Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/1a529e-0050-4637-9820-55eb114866c0/1/5sOyYTWTYPDy277K8NP4mueQ7tI.roa
File: 5sOyYTWTYPDy277K8NP4mueQ7tI.roa (raw, json)
Hash identifier: H1esrSOp9FAK8Fbk/rbMI9IDvhJ2bE1SmnixdBd1igk=
Subject key identifier: E6:C3:B2:61:35:93:60:F0:F2:DB:BE:CA:F0:D3:F8:9A:E7:90:EE:D2
Certificate issuer: /CN=009421965995af1d65e8e9a98a21dc2681d989f1
Certificate serial: 713186
Authority key identifier: 00:94:21:96:59:95:AF:1D:65:E8:E9:A9:8A:21:DC:26:81:D9:89:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJQhllmVrx1l6OmpiiHcJoHZifE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/1a529e-0050-4637-9820-55eb114866c0/1/5sOyYTWTYPDy277K8NP4mueQ7tI.roa
Signing time: Sat 01 Jan 2022 01:57:59 +0000
ROA not before: Sat 01 Jan 2022 01:57:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 146.19.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7418246 (0x713186)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=009421965995af1d65e8e9a98a21dc2681d989f1
Validity
Not Before: Jan 1 01:57:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6c3b261359360f0f2dbbecaf0d3f89ae790eed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:97:77:7a:6f:1c:66:37:80:d8:71:92:5b:f2:
cd:32:08:1e:42:f1:94:15:8b:2a:d8:67:07:56:dd:
90:e2:cb:64:df:3a:cf:56:aa:56:46:cc:95:b5:d9:
77:eb:1d:b4:0f:ca:fb:f9:d2:a0:62:d0:de:ef:e6:
91:cc:2d:f8:57:f3:14:58:df:a8:57:27:27:0d:86:
51:33:cb:07:d5:f2:6f:ef:96:98:82:46:29:87:0d:
2b:41:06:ee:97:e6:09:b9:2b:16:97:2a:64:17:aa:
6c:90:71:75:d9:38:db:ac:97:0d:be:91:f7:59:4a:
b2:5a:17:0d:00:f2:cf:14:24:25:1c:7e:c3:a5:79:
7b:e5:20:d4:f4:3c:33:db:86:0f:d6:8f:bd:cb:47:
44:ec:6c:4c:03:94:af:24:05:65:77:fe:7c:b4:f3:
b0:ab:79:18:5d:0b:c6:6b:e3:4c:45:b8:ff:52:78:
e3:41:ce:43:84:c3:59:07:cd:cf:b2:92:3a:c9:ea:
8a:98:26:19:81:88:c2:81:d7:0b:33:c5:42:78:11:
cf:14:15:4b:cf:8d:fa:80:bb:86:8a:fe:65:e1:2f:
75:58:c5:fb:ce:d8:a5:d4:81:d6:52:cb:cf:89:92:
b1:89:8b:df:1d:66:cd:f5:03:38:35:89:42:c2:64:
00:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C3:B2:61:35:93:60:F0:F2:DB:BE:CA:F0:D3:F8:9A:E7:90:EE:D2
X509v3 Authority Key Identifier:
keyid:00:94:21:96:59:95:AF:1D:65:E8:E9:A9:8A:21:DC:26:81:D9:89:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJQhllmVrx1l6OmpiiHcJoHZifE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1a529e-0050-4637-9820-55eb114866c0/1/5sOyYTWTYPDy277K8NP4mueQ7tI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1a529e-0050-4637-9820-55eb114866c0/1/AJQhllmVrx1l6OmpiiHcJoHZifE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.74.0/24
Signature Algorithm: sha256WithRSAEncryption
e9:43:87:0b:73:f2:cf:91:b1:3f:55:21:58:92:48:74:a3:bd:
9e:7b:0e:92:86:b5:04:3e:66:07:92:2a:24:48:bb:52:ef:a8:
f3:32:21:71:bf:0f:7d:2c:47:7c:a4:ca:22:48:fe:b0:b3:c7:
b8:3a:53:91:99:5d:4d:e6:86:e5:bd:a9:62:21:36:cb:e7:09:
ac:77:d6:e5:08:3a:3d:5c:33:fb:e0:d5:18:ed:b0:d1:f3:69:
ab:8d:fc:87:78:ab:5a:e1:c5:8c:8b:3a:dd:69:78:25:b6:3e:
03:85:34:fa:96:b6:e3:dc:a5:2a:30:79:2d:40:38:d3:c3:0a:
45:33:c1:80:6e:7c:19:96:17:82:af:b1:81:4f:4d:e2:cd:89:
bb:a3:f1:ff:e2:53:4a:25:3a:36:1d:df:99:e0:b3:c2:4d:0a:
09:38:84:72:e3:7a:e0:f9:6c:29:64:4a:57:b8:b3:62:69:2e:
7e:b7:0c:f6:17:67:4f:41:ab:8e:51:a3:de:89:f0:45:0f:de:
b8:f0:ea:f5:52:df:5a:dc:8a:fa:e9:5c:cd:d4:65:9c:11:75:
1f:ad:b0:ca:9a:06:6b:62:35:49:7c:0a:27:fa:4f:aa:73:e9:
fc:0e:83:e0:88:14:b1:34:3d:56:c6:97:21:06:b2:30:92:a2:
3f:a4:b5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:00 2023 by rpki-client on console-ams.rpki-client.org