Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/duBEmIXxXY1XQzcwuUpB7p_QJVw.roa
File: duBEmIXxXY1XQzcwuUpB7p_QJVw.roa (raw, json)
Hash identifier: qMyaSa9CVu97v6ZQ5S+jKNVK14iaNIx7PeP1W5HYnCQ=
Subject key identifier: 76:E0:44:98:85:F1:5D:8D:57:43:37:30:B9:4A:41:EE:9F:D0:25:5C
Certificate issuer: /CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6
Certificate serial: 021EC03C
Authority key identifier: 7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/duBEmIXxXY1XQzcwuUpB7p_QJVw.roa
Signing time: Sat 01 Jan 2022 13:05:27 +0000
ROA not before: Sat 01 Jan 2022 13:05:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 53786
IP address blocks: 146.255.120.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35569724 (0x21ec03c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6
Validity
Not Before: Jan 1 13:05:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=76e0449885f15d8d57433730b94a41ee9fd0255c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ca:e5:4c:e0:fc:12:a1:ce:64:11:eb:37:59:
6e:ca:a4:f5:5a:ae:5c:52:88:bd:37:3a:53:39:a2:
36:54:af:de:5a:68:12:3f:79:28:c2:17:aa:db:f8:
55:3c:01:1a:21:9d:68:7d:c6:a1:41:83:7c:58:41:
8b:4e:ba:f3:cc:f1:43:77:ab:77:2a:31:39:06:a1:
4f:3e:d2:b8:3b:b5:0c:d3:39:f3:a8:20:d9:7d:77:
8a:e6:89:a5:01:80:5d:64:c6:bf:99:d7:0d:4f:19:
f7:5a:16:06:28:75:93:f4:3b:03:8a:85:29:fc:54:
7f:16:ba:99:1a:04:61:fa:f2:aa:6d:d1:0b:c1:01:
97:79:1c:5b:70:a8:ca:5c:2b:b7:d2:b8:f7:88:6b:
c9:c8:bc:f0:8a:48:38:d8:f7:c5:94:6c:31:c5:c5:
65:bf:16:80:ef:51:bb:c0:8f:ab:2a:71:6f:3c:7d:
ea:4f:94:cf:47:37:6b:49:53:6e:fe:61:a7:45:e6:
d0:4c:66:b2:ae:c6:99:69:5f:77:0f:88:ac:6b:74:
f4:73:ed:58:12:ed:fb:0d:c2:60:56:86:9e:6a:9a:
ac:21:f0:d6:e4:09:d4:c5:0d:a0:24:58:cd:d6:55:
d1:78:78:8d:1c:b6:41:31:aa:6d:9e:02:2d:bf:3e:
70:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E0:44:98:85:F1:5D:8D:57:43:37:30:B9:4A:41:EE:9F:D0:25:5C
X509v3 Authority Key Identifier:
keyid:7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/duBEmIXxXY1XQzcwuUpB7p_QJVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.255.120.0/22
Signature Algorithm: sha256WithRSAEncryption
37:b2:74:22:0a:7a:ab:08:aa:86:a6:9a:a8:91:f1:d8:e5:e8:
9c:fc:ce:75:5a:65:f4:6d:d2:06:4d:c9:9b:a6:a5:21:60:46:
dd:94:81:08:86:a9:39:b7:d7:4c:ab:e6:c0:4d:8e:9d:ef:ee:
85:86:3c:03:3f:ea:69:cf:11:3f:75:94:67:40:82:f3:87:ee:
28:0b:14:e9:b5:93:b8:ef:0e:7d:b7:45:9d:30:74:49:31:57:
bd:0a:2a:5d:51:7a:a2:bb:b6:7d:47:78:eb:fe:d9:f7:be:8a:
c6:09:66:d3:8c:6c:b2:35:14:ee:bb:b6:06:e1:b4:ab:83:15:
e7:f7:26:0c:1e:ec:dd:4e:41:5c:30:27:59:26:c3:27:58:41:
2d:57:8d:99:a4:bf:e1:df:2a:6f:99:bd:85:18:f0:26:49:cb:
38:d5:ce:66:08:5f:87:94:a4:a4:19:f7:7f:67:74:cd:7c:47:
da:dd:a2:a4:cb:17:c3:dc:34:0e:37:29:8c:97:3a:55:57:d8:
17:51:86:e8:4e:f8:a7:9c:ca:d2:83:8b:ae:a1:9d:e5:b0:d5:
d3:63:e4:50:3b:d3:1f:89:39:6f:46:f2:99:a0:9d:9d:00:3a:
1f:65:e2:34:13:4e:f7:f0:02:39:2a:cb:71:a1:1e:c3:71:87:
6f:62:69:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:02 2023 by rpki-client on console-ams.rpki-client.org