Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c62a44-f8ff-4e85-a2eb-161e0cb99b80/1/Ap6aUNn4ifjRWHDU97dCS05cFxU.roa
File: Ap6aUNn4ifjRWHDU97dCS05cFxU.roa (raw, json)
Hash identifier: ccqA8f0ImDNqP5cxvLVr2sc1C168P8eLMksE9FW6XV4=
Subject key identifier: 02:9E:9A:50:D9:F8:89:F8:D1:58:70:D4:F7:B7:42:4B:4E:5C:17:15
Certificate issuer: /CN=e970c77c3ce04e77349a6411cb73cf51e4efd0f2
Certificate serial: 6BBE7D
Authority key identifier: E9:70:C7:7C:3C:E0:4E:77:34:9A:64:11:CB:73:CF:51:E4:EF:D0:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XDHfDzgTnc0mmQRy3PPUeTv0PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/c62a44-f8ff-4e85-a2eb-161e0cb99b80/1/Ap6aUNn4ifjRWHDU97dCS05cFxU.roa
Signing time: Sat 01 Jan 2022 03:55:07 +0000
ROA not before: Sat 01 Jan 2022 03:55:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 146.19.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7061117 (0x6bbe7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e970c77c3ce04e77349a6411cb73cf51e4efd0f2
Validity
Not Before: Jan 1 03:55:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=029e9a50d9f889f8d15870d4f7b7424b4e5c1715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d7:be:77:7e:5f:28:32:4c:81:0d:bb:e4:13:
ba:4b:50:37:0a:10:40:56:da:7d:2b:91:40:9a:91:
17:2b:56:94:73:76:1a:75:83:6e:af:dd:0e:20:b1:
a6:d2:ea:17:81:1f:6b:e9:78:ba:fe:1d:24:d5:69:
9a:6e:23:8e:b6:48:aa:71:db:73:56:97:32:30:4b:
90:ed:32:35:51:20:fc:17:82:c1:33:7a:e8:aa:f7:
97:a8:f5:a5:0f:06:07:72:c2:ca:de:8d:0f:02:54:
b0:93:ee:0c:ec:7a:95:3a:3d:4e:23:91:f6:a3:07:
f8:84:2d:b5:5e:74:7c:5e:a8:72:4d:bb:07:d1:c0:
6e:06:8e:a5:45:f9:15:6b:dc:2b:6f:13:34:4c:9f:
cb:40:b5:d8:68:9d:41:76:e7:9b:02:20:8a:58:84:
28:42:10:d3:58:96:f6:d5:62:5f:a8:58:4b:d8:6d:
7a:e9:49:65:9f:c8:c8:b0:21:f7:c2:d9:9f:60:fd:
8c:24:94:50:18:c9:e3:53:cf:7e:54:73:a4:6e:cc:
3f:02:22:b4:16:67:98:26:e2:5e:86:26:d6:fd:6f:
7f:74:7a:da:fb:2f:3c:7b:2b:48:13:ad:dd:b8:23:
2e:af:bb:18:24:b1:cd:4e:7e:33:fc:fc:f3:43:e7:
cc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:9E:9A:50:D9:F8:89:F8:D1:58:70:D4:F7:B7:42:4B:4E:5C:17:15
X509v3 Authority Key Identifier:
keyid:E9:70:C7:7C:3C:E0:4E:77:34:9A:64:11:CB:73:CF:51:E4:EF:D0:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XDHfDzgTnc0mmQRy3PPUeTv0PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c62a44-f8ff-4e85-a2eb-161e0cb99b80/1/Ap6aUNn4ifjRWHDU97dCS05cFxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c62a44-f8ff-4e85-a2eb-161e0cb99b80/1/6XDHfDzgTnc0mmQRy3PPUeTv0PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.119.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:76:a4:6f:25:9a:c4:c7:c9:d9:ba:f7:76:a4:7d:ef:75:b4:
