Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/U7Ngg1Jh4KiVCqN21xaOOFHbKCk.roa
File: U7Ngg1Jh4KiVCqN21xaOOFHbKCk.roa (raw, json)
Hash identifier: j7s9xiJ4xvYqgzIu26lIgTwGZSqZjwmhJiq+whEYNIE=
Subject key identifier: 53:B3:60:83:52:61:E0:A8:95:0A:A3:76:D7:16:8E:38:51:DB:28:29
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 01828B9CC16E0732FDB225B0BA2E1EAC624A
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/U7Ngg1Jh4KiVCqN21xaOOFHbKCk.roa
Signing time: Thu 11 Aug 2022 06:34:42 +0000
ROA not before: Thu 11 Aug 2022 06:34:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44060
IP address blocks: 147.234.4.0/24 maxlen: 24
147.234.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8b:9c:c1:6e:07:32:fd:b2:25:b0:ba:2e:1e:ac:62:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Aug 11 06:34:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53b360835261e0a8950aa376d7168e3851db2829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:93:d1:11:5a:ee:e7:06:cd:10:fd:86:e4:4b:
34:16:ef:fb:a4:6d:1f:70:9c:7f:d4:69:b6:05:27:
ff:47:60:c5:a8:40:78:82:1d:7c:20:ea:64:df:23:
14:b8:67:a5:12:e0:03:bb:c2:98:d8:b1:e4:39:9e:
33:24:dd:5f:99:d4:d7:d4:02:4e:32:17:b3:51:4f:
32:88:63:15:49:e3:90:e1:c0:f1:33:98:14:6d:19:
41:65:c2:dc:bf:de:92:d8:7c:48:fc:c5:eb:2e:96:
86:6e:df:0c:6a:09:f2:b8:32:ea:1f:36:52:d4:77:
84:ff:59:3f:b6:7e:25:3f:78:2e:17:fa:df:99:ad:
fc:af:a2:9a:f7:d9:6e:2c:1c:c3:ba:87:3a:57:34:
1b:46:52:10:60:1e:8d:2b:f4:f1:a8:6b:14:42:b2:
57:2d:4b:5d:6b:b8:7d:72:c2:77:9d:ab:43:69:f7:
48:e6:0b:2d:b8:ad:93:f4:67:3e:bc:ed:b9:5e:d2:
95:da:c2:ab:5b:c1:b6:a5:3b:72:2d:06:ed:ab:f7:
b4:fa:29:73:c6:92:38:af:20:fd:5a:a0:ff:b4:15:
43:3c:1c:87:9f:62:b6:b9:d8:4a:66:65:83:27:37:
08:95:f4:f1:f7:a0:88:0f:47:3b:f5:db:e2:e3:03:
90:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B3:60:83:52:61:E0:A8:95:0A:A3:76:D7:16:8E:38:51:DB:28:29
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/U7Ngg1Jh4KiVCqN21xaOOFHbKCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.234.4.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:5d:05:a1:1b:a1:c5:ce:f0:91:c2:4c:5f:51:19:a9:d1:d1:
df:d3:7f:dd:3e:82:a7:12:80:2d:c7:df:2b:14:56:75:34:7e:
03:ee:b5:26:2f:b7:b6:45:0a:98:02:91:13:5e:c1:3c:9c:4e:
c6:43:ce:7e:2c:ac:4e:11:e1:dd:54:21:f2:8b:85:96:44:73:
3a:af:d8:dc:bf:89:42:e6:14:1b:dd:f4:8d:20:80:df:76:54:
9e:f0:50:06:d3:e5:17:ee:d0:9b:6b:3d:e5:e1:e3:3c:46:96:
59:d6:81:e0:fc:43:dc:19:b2:66:da:98:e8:06:e5:13:96:ee:
c8:9a:4a:68:24:ea:e8:16:fe:65:1f:2b:4c:a1:7f:62:2b:dc:
0c:f8:98:fc:ad:27:57:e6:d0:3e:b4:e1:84:ac:ae:f7:60:fb:
54:3a:ae:be:63:68:24:fd:ae:33:1f:8f:c9:2b:76:83:23:7d:
4f:c0:cb:11:08:7b:be:45:ac:97:c4:ac:de:f8:e1:57:5f:98:
f1:6c:02:eb:7f:50:33:7e:58:44:65:fd:75:0f:3d:b2:fc:e0:
9b:c3:16:56:00:0f:2f:b3:b8:46:8a:8c:2a:27:90:7c:75:7e:
77:12:94:51:88:23:f3:c8:54:88:74:1e:87:5a:e3:4e:d6:a7:
4f:9e:05:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:31 2023 by rpki-client on console.sobornost.net