d:98:8a:a5:5c:c7:13:d8:0c:bd:a0:
23:2e:9c:19:74:25:15:31:12:3c:dd:ed:42:1e:f5:
7d:e4:fd:9d:12:cb:c5:99:3e:32:e1:d9:18:ce:e3:
e3:07:6f:17:79:58:dc:a0:55:66:7d:bf:2f:9f:81:
a1:9c:da:04:bf:9c:23:b3:ca:13:ec:0e:e7:d4:3a:
56:75:5a:6b:0e:31:3c:97:9c:32:1b:81:09:2f:34:
c7:43:ed:de:e4:ab:31:54:6e:66:f0:04:eb:e2:05:
09:c0:2e:55:dc:fe:48:f1:51:3b:a7:a1:6d:3b:bc:
80:ee:e5:69:ab:54:aa:c0:5d:06:36:16:de:e4:f6:
d0:62:2c:5f:a5:f2:7d:0a:35:77:b7:67:b6:ef:8c:
09:e8:a0:82:5d:55:99:1e:2a:ed:04:b4:8a:76:74:
2c:00:78:59:8c:e7:85:60:a6:e4:d4:8d:a0:1c:c4:
de:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8A:DD:CC:63:81:14:95:E7:71:09:AA:0D:BD:75:23:EF:88:CE:75
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/_ordzGOBFJXncQmqDb11I--IznU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.239.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:ba:63:0e:c4:d5:38:19:77:aa:42:7d:47:c5:70:87:7a:59:
2b:e9:7b:c1:a3:05:0e:45:cb:68:1c:26:1e:cf:0b:a7:e7:5f:
d1:0f:e7:6f:cf:a8:5a:2c:e5:95:e9:ab:b3:ae:34:a4:e4:56:
16:e8:73:45:4c:01:cc:60:cb:2d:c7:8f:ca:66:69:ac:65:62:
5e:c7:3b:34:00:ba:19:27:b5:08:68:f1:ac:ff:e0:73:c5:fc:
71:5a:e4:55:0e:d6:00:60:0d:5a:c7:7c:3b:24:4a:33:96:5a:
6b:53:a1:fc:5b:dc:0c:42:58:d5:b1:df:4c:8c:2b:c2:23:56:
27:e7:12:37:70:4b:73:bd:42:37:80:fa:17:b2:30:f2:20:3d:
51:4d:7a:c2:fe:b7:c7:aa:85:33:be:40:aa:4a:82:b4:6b:62:
cc:0d:ac:ab:03:d5:e8:05:59:30:94:07:c0:0f:82:8b:38:89:
3b:68:84:d7:57:3e:d7:8a:09:26:ed:b9:b3:ef:39:84:c6:91:
c7:07:9a:b8:77:d5:2b:4c:19:1b:9f:59:28:43:59:d4:ce:6f:
af:6a:cc:1b:1c:e9:fd:c0:39:76:c7:bb:cf:61:7c:92:64:50:
05:b2:be:12:71:fc:dc:2b:e3:09:3f:ca:be:ae:69:16:d5:df:
ca:db:02:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:07 2025 by rpki-client