Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b7515f-7ecf-40b0-b26a-661acc4845e4/1/JWhMuFzXnNzRKLT48ni7LJso7JA.roa
File: JWhMuFzXnNzRKLT48ni7LJso7JA.roa (raw, json)
Hash identifier: IIb6xtHAoGD3tRrlBl3LYB0MftYXBWISLI9IPOWUQYw=
Subject key identifier: 25:68:4C:B8:5C:D7:9C:DC:D1:28:B4:F8:F2:78:BB:2C:9B:28:EC:90
Certificate issuer: /CN=759a67a63db091baf950d51ccd20827db8125b13
Certificate serial: 0117841D
Authority key identifier: 75:9A:67:A6:3D:B0:91:BA:F9:50:D5:1C:CD:20:82:7D:B8:12:5B:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZpnpj2wkbr5UNUczSCCfbgSWxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b7515f-7ecf-40b0-b26a-661acc4845e4/1/JWhMuFzXnNzRKLT48ni7LJso7JA.roa
Signing time: Mon 07 Mar 2022 17:38:54 +0000
ROA not before: Mon 07 Mar 2022 17:38:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59253
IP address blocks: 146.19.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18318365 (0x117841d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759a67a63db091baf950d51ccd20827db8125b13
Validity
Not Before: Mar 7 17:38:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=25684cb85cd79cdcd128b4f8f278bb2c9b28ec90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2c:98:6a:ac:19:bf:42:6f:36:70:ff:3c:56:
04:f1:9f:1b:52:f6:9a:14:3e:d7:43:37:c2:6c:14:
20:82:74:5f:fa:26:42:fb:20:f3:61:a3:fe:61:35:
69:42:1b:1f:eb:c4:d0:62:42:ca:9d:37:b2:05:66:
1d:32:58:45:a3:8b:6e:6a:81:27:e0:aa:43:1d:fd:
13:e7:18:f2:6e:d8:fb:35:9b:8d:db:85:0a:f6:30:
04:b0:b5:93:8d:d4:13:d1:7d:73:26:ab:dd:3e:7a:
ed:f2:ea:da:ae:f6:b3:a5:1e:7f:8f:5b:1c:07:43:
ee:40:4c:17:fd:6e:d4:ea:25:57:16:c3:91:dd:94:
47:e6:0a:37:05:ea:43:19:b0:a2:51:3f:f0:85:ae:
35:f3:81:6f:dd:86:bb:84:10:22:48:dd:69:de:c5:
e3:bf:79:e1:5f:7c:80:b4:8a:d6:e3:53:52:74:3f:
18:32:82:a4:0b:80:5f:ab:2c:e3:84:65:11:a1:f9:
dc:c6:d4:04:c4:b2:05:15:be:d5:da:11:d5:71:96:
5b:a3:ff:15:fb:b6:3d:63:b7:e4:8b:bf:c6:2d:72:
bd:b0:92:5a:a0:bf:47:90:af:a1:e2:ba:d9:9e:74:
20:e9:f3:13:fc:bf:09:07:79:2f:f8:ca:1f:14:67:
06:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:68:4C:B8:5C:D7:9C:DC:D1:28:B4:F8:F2:78:BB:2C:9B:28:EC:90
X509v3 Authority Key Identifier:
keyid:75:9A:67:A6:3D:B0:91:BA:F9:50:D5:1C:CD:20:82:7D:B8:12:5B:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZpnpj2wkbr5UNUczSCCfbgSWxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b7515f-7ecf-40b0-b26a-661acc4845e4/1/JWhMuFzXnNzRKLT48ni7LJso7JA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b7515f-7ecf-40b0-b26a-661acc4845e4/1/dZpnpj2wkbr5UNUczSCCfbgSWxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.46.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:15:33:79:31:45:b3:63:7e:97:56:5a:b3:96:2b:b9:0b:5c:
