Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/91fc0c-429f-47bf-a8fd-111112a64d9e/1/gT8ikjBvCTNYz_jsCfsgQ5-lwdE.roa
File: gT8ikjBvCTNYz_jsCfsgQ5-lwdE.roa (raw, json)
Hash identifier: nxbs/8ikxJBYdvZuxjfKa4cYXgrkz3sD99ub7kN7lIg=
Subject key identifier: 81:3F:22:92:30:6F:09:33:58:CF:F8:EC:09:FB:20:43:9F:A5:C1:D1
Certificate issuer: /CN=5490631f0dffd05b0e046782807181d5e99a561e
Certificate serial: 687FFA
Authority key identifier: 54:90:63:1F:0D:FF:D0:5B:0E:04:67:82:80:71:81:D5:E9:9A:56:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJBjHw3_0FsOBGeCgHGB1emaVh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/91fc0c-429f-47bf-a8fd-111112a64d9e/1/gT8ikjBvCTNYz_jsCfsgQ5-lwdE.roa
Signing time: Sat 01 Jan 2022 01:59:49 +0000
ROA not before: Sat 01 Jan 2022 01:59:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 146.19.158.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6848506 (0x687ffa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5490631f0dffd05b0e046782807181d5e99a561e
Validity
Not Before: Jan 1 01:59:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=813f2292306f093358cff8ec09fb20439fa5c1d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1b:89:d7:6b:3f:f5:a0:7d:54:21:2b:85:65:
97:c7:14:b5:ff:78:0e:8b:a3:80:ca:ea:34:d1:43:
b1:43:5b:bf:97:1b:15:6f:71:e4:dd:47:fa:9f:b6:
a7:ae:a3:8c:60:16:ff:35:ae:f6:f0:e7:a6:48:28:
f3:f5:c4:2e:bd:ec:55:b1:7f:65:14:bf:2e:44:9c:
ac:a0:1d:70:8e:e7:38:77:c4:57:4a:e6:71:f0:da:
da:cd:97:c6:42:ab:a0:1c:45:ed:d3:d8:6b:85:84:
9e:a9:2b:89:ee:49:85:98:1f:2e:e1:68:e7:db:38:
60:5f:a9:11:73:a0:0e:ee:79:fb:c3:38:4d:2b:90:
9c:8d:f2:d7:0e:be:84:57:57:29:b9:32:46:36:75:
a3:c1:1e:7b:fd:ec:39:12:d5:72:73:0e:e5:f9:5a:
91:c1:16:2b:fe:97:b7:53:cd:be:98:cc:ea:78:ad:
69:8a:ca:c5:84:fb:93:01:b5:a7:c8:ee:46:03:a5:
d0:d1:4d:27:d5:f8:ec:da:6e:70:3a:1f:be:59:ff:
4a:94:98:43:e1:04:f9:ec:2b:86:7d:a2:28:94:0b:
55:4e:e0:c5:5a:55:33:54:98:9c:77:27:b1:7a:96:
d3:2c:82:29:90:2d:4b:38:2f:3f:b1:18:58:6c:68:
c2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3F:22:92:30:6F:09:33:58:CF:F8:EC:09:FB:20:43:9F:A5:C1:D1
X509v3 Authority Key Identifier:
keyid:54:90:63:1F:0D:FF:D0:5B:0E:04:67:82:80:71:81:D5:E9:9A:56:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJBjHw3_0FsOBGeCgHGB1emaVh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/91fc0c-429f-47bf-a8fd-111112a64d9e/1/gT8ikjBvCTNYz_jsCfsgQ5-lwdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/91fc0c-429f-47bf-a8fd-111112a64d9e/1/VJBjHw3_0FsOBGeCgHGB1emaVh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.158.0/24
Signature Algorithm: sha256WithRSAEncryption
22:6d:db:87:21:f5:8a:f3:2f:ba:09:f1:e8:d9:77:42:f7:38:
58:9c:ab:35:15:0f:54:2c:28:26:b6:8b:f5:bb:ba:76:92:45:
c4:f1:f1:b9:91:c2:6b:9c:57:8b:8b:1c:77:44:88:7e:0b:07:
0b:d2:b2:7d:c9:7c:f6:f0:12:79:e3:45:a6:10:64:82:6c:ff:
16:41:22:4c:d1:3b:7e:16:b3:5c:56:f3:bd:28:e6:89:26:bc:
a9:dc:70:e7:4b:e9:b3:6d:81:81:ae:62:8b:bf:15:09:67:4b:
34:9b:07:84:69:49:59:d0:db:ee:7b:9b:e6:68:9c:b1:d3:f6:
06:82:28:e7:30:9d:7a:b9:bd:78:2a:3c:7e:b0:9b:33:2d:6e:
ce:d0:59:0a:f1:bc:78:e2:27:3d:4a:bc:ee:17:69:42:d4:bf:
3e:2b:3a:4a:98:4d:04:ee:14:e6:8b:3f:a9:5f:98:7e:b0:c1:
50:8a:a0:b3:49:b7:86:db:b3:70:60:81:52:2f:d3:54:74:32:
1e:56:48:57:5d:3b:29:cf:2b:b6:08:dd:53:cc:36:cd:6e:b1:
34:88:ea:5a:07:21:ba:af:6f:30:25:84:da:51:fe:77:a9:b2:
57:06:8c:c1:04:7f:b2:c3:5d:fa:5a:f3:b8:c3:b6:cd:d0:4b:
a8:4d:a1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:13 2023 by rpki-client on console-fra.rpki-client.org