Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/0toti06swZY7Bp8Cp_Iqi6C7EYY.roa
File: 0toti06swZY7Bp8Cp_Iqi6C7EYY.roa (raw, json)
Hash identifier: 3QX34aMk/C1nBS2XUZJVnEK7OuOdDnUyjBu65iPeqfg=
Subject key identifier: D2:DA:2D:8B:4E:AC:C1:96:3B:06:9F:02:A7:F2:2A:8B:A0:BB:11:86
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 04874B89
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/0toti06swZY7Bp8Cp_Iqi6C7EYY.roa
Signing time: Wed 02 Mar 2022 10:42:15 +0000
ROA not before: Wed 02 Mar 2022 10:42:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202121
IP address blocks: 148.81.246.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75975561 (0x4874b89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Mar 2 10:42:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d2da2d8b4eacc1963b069f02a7f22a8ba0bb1186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bc:40:b4:3b:5d:9e:27:73:34:99:8c:54:66:
5d:cd:a1:41:31:3e:60:87:4e:ab:b5:8f:77:98:d5:
33:1a:13:05:7e:98:b7:fa:0c:f6:5b:51:23:13:c2:
57:ea:2d:b7:11:4a:39:14:70:46:7b:6b:17:bb:d3:
6f:ab:3b:6c:63:da:31:be:77:f2:45:8f:c6:7e:ae:
ad:b7:ec:d1:c5:08:a6:fd:12:5f:68:7d:c4:0a:a5:
81:bd:dc:00:00:d7:b9:b2:76:19:4b:0f:86:f9:8e:
7b:9c:95:8c:2f:13:dc:40:ce:c8:38:37:93:00:06:
28:f7:85:f6:cb:c0:8f:92:88:67:3e:be:85:1a:56:
b6:2d:c7:89:94:0e:cc:68:a6:ec:a3:13:57:93:db:
13:85:c2:30:97:7d:9b:c1:bb:0c:c8:ba:a2:80:c7:
af:56:85:c3:b0:96:e5:a4:ee:06:5e:3f:53:ca:fd:
77:35:80:a2:8d:da:e1:52:13:e8:46:c0:b9:1f:97:
d8:ff:d6:33:80:36:f6:44:0d:43:08:54:7d:36:05:
eb:08:ba:fd:f4:21:a9:4c:79:03:6f:6e:81:a2:c9:
65:75:42:59:9b:b6:fc:2f:00:20:f2:78:e8:00:8c:
ac:db:86:76:31:3a:42:03:d7:6b:29:5b:de:f1:d2:
86:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DA:2D:8B:4E:AC:C1:96:3B:06:9F:02:A7:F2:2A:8B:A0:BB:11:86
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/0toti06swZY7Bp8Cp_Iqi6C7EYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.81.246.0/23
Signature Algorithm: sha256WithRSAEncryption
23:b0:96:56:d3:65:ee:e0:19:f5:80:07:6e:7b:dd:f8:46:07:
d9:0a:8f:b0:69:1d:1f:2f:fa:f2:6d:f4:7e:77:93:76:f5:73:
73:47:e8:b8:ca:a0:47:5a:68:18:c8:ee:f5:c7:1c:91:91:bd:
4e:93:03:bb:71:f4:48:58:c8:a9:2c:6b:01:f4:6b:e5:35:1d:
9f:cf:f9:ed:cd:af:a7:b2:43:21:04:49:b5:2c:ba:32:3e:fb:
20:b9:c2:7c:dd:0c:c1:dd:00:fa:40:97:f5:fe:bf:19:35:f0:
1e:b0:36:cc:d1:6e:c5:95:91:99:46:16:4f:de:7d:3f:50:cf:
68:64:27:c1:bb:0e:a5:46:76:dc:20:97:1c:ea:23:2a:2a:36:
f9:8b:97:b9:15:4f:3d:b0:e7:72:ff:0d:d4:cf:9e:30:6d:33:
74:2d:c8:f7:f1:4b:1a:e7:10:60:16:1b:b5:6b:d3:c6:7e:eb:
d2:f3:65:e6:05:a7:06:3d:c2:6a:0e:b0:f3:69:06:1a:96:fb:
85:83:bd:29:d7:bf:84:53:06:f6:8f:4e:c4:f1:5d:59:40:55:
19:61:77:3d:da:dd:69:05:28:29:a4:d2:43:c1:5e:84:d1:39:
e6:ff:39:6d:ab:39:8f:0e:bc:54:dd:60:92:e3:0d:7f:5c:0e:
a8:94:d0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:05 2024 by rpki-client on console-ams.rpki-client.org