Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/pxTevSuEZHXkShBBo8x0gbgg9-I.roa
File: pxTevSuEZHXkShBBo8x0gbgg9-I.roa (raw, json)
Hash identifier: KfMlTeka238ecpcMXa+zygFzS5ASqgA76wSSteDK6dY=
Subject key identifier: A7:14:DE:BD:2B:84:64:75:E4:4A:10:41:A3:CC:74:81:B8:20:F7:E2
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 0B2B7C6E
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/pxTevSuEZHXkShBBo8x0gbgg9-I.roa
Signing time: Sat 01 Jan 2022 05:02:34 +0000
ROA not before: Sat 01 Jan 2022 05:02:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202735
IP address blocks: 195.146.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187399278 (0xb2b7c6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Jan 1 05:02:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a714debd2b846475e44a1041a3cc7481b820f7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:74:fe:21:d5:8a:13:b9:99:4c:36:25:5a:73:
ab:c1:18:d7:0a:fd:1a:a6:89:aa:85:97:34:81:e1:
49:6d:4e:2f:be:17:03:c3:8f:0c:bf:07:c9:1f:e1:
5a:2e:59:a2:49:75:8e:d0:ee:13:10:f8:49:35:58:
50:25:6f:b4:10:4e:5b:b1:b5:cd:6b:bc:65:bf:86:
13:ff:8a:d1:06:63:b1:18:8e:cd:73:57:08:f5:26:
07:24:48:47:43:f2:77:3a:e9:94:bd:b1:9b:10:d4:
4e:f9:f0:7c:e4:5e:a9:b3:43:f7:59:81:c9:99:51:
1a:d6:05:d4:00:0f:d3:54:44:aa:67:a1:b1:fc:f3:
fd:55:b8:cb:b4:4b:a7:7b:4d:47:bc:17:ed:13:da:
29:fc:75:55:ae:b6:8b:2c:a6:f6:f1:1f:a2:db:6d:
67:18:df:1f:0c:f5:35:f8:72:57:68:7d:ea:e7:74:
a1:80:56:e4:87:6e:30:a7:40:0c:61:31:94:d2:db:
76:47:9a:9f:03:44:d1:f6:f4:a0:d3:10:6e:22:59:
f6:1b:b8:5e:d3:15:f5:e7:6f:34:98:4a:a9:e6:94:
93:37:82:f7:a5:f7:9f:51:98:fe:f4:0a:58:76:89:
fa:08:b1:53:ae:fa:a1:5c:8a:24:03:21:cd:2d:91:
d0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:14:DE:BD:2B:84:64:75:E4:4A:10:41:A3:CC:74:81:B8:20:F7:E2
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/pxTevSuEZHXkShBBo8x0gbgg9-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.146.60.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:b3:4b:43:c4:d1:16:14:f6:f9:79:ed:40:6f:0d:a7:f0:f6:
17:ed:8f:1d:5b:82:e0:ce:9a:9c:36:22:86:41:86:be:36:08:
9a:db:54:6a:d7:fa:15:d1:f7:0f:5b:4d:16:a1:a8:51:cb:2e:
57:64:c6:7e:65:89:7d:83:68:28:30:c6:b5:f8:dd:51:c2:3c:
e6:15:b3:31:e0:8b:3d:30:1e:30:1d:98:9f:99:46:44:97:f7:
d0:31:86:64:54:bc:4b:e2:cc:a5:90:75:9c:df:d7:67:4c:98:
6e:f9:6d:95:90:1a:31:11:64:a8:1d:76:a2:cf:cf:c4:4d:2b:
09:34:a3:aa:d4:c7:60:d0:53:65:d0:be:f0:d3:2d:fc:20:f0:
7a:d4:2d:0c:88:fa:17:a4:bd:53:ca:bc:51:5e:8d:48:e4:2d:
66:8e:59:c0:7b:d1:09:69:af:bc:71:68:7f:2e:3d:55:89:db:
58:5f:d1:28:ab:8a:a5:45:8c:7d:c2:86:24:4c:8d:33:67:3b:
bc:62:5d:c9:3b:d0:18:a9:bb:21:0b:98:c6:fc:34:78:83:d0:
17:d1:34:be:85:49:42:ce:4d:b9:73:f1:d1:09:34:93:bb:3d:
2b:15:c6:62:1c:f5:b3:b2:53:f4:f0:fe:ad:d4:0d:98:c1:a5:
3d:79:4e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:46 2023 by rpki-client on console-ams.rpki-client.org