7c:43:43:ea:66:5b:4a:7d:7a:c2:49:66:34:e6:b9:6c:d8:4d:
c1:52:19:df:87:60:1f:c6:b2:f2:71:d8:c0:d0:2f:98:35:7d:
6e:ca:a2:0c:cd:4d:b4:22:53:23:68:3e:de:77:92:3c:48:75:
83:e7:e3:06:2e:40:f0:f4:b8:28:0b:65:0a:86:bd:24:da:2e:
43:13:63:65:10:ba:12:95:b6:5a:aa:72:e6:f0:20:39:90:48:
07:ef:ac:0f:2d:ea:b0:e1:1d:0c:09:a9:8f:2b:ba:35:bc:f8:
9d:5e:44:61:cb:42:ae:79:d2:90:b8:ea:68:32:3a:3e:6c:5e:
e3:8c:cd:63:2b:fb:b7:1e:80:67:2d:e9:56:f0:51:92:2c:00:
93:90:12:ba:bd:19:4f:7e:24:06:71:75:f5:76:f5:84:24:ba:
f9:60:94:3c:ff:64:cf:b0:9e:12:ea:c2:fc:be:b2:c3:22:3d:
09:f4:43:5c:ff:6f:7d:ff:79:d7:71:73:f3:45:c6:84:23:28:
fd:34:67:b9:7b:a9:aa:76:f5:4e:40:9d:92:1b:36:71:c2:eb:
c2:22:72:43:94:68:a8:6c:f0:27:5c:8d:fa:02:f3:43:39:fb:
5f:80:a6:dc
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAReEHTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NTlhNjdhNjNkYjA5MWJhZjk1MGQ1MWNjZDIwODI3ZGI4MTI1YjEzMB4XDTIyMDMw
NzE3Mzg1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjU2ODRjYjg1Y2Q3
OWNkY2QxMjhiNGY4ZjI3OGJiMmM5YjI4ZWM5MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANIsmGqsGb9CbzZw/zxWBPGfG1L2mhQ+10M3wmwUIIJ0X/om
Qvsg82Gj/mE1aUIbH+vE0GJCyp03sgVmHTJYRaOLbmqBJ+CqQx39E+cY8m7Y+zWb
jduFCvYwBLC1k43UE9F9cyar3T567fLq2q72s6Uef49bHAdD7kBMF/1u1OolVxbD
kd2UR+YKNwXqQxmwolE/8IWuNfOBb92Gu4QQIkjdad7F47954V98gLSK1uNTUnQ/
GDKCpAuAX6ss44RlEaH53MbUBMSyBRW+1doR1XGWW6P/Ffu2PWO35Iu/xi1yvbCS
WqC/R5CvoeK62Z50IOnzE/y/CQd5L/jKHxRnBv0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQlaEy4XNec3NEotPjyeLssmyjskDAfBgNVHSMEGDAWgBR1mmemPbCRuvlQ
1RzNIIJ9uBJbEzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RacG5wajJ3a2JyNVVOVWN6U0NDZmJnU1d4TS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzkvYjc1MTVmLTdlY2YtNDBiMC1iMjZhLTY2MWFjYzQ4NDVlNC8x
L0pXaE11RnpYbk56UktMVDQ4bmk3TEpzbzdKQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzkv
Yjc1MTVmLTdlY2YtNDBiMC1iMjZhLTY2MWFjYzQ4NDVlNC8xL2RacG5wajJ3a2Jy
NVVOVWN6U0NDZmJnU1d4TS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJITLjANBgkqhkiG9w0BAQsFAAOC
AQEAGhUzeTFFs2N+l1Zas5YruQtcfEND6mZbSn16wklmNOa5bNhNwVIZ34dgH8ay
8nHYwNAvmDV9bsqiDM1NtCJTI2g+3neSPEh1g+fjBi5A8PS4KAtlCoa9JNouQxNj
ZRC6EpW2Wqpy5vAgOZBIB++sDy3qsOEdDAmpjyu6Nbz4nV5EYctCrnnSkLjqaDI6
Pmxe44zNYyv7tx6AZy3pVvBRkiwAk5ASur0ZT34kBnF19Xb1hCS6+WCUPP9kz7Ce
EurC/L6ywyI9CfRDXP9vff9513Fz80XGhCMo/TRnuXupqnb1TkCdkhs2ccLrwiJy
Q5RoqGzwJ1yN+gLzQzn7X4Cm3A==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:44 2023 by rpki-client on console-fra.rpki-client.org