Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/RQL9BrSxaeXW6rtluIkAO29mdW4.roa
File: RQL9BrSxaeXW6rtluIkAO29mdW4.roa (raw, json)
Hash identifier: 1VfY1/3L69/FlYp96qgYfmqVfI3KPWe/YQh5/YLYTnA=
Subject key identifier: 45:02:FD:06:B4:B1:69:E5:D6:EA:BB:65:B8:89:00:3B:6F:66:75:6E
Certificate issuer: /CN=f77390fc61608c01785d1a80685ae9e56a5b2583
Certificate serial: 0DBED845
Authority key identifier: F7:73:90:FC:61:60:8C:01:78:5D:1A:80:68:5A:E9:E5:6A:5B:25:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93OQ_GFgjAF4XRqAaFrp5WpbJYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/RQL9BrSxaeXW6rtluIkAO29mdW4.roa
Signing time: Sat 01 Jan 2022 08:05:41 +0000
ROA not before: Sat 01 Jan 2022 08:05:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47866
IP address blocks: 146.0.25.0/24 maxlen: 24
146.0.26.0/23 maxlen: 23
146.0.28.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 230611013 (0xdbed845)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77390fc61608c01785d1a80685ae9e56a5b2583
Validity
Not Before: Jan 1 08:05:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4502fd06b4b169e5d6eabb65b889003b6f66756e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3a:50:3d:17:f2:80:00:5e:4b:09:13:30:db:
0c:e2:af:00:83:27:de:fc:72:6f:05:d9:f4:df:f2:
48:08:6e:00:b0:d8:a0:00:ee:7e:26:c1:6d:f1:07:
9d:ad:ee:d2:1c:bc:8a:fb:f2:a7:33:46:69:91:d7:
cd:b3:ce:dc:a0:60:59:be:13:2b:a6:b1:7f:59:f0:
f6:90:4c:21:ba:a4:b0:2f:58:47:5b:9f:35:f9:07:
81:20:e0:cc:9c:21:12:ae:6f:b8:b7:9b:23:17:04:
d5:3b:c8:bf:6e:9a:f0:6f:26:65:8b:6e:9f:1d:d2:
a0:70:7c:e4:4d:90:e3:0d:11:47:db:cf:bf:21:8a:
c1:97:79:83:8e:b7:94:9d:8a:b3:2b:56:32:60:4c:
07:f6:02:48:5f:3b:31:45:6e:a2:3d:af:3e:03:67:
76:ca:8d:42:a1:d0:8e:3e:df:82:c5:4d:c5:da:f2:
83:44:1f:d3:65:c4:89:3d:94:15:95:71:63:18:48:
50:dd:4a:c2:5e:4a:fb:f4:06:3d:d5:20:31:d0:b1:
b0:01:52:04:2b:95:d7:c6:82:77:b9:a5:95:00:36:
04:cb:ea:a4:21:43:95:b5:63:9d:34:16:ed:5d:73:
35:1d:ab:bb:9c:fb:f8:1d:e4:75:69:2b:dc:96:fb:
19:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:02:FD:06:B4:B1:69:E5:D6:EA:BB:65:B8:89:00:3B:6F:66:75:6E
X509v3 Authority Key Identifier:
keyid:F7:73:90:FC:61:60:8C:01:78:5D:1A:80:68:5A:E9:E5:6A:5B:25:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93OQ_GFgjAF4XRqAaFrp5WpbJYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/RQL9BrSxaeXW6rtluIkAO29mdW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.0.25.0-146.0.31.255
Signature Algorithm: sha256WithRSAEncryption
6b:bd:99:0f:2e:7e:e0:08:56:1e:04:44:d6:8f:c8:ee:92:46:
6a:c9:69:d7:e0:6a:3c:79:44:9d:01:7c:4b:49:6e:53:9c:0f:
5f:39:e5:16:6a:e0:eb:2e:23:59:ae:98:b0:a5:87:ba:db:4d:
8e:88:27:7f:18:55:96:fa:9c:05:e1:72:b8:3d:fe:83:e9:7b:
e4:1b:82:89:9f:94:28:4c:ad:b4:7c:7b:9e:48:38:6a:ae:74:
f6:fc:39:3e:2b:b4:c6:e5:6a:0b:d6:8f:a9:4f:f9:c7:00:15:
75:fe:3d:2c:d5:98:c1:f3:41:e4:60:e7:d5:2a:ab:03:e6:27:
b3:be:9b:81:8c:78:30:84:23:0b:b7:e8:df:0a:45:53:fc:a0:
ae:3d:87:b0:d3:27:72:15:ec:e9:65:c7:9d:b4:84:09:6c:c9:
96:b0:b8:8b:74:bf:4e:cc:08:8f:44:0c:f8:bd:01:99:da:ba:
4c:b1:f9:e7:0b:0e:29:1b:e5:51:36:e9:38:e8:e4:27:1d:f6:
63:54:0d:c0:a1:6b:38:44:71:82:74:eb:c7:e4:2d:fb:f7:07:
67:7f:b0:31:21:c1:f4:58:29:30:5e:08:50:ca:1a:6d:12:38:
0f:c0:af:36:f9:af:80:2f:fb:57:6e:01:dd:e3:c6:1c:91:f8:
68:08:84:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:18 2023 by rpki-client on console-ams.rpki-client.org