Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Ki0r-wSmNWw_QkiwuaB5vw1p_yI.roa
File: Ki0r-wSmNWw_QkiwuaB5vw1p_yI.roa (raw, json)
Hash identifier: yr4ecoIQhgr7zBMRoqWJUVTG0Fg26iXgp0liDr6gIKk=
Subject key identifier: 2A:2D:2B:FB:04:A6:35:6C:3F:42:48:B0:B9:A0:79:BF:0D:69:FF:22
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 4860D74E
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Ki0r-wSmNWw_QkiwuaB5vw1p_yI.roa
Signing time: Sat 01 Jan 2022 03:00:25 +0000
ROA not before: Sat 01 Jan 2022 03:00:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41390
IP address blocks: 146.185.233.0/24 maxlen: 24
146.185.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1214306126 (0x4860d74e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 03:00:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a2d2bfb04a6356c3f4248b0b9a079bf0d69ff22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:81:f8:8a:48:1d:9b:68:8d:6d:e3:90:85:b3:
24:08:02:7e:a5:c7:59:73:c1:64:cf:d5:a2:73:ae:
48:76:4e:ff:97:4a:3c:cc:4b:50:c8:95:e2:b6:76:
f7:5c:31:93:34:7f:a1:e8:f0:c4:ad:13:70:99:dc:
8c:c8:8a:40:9c:9e:cb:b4:78:06:3f:15:43:bb:08:
3b:8f:47:b0:24:d7:b6:47:e9:7b:b3:8e:d9:69:6e:
bb:6b:13:cb:bb:47:f8:b3:9a:fb:82:0b:44:1f:44:
d7:df:2d:82:47:9e:20:58:27:6d:02:56:f1:6e:f7:
da:43:ee:1c:ec:f9:60:2e:27:63:02:b5:e2:c6:25:
85:87:08:84:60:a5:b0:ac:bc:7d:59:f5:7f:4f:ee:
23:f2:e6:4a:4b:fe:bf:8c:0b:1c:78:ab:db:e9:43:
8d:a6:6c:db:50:54:c9:f9:d1:6e:00:9e:3a:c0:46:
ad:74:33:b1:b9:98:a8:ae:9e:4c:ca:df:97:e6:82:
cc:e1:17:3c:43:ac:47:b1:81:bf:b0:36:cc:fe:48:
f6:c3:94:39:d6:2d:10:08:f7:32:3e:98:f5:30:ba:
e9:fc:e0:3c:3a:60:ed:db:6b:9c:c8:ad:c8:db:6d:
35:26:ed:f1:13:c4:f6:9b:3b:cf:40:eb:33:43:b6:
4d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2D:2B:FB:04:A6:35:6C:3F:42:48:B0:B9:A0:79:BF:0D:69:FF:22
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Ki0r-wSmNWw_QkiwuaB5vw1p_yI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.185.213.0/24
146.185.233.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:d2:a7:7d:a2:d7:c3:d4:67:23:5c:50:3a:cb:e6:59:91:3e:
e6:b6:e5:07:89:1c:fe:24:e2:97:7d:a5:a1:e0:13:72:26:38:
52:75:74:c5:a0:74:00:d5:c5:4f:3d:07:23:4c:62:b8:8a:36:
f5:16:78:71:82:77:09:6f:5a:c6:0f:6b:fc:8b:c8:1b:c5:04:
9f:6d:6f:60:dd:93:6c:4b:e9:0b:a7:ea:59:da:2a:e8:61:a3:
1b:39:2f:cb:8f:29:3e:0d:41:e1:6a:87:78:3d:06:9a:73:42:
30:12:fd:b3:4e:d1:87:12:53:c8:72:8e:df:e2:97:bc:6e:ab:
98:56:d3:66:bc:b3:73:94:37:16:15:e2:1c:f8:cf:fc:1a:7c:
da:38:9a:42:4b:6b:1a:7a:21:da:81:0f:cd:5c:90:e1:c2:f3:
09:f5:e6:41:5e:11:12:7c:06:71:2a:a8:c6:7e:3c:0f:6e:a4:
e6:43:d0:56:f3:e2:01:3f:54:65:85:8a:56:76:bf:67:b9:b0:
33:e6:11:bf:a3:ec:ac:68:85:5d:cc:bf:b0:28:97:d3:e4:68:
32:31:bf:a4:ca:4e:07:17:17:2e:f0:ed:22:62:8b:6b:17:00:
8f:3a:77:85:85:c4:41:92:e4:fb:3d:83:4e:57:b1:3b:21:9c:
16:a3:ee:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:43 2023 by rpki-client on console-ams.rpki-client.org