41:4a:a5:47:51:07:1e:b9:54:fa:85:b1:8c:f0:e3:54:f3:4a:
a8:f9:e1:0a:2d:42:8e:94:2d:bf:b7:e8:15:c3:d1:26:d3:ef:
9c:0d:aa:ca:45:37:39:c7:85:d9:03:aa:e2:4e:42:14:c3:d3:
69:4f:53:ce:a4:15:49:61:0d:de:dc:6c:2f:b9:cd:72:57:6f:
2e:22:2b:82:91:9b:bd:f9:f2:fe:27:46:a6:49:1c:9d:4d:6f:
a8:21:94:e7:a1:c6:0a:03:5d:f5:d3:84:9e:d6:7a:71:d8:8a:
d3:19:9a:49:60:ce:27:7f:55:87:5e:98:11:77:4c:ed:e1:66:
33:91:23:1a:c2:10:51:cb:f2:11:03:9c:b0:cd:60:ef:4c:d1:
fe:ec:20:61:c2:fc:c2:4d:1f:df:3c:c0:1b:db:dd:a6:b3:f9:
65:66:ec:a1:39:39:f2:90:8d:53:a8:79:e6:5e:22:a1:53:a7:
4c:90:73:99:f1:ab:dc:76:60:e9:63:00:9c:2f:af:1e:dd:e7:
72:f1:52:39:39:a8:bf:c5:f8:aa:47:96:91:ba:4e:4f:b5:1f:
96:50:23:69:41:51:b5:72:09:91:69:39:a1:bd:58:ca:57:8c:
c5:a7:db:14
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDa759MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU5
NzBjNzdjM2NlMDRlNzczNDlhNjQxMWNiNzNjZjUxZTRlZmQwZjIwHhcNMjIwMTAx
MDM1NTA3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygwMjllOWE1MGQ5Zjg4
OWY4ZDE1ODcwZDRmN2I3NDI0YjRlNWMxNzE1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmNe+d35fKDJMgQ275BO6S1A3ChBAVtp9K5FAmpEXK1aUc3Ya
dYNur90OILGm0uoXgR9r6Xi6/h0k1WmabiOOtkiqcdtzVpcyMEuQ7TI1USD8F4LB
M3roqveXqPWlDwYHcsLK3o0PAlSwk+4M7HqVOj1OI5H2owf4hC21XnR8XqhyTbsH
0cBuBo6lRfkVa9wrbxM0TJ/LQLXYaJ1BduebAiCKWIQoQhDTWJb21WJfqFhL2G16
6Ulln8jIsCH3wtmfYP2MJJRQGMnjU89+VHOkbsw/AiK0FmeYJuJehibW/W9/dHra
+y88eytIE63duCMur7sYJLHNTn4z/PzzQ+fMSwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFAKemlDZ+In40Vhw1Pe3QktOXBcVMB8GA1UdIwQYMBaAFOlwx3w84E53NJpk
Ectzz1Hk79DyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
NlhESGZEemdUbmMwbW1RUnkzUFBVZVR2MFBJLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC80OC9jNjJhNDQtZjhmZi00ZTg1LWEyZWItMTYxZTBjYjk5YjgwLzEv
QXA2YVVObjRpZmpSV0hEVTk3ZENTMDVjRnhVLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9j
NjJhNDQtZjhmZi00ZTg1LWEyZWItMTYxZTBjYjk5YjgwLzEvNlhESGZEemdUbmMw
bW1RUnkzUFBVZVR2MFBJLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhN3MA0GCSqGSIb3DQEBCwUAA4IB
AQBrdqRvJZrEx8nZuvd2pH3vdbRBSqVHUQceuVT6hbGM8ONU80qo+eEKLUKOlC2/
t+gVw9Em0++cDarKRTc5x4XZA6riTkIUw9NpT1POpBVJYQ3e3Gwvuc1yV28uIiuC
kZu9+fL+J0amSRydTW+oIZTnocYKA13104Se1npx2IrTGZpJYM4nf1WHXpgRd0zt
4WYzkSMawhBRy/IRA5ywzWDvTNH+7CBhwvzCTR/fPMAb292ms/llZuyhOTnykI1T
qHnmXiKhU6dMkHOZ8avcdmDpYwCcL68e3edy8VI5Oai/xfiqR5aRuk5PtR+WUCNp
QVG1cgmRaTmhvVjKV4zFp9sU
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:12 2023 by rpki-client on console-ams.rpki-client.org