Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4ba79a-73c4-4600-9239-66c9ff675711/1/6nKDOq0nGUUXJjFsOCqkJcGHUYc.roa
File: 6nKDOq0nGUUXJjFsOCqkJcGHUYc.roa (raw, json)
Hash identifier: qn7wYeBhLrSaFRUraLz56gJvtXyQhzPKbddqJK8FGzE=
Subject key identifier: EA:72:83:3A:AD:27:19:45:17:26:31:6C:38:2A:A4:25:C1:87:51:87
Certificate issuer: /CN=d49fe7b9eccdf99cea9c362e19ce77b0452289c7
Certificate serial: 7070B0
Authority key identifier: D4:9F:E7:B9:EC:CD:F9:9C:EA:9C:36:2E:19:CE:77:B0:45:22:89:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1J_nuezN-ZzqnDYuGc53sEUiicc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba79a-73c4-4600-9239-66c9ff675711/1/6nKDOq0nGUUXJjFsOCqkJcGHUYc.roa
Signing time: Sat 01 Jan 2022 03:53:16 +0000
ROA not before: Sat 01 Jan 2022 03:53:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 146.19.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7368880 (0x7070b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d49fe7b9eccdf99cea9c362e19ce77b0452289c7
Validity
Not Before: Jan 1 03:53:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea72833aad2719451726316c382aa425c1875187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2b:9c:3a:32:a2:fe:c5:1a:79:b7:29:23:10:
42:01:0b:85:26:75:89:ac:92:8f:2d:d3:55:00:13:
b1:51:a8:7e:54:cd:3a:80:d2:d2:1d:3a:3c:0f:f2:
e5:bf:6b:55:04:13:be:92:d1:ac:a0:ec:5a:36:21:
00:79:a6:02:1e:1c:6e:1f:fd:7f:90:8e:40:fb:16:
f1:f9:b6:47:d5:b7:c4:f2:c4:2b:ca:b6:9f:65:58:
91:82:8e:5d:f3:e5:99:c1:e0:33:45:c8:52:db:74:
f5:68:14:b2:4b:df:e1:87:3f:12:83:60:35:7b:7e:
60:88:ee:f1:aa:f2:25:4f:51:ec:83:e5:29:4e:e6:
1c:d9:82:b4:31:81:a1:c6:11:bb:72:c9:02:3c:77:
68:5f:57:4c:fa:b9:2f:57:a9:81:27:28:3e:b7:88:
ae:ae:53:ee:af:45:a4:68:14:3e:47:ec:83:c4:01:
05:42:42:88:a6:9f:57:48:9e:22:44:33:3c:0a:fe:
72:2f:73:42:03:3a:ec:5c:b0:20:b1:35:3a:93:ea:
4b:15:b9:01:eb:40:18:bd:3f:35:21:70:81:36:d7:
d8:98:a2:10:94:68:8a:4c:e0:3a:95:b4:43:ed:44:
40:a5:ed:0a:99:a9:02:d5:3f:a8:cb:45:26:17:ec:
32:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:72:83:3A:AD:27:19:45:17:26:31:6C:38:2A:A4:25:C1:87:51:87
X509v3 Authority Key Identifier:
keyid:D4:9F:E7:B9:EC:CD:F9:9C:EA:9C:36:2E:19:CE:77:B0:45:22:89:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1J_nuezN-ZzqnDYuGc53sEUiicc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba79a-73c4-4600-9239-66c9ff675711/1/6nKDOq0nGUUXJjFsOCqkJcGHUYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba79a-73c4-4600-9239-66c9ff675711/1/1J_nuezN-ZzqnDYuGc53sEUiicc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.66.0/24
