Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/r3Mrx_UOXVCcq01Y3AeDIanKVhU.roa
File: r3Mrx_UOXVCcq01Y3AeDIanKVhU.roa (raw, json)
Hash identifier: 2cKFQgSR06W2bd7BNY+4TTjXGShePq+k981SjkbAWq4=
Subject key identifier: AF:73:2B:C7:F5:0E:5D:50:9C:AB:4D:58:DC:07:83:21:A9:CA:56:15
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 48786F9A
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/r3Mrx_UOXVCcq01Y3AeDIanKVhU.roa
Signing time: Sat 01 Jan 2022 03:00:37 +0000
ROA not before: Sat 01 Jan 2022 03:00:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201781
IP address blocks: 146.185.246.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1215852442 (0x48786f9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 03:00:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af732bc7f50e5d509cab4d58dc078321a9ca5615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ee:ca:46:68:4b:53:b5:71:87:fe:4e:7d:c9:
bf:aa:b7:e2:54:5f:9f:bf:a0:66:b9:60:ba:52:4d:
e7:25:42:95:a8:5c:9e:56:9c:1f:13:34:b8:5e:94:
2a:0f:4e:78:f3:4b:92:fa:f8:08:ab:55:10:01:ce:
2f:49:e8:c2:c7:d6:fe:7a:c5:f4:9b:f2:5e:9b:64:
65:80:05:05:34:5c:3e:da:e4:7d:c9:b2:45:5a:2a:
2c:65:a4:89:52:45:66:f2:7d:5c:6a:96:74:e6:61:
e5:57:25:03:66:0a:57:85:84:0a:62:0f:d5:c4:5a:
2e:52:fc:4d:80:3a:a6:a1:09:79:07:d5:36:de:f1:
48:ca:05:ec:a0:40:83:8a:89:2a:6e:96:c7:ad:ad:
4b:a9:21:93:56:40:74:78:0a:2a:c1:9d:21:8a:ec:
ae:4b:20:39:70:fa:57:5e:cf:50:c6:2f:4c:93:a7:
fd:1d:63:1f:06:4d:d1:3a:37:d9:a9:1f:91:a9:97:
b1:38:06:a8:79:d0:50:05:cb:b0:f6:0e:32:30:3a:
2f:d6:b8:0d:08:bf:1c:68:ee:c9:b9:2e:e3:87:65:
bd:2b:e7:86:d5:36:02:23:05:91:49:16:e6:3e:b1:
18:75:6a:06:1a:32:d8:88:95:84:5b:ce:45:45:22:
d3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:73:2B:C7:F5:0E:5D:50:9C:AB:4D:58:DC:07:83:21:A9:CA:56:15
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/r3Mrx_UOXVCcq01Y3AeDIanKVhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.185.246.0/23
Signature Algorithm: sha256WithRSAEncryption
87:aa:49:60:58:7e:f1:26:c8:fd:89:49:b8:aa:ee:b1:30:ac:
ed:98:fe:85:c0:c2:44:83:2d:bc:40:49:c1:c9:41:43:d3:55:
0f:e0:a0:e8:2e:0a:7f:2b:fc:88:84:e1:2b:60:d3:83:67:9d:
da:72:a1:bd:05:98:53:35:6f:42:77:59:04:11:a6:27:83:76:
03:29:25:12:3b:31:15:46:38:86:f6:8a:10:a7:75:e4:1a:f4:
6e:97:b4:a2:68:d5:7f:f0:51:eb:07:61:96:32:49:b5:c3:55:
9f:75:94:90:9d:f6:5c:b2:0d:70:a0:16:fb:f0:c9:17:9e:c8:
1c:6f:1a:74:e5:26:ae:a7:2a:5b:80:f8:6a:b1:12:b1:95:4d:
b1:98:9a:44:e5:f9:c1:57:b7:25:5c:c9:60:aa:05:04:6c:6d:
1b:37:2c:64:04:b6:c0:f9:bc:3b:af:1a:93:b3:64:26:6c:a5:
b6:50:30:67:6a:ca:79:e5:6c:c2:e4:12:a9:40:fd:d3:71:5b:
a0:21:42:79:3e:08:f4:09:f7:75:6d:61:76:ea:d2:75:c1:b5:
c0:ac:ca:42:bd:54:19:5e:55:12:bc:b4:5b:ee:95:d0:26:c4:
8b:ee:f3:44:56:ba:75:9e:77:03:b1:a3:7f:3a:8d:9e:4d:1b:
67:52:a1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:44 2023 by rpki-client on console-ams.rpki-client.org