Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/02ac2d-0e8b-4b77-8d29-486334de7127/1/sSVpq_Z5TtyvzVpUV1md-8ijkdc.roa
File: sSVpq_Z5TtyvzVpUV1md-8ijkdc.roa (raw, json)
Hash identifier: SlCiWHInCUANMh/m5VkHsiU/0cYSx7bMcnPe5PlMc4s=
Subject key identifier: B1:25:69:AB:F6:79:4E:DC:AF:CD:5A:54:57:59:9D:FB:C8:A3:91:D7
Certificate issuer: /CN=3a178048d127af3433f17bccda5d07d657eca688
Certificate serial: 0181ED3CBB7817EB122CD10F5C8B85B57820
Authority key identifier: 3A:17:80:48:D1:27:AF:34:33:F1:7B:CC:DA:5D:07:D6:57:EC:A6:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OheASNEnrzQz8XvM2l0H1lfspog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/02ac2d-0e8b-4b77-8d29-486334de7127/1/sSVpq_Z5TtyvzVpUV1md-8ijkdc.roa
Signing time: Mon 11 Jul 2022 12:29:49 +0000
ROA not before: Mon 11 Jul 2022 12:29:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 146.19.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ed:3c:bb:78:17:eb:12:2c:d1:0f:5c:8b:85:b5:78:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a178048d127af3433f17bccda5d07d657eca688
Validity
Not Before: Jul 11 12:29:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b12569abf6794edcafcd5a5457599dfbc8a391d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c9:c0:d4:76:9b:41:1a:8d:16:d1:57:cb:ad:
c7:15:ad:18:63:1b:de:c9:ad:80:29:38:6e:7b:03:
8d:ec:4a:29:ad:4e:d9:ca:6f:e8:45:6e:fd:d1:38:
cb:84:90:5a:de:d9:2e:41:eb:09:23:eb:c3:21:f2:
9b:31:e7:68:56:72:29:8a:78:6e:96:cf:07:3a:ec:
d0:c6:0f:15:b3:4c:a5:bd:3c:57:5c:35:cf:1a:5c:
f6:bc:5d:19:5a:d7:38:8c:ed:07:e3:29:c2:98:5b:
6b:5a:c7:07:dc:ba:55:b7:89:92:c0:41:4a:c7:b2:
6e:bc:be:04:01:6a:95:e0:b4:f3:a5:7f:dd:76:98:
4a:3f:05:6b:2a:2c:fe:70:99:f3:a8:80:ca:aa:4d:
fc:a9:d1:31:27:67:c6:3b:ce:7a:08:18:d0:df:77:
8a:26:e2:47:a0:a8:8f:97:9b:35:34:7e:bb:d4:19:
c6:f4:b6:56:3e:32:92:cc:f2:c0:66:99:73:74:f5:
b2:1e:d4:4c:50:b9:03:01:4a:af:1f:dd:eb:cb:2c:
ea:b2:c5:0c:07:f0:ca:7a:3c:bd:a7:35:2a:d0:3e:
2d:f9:7a:06:6b:e4:70:d6:cb:07:1a:90:2b:13:70:
d7:69:28:fe:0e:98:d6:ac:7e:06:d0:71:79:91:4f:
f9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:25:69:AB:F6:79:4E:DC:AF:CD:5A:54:57:59:9D:FB:C8:A3:91:D7
X509v3 Authority Key Identifier:
keyid:3A:17:80:48:D1:27:AF:34:33:F1:7B:CC:DA:5D:07:D6:57:EC:A6:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OheASNEnrzQz8XvM2l0H1lfspog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/02ac2d-0e8b-4b77-8d29-486334de7127/1/sSVpq_Z5TtyvzVpUV1md-8ijkdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/02ac2d-0e8b-4b77-8d29-486334de7127/1/OheASNEnrzQz8XvM2l0H1lfspog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.142.0/24
Signature Algorithm: sha256WithRSAEncryption
37:2a:fc:7c:04:bd:ef:8c:02:5a:26:75:6a:a3:0c:fc:b6:b5:
6e:c8:d1:a8:ac:9a:06:ff:15:d7:ea:e8:a5:2c:cd:04:2c:d3:
8e:74:7e:7b:db:e8:23:48:9d:69:31:43:3b:11:7a:f2:37:0d:
e9:50:7e:1d:e9:16:d9:b9:71:fa:d4:95:82:8c:42:a9:84:26:
a6:d8:f4:c4:10:ef:59:dd:42:8e:d1:19:f8:f0:ff:a5:ff:62:
6f:36:8f:1a:18:0e:f9:6b:6a:4b:f9:4a:0f:65:1b:03:97:1d:
48:16:a2:b9:c4:dd:89:c4:ce:af:19:32:73:e0:1a:d5:5b:6c:
ab:03:f0:d9:6b:69:c5:3e:48:24:cf:a4:98:b6:bc:95:33:4a:
a5:a1:79:29:05:cb:f6:37:ac:a2:c0:b6:0b:a6:7f:b0:d3:d1:
d4:93:d0:eb:0b:3d:1d:16:28:a4:09:1a:cb:42:38:f6:32:aa:
6e:fe:c0:9d:0c:bf:bc:b7:2e:d5:b2:11:8c:09:2a:e8:ac:07:
4c:06:2a:e0:48:ec:0b:2d:5a:5d:d4:46:81:3d:49:44:46:15:
91:19:6b:05:d5:3a:fd:04:33:5a:af:f3:23:75:ae:bf:78:a9:
49:0a:89:80:08:af:61:93:48:9f:68:4f:d9:76:2d:37:9d:78:
55:7a:1c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:14 2023 by rpki-client on console-ams.rpki-client.org