Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/r1PWQHQGZoo0AcnPxnCHts4ZYFo.roa
File: r1PWQHQGZoo0AcnPxnCHts4ZYFo.roa (raw, json)
Hash identifier: E7EboSCtT+prqBTeGbEjumFdLO2Q7PzhG9xtul/z2jE=
Subject key identifier: AF:53:D6:40:74:06:66:8A:34:01:C9:CF:C6:70:87:B6:CE:19:60:5A
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01867A58FBBD26DBD7F865F3AF1D7D14D06F
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/r1PWQHQGZoo0AcnPxnCHts4ZYFo.roa
Signing time: Wed 22 Feb 2023 18:18:17 +0000
ROA not before: Wed 22 Feb 2023 18:18:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 14.102.234.0/24 maxlen: 24
14.102.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7a:58:fb:bd:26:db:d7:f8:65:f3:af:1d:7d:14:d0:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Feb 22 18:18:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af53d6407406668a3401c9cfc67087b6ce19605a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ff:91:34:b0:be:43:8f:85:30:20:13:6e:84:
f8:66:43:28:c2:1e:ed:2d:27:99:73:fc:f6:a9:e2:
a0:b6:1d:85:bc:9c:c2:41:cd:7b:23:1b:b0:b1:e4:
0f:a7:26:97:22:ef:7a:a7:64:50:fd:63:9f:dc:50:
ab:f7:00:00:69:95:60:5b:32:7a:03:f8:6e:21:3c:
c7:7c:84:b1:1d:6d:93:e2:96:0f:76:af:98:c2:c1:
d0:e2:03:53:e6:37:d9:78:81:66:98:7b:f8:20:0b:
15:1f:c8:5a:72:9f:57:1a:0c:97:fd:4a:bd:71:32:
b1:a6:f1:8d:73:c2:fd:4c:b8:48:a6:01:5a:0d:df:
3a:3f:29:3f:69:c9:ad:d5:24:b7:fc:f6:5c:21:8d:
45:f4:df:ef:29:3c:3b:e8:93:39:b0:df:df:44:1a:
51:b9:6a:05:2c:d8:3e:15:2e:6f:82:9a:0a:0c:75:
28:6c:70:68:af:e8:19:18:29:ad:9f:af:9b:dd:1a:
bd:ae:f8:1f:09:42:60:66:24:04:98:cc:4d:57:8d:
f7:37:ea:09:d4:d6:12:8a:1b:50:69:16:42:21:84:
78:89:aa:95:1c:42:45:1c:f5:cb:d9:b1:53:2e:b6:
76:66:1e:ee:5c:ea:ae:04:59:a9:1a:c9:ab:98:a4:
9a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:53:D6:40:74:06:66:8A:34:01:C9:CF:C6:70:87:B6:CE:19:60:5A
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/r1PWQHQGZoo0AcnPxnCHts4ZYFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.234.0/24
14.102.239.0/24
Signature Algorithm: sha256WithRSAEncryption
83:58:4d:78:91:ad:44:18:36:6a:85:b3:54:b2:58:87:76:70:
94:6a:23:bb:ce:dc:2c:60:be:2b:38:4d:0b:a3:84:ac:4c:9b:
37:9d:68:bd:30:c2:f0:75:b7:bc:28:0a:0b:b7:ee:74:28:ae:
b4:c2:1e:ea:e1:7e:51:f0:b9:93:9b:a0:a5:51:3a:54:13:0d:
c9:ec:0b:b6:e0:2f:bd:08:03:9e:c3:85:06:00:22:43:3b:91:
70:aa:39:c9:5d:fa:d1:b9:33:6d:32:16:e7:54:59:45:eb:7a:
e6:23:51:2b:7d:a5:a8:aa:28:ae:44:fc:f0:76:d3:da:be:ea:
28:a5:df:2f:ee:70:9a:b1:dd:15:78:ef:82:09:09:84:45:eb:
b3:68:ec:34:c2:72:c1:da:1c:31:ee:78:1a:5b:29:b5:23:a7:
a6:15:08:3f:77:bd:3d:83:f5:19:28:53:a2:e3:51:7c:f7:25:
ab:ff:1b:59:21:65:08:4b:4b:37:3f:fd:ea:0c:a3:b2:52:d4:
af:86:3a:3c:a4:6e:7d:28:d0:61:de:44:d3:bb:9e:9e:20:80:
1e:51:54:3a:13:b0:15:1f:e2:32:78:5d:d0:57:c5:15:34:ae:
e2:dc:0c:a6:22:4e:6c:a1:d9:85:19:21:1c:a5:5c:2e:c0:f6:
d6:5d:19:ca
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYZ6WPu9JtvX+GXzrx19FNBvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjMwMjIyMTgxODE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjUzZDY0MDc0MDY2NjhhMzQwMWM5Y2ZjNjcwODdiNmNlMTk2MDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlf+RNLC+Q4+FMCATboT4ZkMowh7t
LSeZc/z2qeKgth2FvJzCQc17IxuwseQPpyaXIu96p2RQ/WOf3FCr9wAAaZVgWzJ6
A/huITzHfISxHW2T4pYPdq+YwsHQ4gNT5jfZeIFmmHv4IAsVH8hacp9XGgyX/Uq9
cTKxpvGNc8L9TLhIpgFaDd86Pyk/acmt1SS3/PZcIY1F9N/vKTw76JM5sN/fRBpR
uWoFLNg+FS5vgpoKDHUobHBor+gZGCmtn6+b3Rq9rvgfCUJgZiQEmMxNV433N+oJ
1NYSihtQaRZCIYR4iaqVHEJFHPXL2bFTLrZ2Zh7uXOquBFmpGsmrmKSawQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFK9T1kB0BmaKNAHJz8Zwh7bOGWBaMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvcjFQV1FIUUdab28wQWNuUHhuQ0h0czRaWUZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQADmbqAwQA
DmbvMA0GCSqGSIb3DQEBCwUAA4IBAQCDWE14ka1EGDZqhbNUsliHdnCUaiO7ztws
YL4rOE0Lo4SsTJs3nWi9MMLwdbe8KAoLt+50KK60wh7q4X5R8LmTm6ClUTpUEw3J
7Au24C+9CAOew4UGACJDO5FwqjnJXfrRuTNtMhbnVFlF63rmI1ErfaWoqiiuRPzw
dtPavuoopd8v7nCasd0VeO+CCQmEReuzaOw0wnLB2hwx7ngaWym1I6emFQg/d709
g/UZKFOi41F89yWr/xtZIWUIS0s3P/3qDKOyUtSvhjo8pG59KNBh3kTTu56eIIAe
UVQ6E7AVH+IyeF3QV8UVNK7i3AymIk5sodmFGSEcpVwuwPbWXRnK
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:53 2025 by rpki-client