Signature Algorithm: sha256WithRSAEncryption
25:33:ac:a6:cd:c7:0c:26:2c:79:11:4f:80:51:39:22:59:4c:
28:83:10:50:37:9b:e1:05:35:2c:9b:f1:04:0e:ee:82:33:a2:
9f:5d:97:9a:04:7d:a6:4b:3d:d9:ba:7b:92:5a:b1:6b:21:6d:
4e:05:11:ff:e0:01:46:4a:88:bd:fa:e0:86:65:c1:84:14:4a:
62:2d:77:cf:a6:e0:1e:ec:fc:b2:a6:1c:3a:61:81:72:37:f9:
e5:27:8f:3f:fd:e1:03:37:36:73:9c:1a:bb:74:e9:89:df:5e:
ac:d7:85:e3:55:f0:61:a9:0e:55:49:87:3e:11:5e:9c:b1:e5:
20:15:c8:e4:e9:1e:48:75:74:b8:9b:7d:63:b4:3d:e2:79:9c:
01:5a:27:e0:14:2b:b6:32:7d:19:a2:40:46:48:11:06:b9:17:
40:94:d7:f9:07:c6:4d:ce:fd:24:20:0c:e5:ce:66:16:d9:f6:
14:70:e8:6e:24:f5:fc:ca:4b:ec:33:bf:b7:15:05:f4:57:e8:
ec:d2:0e:01:53:18:30:8b:90:c8:d1:6a:20:2e:15:d9:91:52:
b4:5f:d7:57:0d:99:35:ac:23:ac:f7:68:83:5a:d7:c4:b4:19:
ca:0d:85:e5:07:39:d4:b6:fa:42:ef:16:a9:70:23:40:2d:44:
2c:e6:15:9b
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDcHCwMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ0
OWZlN2I5ZWNjZGY5OWNlYTljMzYyZTE5Y2U3N2IwNDUyMjg5YzcwHhcNMjIwMTAx
MDM1MzE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhlYTcyODMzYWFkMjcx
OTQ1MTcyNjMxNmMzODJhYTQyNWMxODc1MTg3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAniucOjKi/sUaebcpIxBCAQuFJnWJrJKPLdNVABOxUah+VM06
gNLSHTo8D/Llv2tVBBO+ktGsoOxaNiEAeaYCHhxuH/1/kI5A+xbx+bZH1bfE8sQr
yrafZViRgo5d8+WZweAzRchS23T1aBSyS9/hhz8Sg2A1e35giO7xqvIlT1Hsg+Up
TuYc2YK0MYGhxhG7cskCPHdoX1dM+rkvV6mBJyg+t4iurlPur0WkaBQ+R+yDxAEF
QkKIpp9XSJ4iRDM8Cv5yL3NCAzrsXLAgsTU6k+pLFbkB60AYvT81IXCBNtfYmKIQ
lGiKTOA6lbRD7URApe0KmakC1T+oy0UmF+wydwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFOpygzqtJxlFFyYxbDgqpCXBh1GHMB8GA1UdIwQYMBaAFNSf57nszfmc6pw2
LhnOd7BFIonHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
MUpfbnVlek4tWnpxbkRZdUdjNTNzRVVpaWNjLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8xNS80YmE3OWEtNzNjNC00NjAwLTkyMzktNjZjOWZmNjc1NzExLzEv
Nm5LRE9xMG5HVVVYSmpGc09DcWtKY0dIVVljLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS80
YmE3OWEtNzNjNC00NjAwLTkyMzktNjZjOWZmNjc1NzExLzEvMUpfbnVlek4tWnpx
bkRZdUdjNTNzRVVpaWNjLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhNCMA0GCSqGSIb3DQEBCwUAA4IB
AQAlM6ymzccMJix5EU+AUTkiWUwogxBQN5vhBTUsm/EEDu6CM6KfXZeaBH2mSz3Z
unuSWrFrIW1OBRH/4AFGSoi9+uCGZcGEFEpiLXfPpuAe7Pyyphw6YYFyN/nlJ48/
/eEDNzZznBq7dOmJ316s14XjVfBhqQ5VSYc+EV6cseUgFcjk6R5IdXS4m31jtD3i
eZwBWifgFCu2Mn0ZokBGSBEGuRdAlNf5B8ZNzv0kIAzlzmYW2fYUcOhuJPX8ykvs
M7+3FQX0V+js0g4BUxgwi5DI0WogLhXZkVK0X9dXDZk1rCOs92iDWtfEtBnKDYXl
BznUtvpC7xapcCNALUQs5hWb
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:16 2023 by rpki-client on console-ams.rpki-client.org