Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/1a529e-0050-4637-9820-55eb114866c0/1/Z7Gw4C39t4Ex75lMFYAXp6f9MhI.roa
File: Z7Gw4C39t4Ex75lMFYAXp6f9MhI.roa (raw, json)
Hash identifier: G78/c2WUlt+RnvfHmaOjNF2P9USQ7VIXzBwIwNJ9UWE=
Subject key identifier: 67:B1:B0:E0:2D:FD:B7:81:31:EF:99:4C:15:80:17:A7:A7:FD:32:12
Certificate issuer: /CN=009421965995af1d65e8e9a98a21dc2681d989f1
Certificate serial: 709DA6
Authority key identifier: 00:94:21:96:59:95:AF:1D:65:E8:E9:A9:8A:21:DC:26:81:D9:89:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJQhllmVrx1l6OmpiiHcJoHZifE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/1a529e-0050-4637-9820-55eb114866c0/1/Z7Gw4C39t4Ex75lMFYAXp6f9MhI.roa
Signing time: Sat 01 Jan 2022 01:57:59 +0000
ROA not before: Sat 01 Jan 2022 01:57:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 146.19.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7380390 (0x709da6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=009421965995af1d65e8e9a98a21dc2681d989f1
Validity
Not Before: Jan 1 01:57:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67b1b0e02dfdb78131ef994c158017a7a7fd3212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bf:61:8b:9a:4f:e2:81:56:3b:42:e3:cb:c3:
5b:4c:c9:a4:10:19:16:38:15:dd:51:e2:e6:62:f7:
01:cf:f3:d1:8b:7c:6f:15:d5:2d:d8:ab:d3:55:df:
0f:e7:3c:94:b5:0a:13:aa:ed:6a:23:b0:25:0f:5f:
a1:a2:7b:9d:3c:aa:35:4f:2d:aa:ac:c0:8e:5e:b0:
a0:ee:a7:19:66:42:21:f5:49:5a:b4:a2:2c:a6:fd:
f7:22:1e:44:9e:fb:86:33:c0:cf:f1:bf:a0:5c:89:
6e:d0:fc:0a:1b:ac:0f:46:91:cf:4c:66:2c:49:49:
5a:8a:14:fd:b9:e5:14:cd:57:0f:81:a0:97:1b:5a:
2d:d6:dd:78:c2:fe:8c:ec:b2:44:63:49:ee:b9:4c:
e9:bb:bf:2a:b7:8f:c1:b4:7a:70:54:a3:cd:b4:fe:
cf:70:92:f4:e2:94:2b:ed:37:26:12:2c:23:25:b6:
47:4d:4b:56:73:dc:26:1e:3d:28:c8:b0:2d:09:3a:
ab:da:b2:c2:12:ce:19:12:ab:63:ef:64:56:88:64:
97:6a:1a:8a:e2:90:f7:f9:d5:b8:dc:bd:61:a6:05:
36:9b:6a:65:c8:47:fa:dc:51:31:59:1c:0f:14:24:
68:b3:7e:d3:9d:b8:da:5c:e4:50:c8:4a:b4:b5:85:
5d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B1:B0:E0:2D:FD:B7:81:31:EF:99:4C:15:80:17:A7:A7:FD:32:12
X509v3 Authority Key Identifier:
keyid:00:94:21:96:59:95:AF:1D:65:E8:E9:A9:8A:21:DC:26:81:D9:89:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJQhllmVrx1l6OmpiiHcJoHZifE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1a529e-0050-4637-9820-55eb114866c0/1/Z7Gw4C39t4Ex75lMFYAXp6f9MhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1a529e-0050-4637-9820-55eb114866c0/1/AJQhllmVrx1l6OmpiiHcJoHZifE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.74.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:c6:a1:f1:b1:7b:1f:5f:22:cc:14:1c:70:b2:e0:00:3f:79:
fa:81:3f:67:dc:f9:fe:82:9d:d0:46:e2:bc:74:60:98:fb:05:
b4:9a:63:a2:96:9b:bd:31:d1:bf:4b:2c:58:a8:fc:9c:a1:20:
a4:1f:92:bc:81:fc:2c:6a:1f:b5:9a:ac:e1:de:f4:d6:44:3c:
01:4e:51:2d:96:8d:50:8c:09:00:37:c5:98:4d:8c:c7:c5:88:
eb:5a:b1:4a:c4:f0:27:83:24:72:7a:5b:42:35:97:0b:22:83:
31:34:6f:5a:b0:70:0b:80:80:43:8a:ec:68:52:2d:29:7a:eb:
47:a5:2d:a6:aa:ed:af:6f:77:d2:2b:bb:2a:dc:26:71:90:85:
1c:e6:46:d9:38:40:b4:9e:14:d0:2d:60:45:32:24:9e:29:b9:
24:77:2d:fb:6c:23:27:ce:45:e0:d1:d9:fa:1f:d7:02:d9:46:
ff:bc:89:63:c9:d2:63:1a:0c:26:4c:61:b2:6d:f8:87:a1:bf:
f5:67:4b:e6:5a:87:03:64:96:c1:22:58:1a:0a:25:0b:b7:43:
c8:f5:dd:3d:5a:95:0d:df:11:25:3d:23:b4:3a:3e:fe:ce:4f:
89:29:c1:17:4d:4d:7a:48:ab:04:81:b5:b1:22:1b:43:e7:1a:
9f:1e:0b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:11 2023 by rpki-client on console-fra.rpki-client.org