Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/525549-eeef-4df5-91d6-54ca30833dca/1/N0rcgoANW4MRoq1DtewN3EI3UuE.roa
File: N0rcgoANW4MRoq1DtewN3EI3UuE.roa (raw, json)
Hash identifier: O5ayf3hKBenUJtk1ieTYutpblHBYtB3Tq383x0Gozro=
Subject key identifier: 37:4A:DC:82:80:0D:5B:83:11:A2:AD:43:B5:EC:0D:DC:42:37:52:E1
Certificate issuer: /CN=e56485ea0013f03ac14a0b835992e0ab3ace36ef
Certificate serial: 68D65B
Authority key identifier: E5:64:85:EA:00:13:F0:3A:C1:4A:0B:83:59:92:E0:AB:3A:CE:36:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5WSF6gAT8DrBSguDWZLgqzrONu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/525549-eeef-4df5-91d6-54ca30833dca/1/N0rcgoANW4MRoq1DtewN3EI3UuE.roa
Signing time: Sat 01 Jan 2022 03:51:40 +0000
ROA not before: Sat 01 Jan 2022 03:51:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 146.19.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6870619 (0x68d65b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e56485ea0013f03ac14a0b835992e0ab3ace36ef
Validity
Not Before: Jan 1 03:51:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=374adc82800d5b8311a2ad43b5ec0ddc423752e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:73:89:d1:3c:2c:c2:1b:e5:93:7f:89:49:9e:
76:0a:63:7b:33:7b:d5:f5:f3:52:03:9e:06:ed:33:
6c:68:af:12:8e:0c:cf:c6:58:4e:25:93:cb:89:6d:
32:0c:0d:15:79:05:76:5c:3e:fb:21:52:6c:be:64:
9d:0f:b0:42:f3:0f:b8:e8:31:e5:04:68:a4:a3:03:
7f:1c:99:0b:18:83:03:11:76:a9:43:e2:d4:50:04:
e7:56:cd:00:32:84:ae:e6:23:7c:95:19:a2:d6:26:
53:09:1e:83:9e:9b:56:bc:a9:82:ad:ae:a0:53:e0:
c3:0b:48:99:68:37:49:54:00:3b:67:5f:26:de:97:
6f:bc:d4:0f:13:58:c8:0d:64:b3:c7:b7:10:2e:49:
95:ab:e2:fe:b0:00:24:dc:da:fb:ec:9f:3d:13:88:
f6:75:a9:f7:7f:36:d5:c7:66:1d:bf:3b:e0:40:e2:
10:3e:21:d1:03:21:4c:3c:13:87:d4:bc:5d:fb:83:
9c:fa:81:d7:d4:45:f9:c7:31:a8:cd:20:6a:9c:c0:
71:2d:09:ce:ed:14:55:69:2f:aa:e1:fd:3d:5b:8e:
ef:a7:d0:88:7d:e8:44:32:f8:88:83:64:19:96:ec:
1b:74:b6:c2:bd:01:9e:22:9d:c1:ce:11:42:8a:47:
e6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4A:DC:82:80:0D:5B:83:11:A2:AD:43:B5:EC:0D:DC:42:37:52:E1
X509v3 Authority Key Identifier:
keyid:E5:64:85:EA:00:13:F0:3A:C1:4A:0B:83:59:92:E0:AB:3A:CE:36:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WSF6gAT8DrBSguDWZLgqzrONu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/525549-eeef-4df5-91d6-54ca30833dca/1/N0rcgoANW4MRoq1DtewN3EI3UuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/525549-eeef-4df5-91d6-54ca30833dca/1/5WSF6gAT8DrBSguDWZLgqzrONu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.137.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:3c:30:fc:73:59:91:4b:c7:8d:f8:2e:e8:de:b2:95:d6:4d:
68:9a:9d:db:5c:5d:7c:ad:22:c0:69:15:d8:e8:3a:77:f8:e1:
f8:aa:4a:6c:78:29:53:8e:62:f0:22:65:70:7e:1d:89:7d:86:
86:32:a8:0d:db:4c:fa:08:7d:f9:78:6e:13:03:d9:a5:63:12:
37:9f:fc:92:86:a7:f2:d2:56:f8:97:06:e4:58:21:20:c0:19:
0a:ca:a5:b7:9e:41:bc:4d:a1:93:23:b0:45:e4:e2:ea:05:9d:
aa:79:28:15:2c:a4:a7:c2:01:d9:cf:ef:c4:f1:24:7d:d0:4f:
61:c7:cf:87:86:1f:25:b8:73:41:62:74:b0:b3:b6:fc:53:e5:
c8:f2:47:b1:b0:1e:c1:98:b6:89:24:d4:0d:c2:10:7b:7c:c3:
ea:f2:7f:10:4c:0e:eb:82:28:1a:dd:63:8d:43:3f:75:3e:94:
d8:0a:07:29:34:c7:28:a6:6a:7b:8d:20:45:22:23:06:57:8a:
61:4b:14:a6:1e:f3:5c:42:88:98:43:88:47:dd:82:bf:8d:92:
c5:1b:77:11:6a:5f:94:d1:9e:e5:19:58:62:eb:03:5f:a7:8c:
f9:df:86:88:73:a5:f3:52:1d:a7:ca:41:d1:cd:19:b8:8b:1c:
40:23:5f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:52 2023 by rpki-client on console-fra.rpki-client.org