Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c62a44-f8ff-4e85-a2eb-161e0cb99b80/1/BkHcyI2Y7rgk4VwIeknQfS71ePs.roa
File: BkHcyI2Y7rgk4VwIeknQfS71ePs.roa (raw, json)
Hash identifier: Prx4c0D18lPHtxVpoIJAClxx3E9a238VdL10ADy9BSM=
Subject key identifier: 06:41:DC:C8:8D:98:EE:B8:24:E1:5C:08:7A:49:D0:7D:2E:F5:78:FB
Certificate issuer: /CN=e970c77c3ce04e77349a6411cb73cf51e4efd0f2
Certificate serial: 0101970C
Authority key identifier: E9:70:C7:7C:3C:E0:4E:77:34:9A:64:11:CB:73:CF:51:E4:EF:D0:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XDHfDzgTnc0mmQRy3PPUeTv0PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/c62a44-f8ff-4e85-a2eb-161e0cb99b80/1/BkHcyI2Y7rgk4VwIeknQfS71ePs.roa
Signing time: Mon 07 Mar 2022 17:31:10 +0000
ROA not before: Mon 07 Mar 2022 17:31:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 146.19.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16881420 (0x101970c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e970c77c3ce04e77349a6411cb73cf51e4efd0f2
Validity
Not Before: Mar 7 17:31:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0641dcc88d98eeb824e15c087a49d07d2ef578fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8e:ff:62:cd:18:35:3f:95:fb:7b:07:cc:8c:
de:26:05:cb:95:fd:53:08:db:84:fd:fe:ae:7d:ba:
76:d8:af:85:13:c1:7f:b8:e2:b3:8f:a2:ee:2e:f7:
d3:bf:db:97:5b:e7:a9:e2:91:e5:83:b4:9e:ec:32:
1b:46:ce:8d:75:ca:1c:2c:d6:7d:82:3d:dc:56:5d:
5b:99:00:52:25:56:d7:f0:0f:35:c9:fa:98:99:92:
40:21:17:95:1a:7d:06:44:86:ec:8e:a5:5c:38:b3:
da:89:a3:29:e3:a9:ea:78:2f:1e:41:76:1b:29:8b:
66:f9:cf:f5:fc:49:26:1c:a6:4e:41:07:38:fc:01:
cb:60:9b:86:28:3f:8e:0a:1d:f2:0a:9e:2b:50:fc:
08:ed:13:5a:55:aa:6e:1c:76:13:56:e7:93:92:c9:
c1:6d:03:7e:13:f6:28:2f:81:60:a0:84:fa:8f:09:
27:70:b6:71:b3:99:a5:e3:13:1f:ad:5c:26:12:c9:
71:41:6f:9b:94:6c:52:72:94:1c:26:c9:cf:34:06:
bf:af:d3:05:a2:dc:33:81:d7:00:4d:30:c5:b2:c6:
1c:d3:48:05:33:63:2d:d2:23:e3:f3:9d:b9:8b:dd:
49:6c:cf:55:7e:8e:b8:53:db:d7:d1:07:5e:89:6d:
db:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:41:DC:C8:8D:98:EE:B8:24:E1:5C:08:7A:49:D0:7D:2E:F5:78:FB
X509v3 Authority Key Identifier:
keyid:E9:70:C7:7C:3C:E0:4E:77:34:9A:64:11:CB:73:CF:51:E4:EF:D0:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XDHfDzgTnc0mmQRy3PPUeTv0PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c62a44-f8ff-4e85-a2eb-161e0cb99b80/1/BkHcyI2Y7rgk4VwIeknQfS71ePs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c62a44-f8ff-4e85-a2eb-161e0cb99b80/1/6XDHfDzgTnc0mmQRy3PPUeTv0PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.119.0/24
Signature Algorithm: sha256WithRSAEncryption
20:d9:f3:05:b4:7a:00:4b:69:60:68:b8:fc:1b:85:6b:bb:2a:
0a:92:92:df:65:60:e0:61:f7:c5:0d:d7:f6:83:7a:ad:9e:8d:
01:bf:3c:29:bb:8f:03:8c:83:ce:e9:d1:9a:0d:e5:4d:dc:9c:
9e:90:31:ca:d9:7c:22:c9:18:b5:69:78:5a:f1:79:ad:ba:1c:
c4:a0:59:1e:ba:33:8b:1a:96:10:28:23:df:14:d0:99:2e:da:
5b:0e:86:01:4e:61:1f:4e:1a:29:2f:3d:b3:1d:cf:42:07:c2:
7a:45:79:ea:83:2e:ef:8c:ca:07:6b:7a:40:6c:49:ae:9a:05:
60:ae:b0:b0:ee:e9:bd:1b:1a:4a:86:fc:32:43:09:c3:48:d9:
ef:98:31:f0:1d:8d:e8:85:85:87:49:29:8e:28:62:18:dc:46:
42:63:6f:df:37:53:e7:53:b3:09:eb:61:ac:53:13:b3:a0:d4:
0b:75:cf:a6:b4:f9:6b:9c:9d:6c:37:63:fd:fe:14:67:5d:3a:
d7:69:76:28:c4:ca:ea:16:dd:0e:8b:f1:00:6f:c8:67:82:17:
bd:cb:0f:fe:96:70:37:03:0a:2e:da:ef:47:c9:d5:cd:98:6b:
c5:3a:07:d2:f8:fb:9b:b8:0a:a3:64:15:4e:79:0c:83:b4:14:
61:0c:f6:5b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAQGXDDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
OTcwYzc3YzNjZTA0ZTc3MzQ5YTY0MTFjYjczY2Y1MWU0ZWZkMGYyMB4XDTIyMDMw
NzE3MzExMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDY0MWRjYzg4ZDk4
ZWViODI0ZTE1YzA4N2E0OWQwN2QyZWY1NzhmYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI+O/2LNGDU/lft7B8yM3iYFy5X9UwjbhP3+rn26dtivhRPB
f7jis4+i7i7307/bl1vnqeKR5YO0nuwyG0bOjXXKHCzWfYI93FZdW5kAUiVW1/AP
Ncn6mJmSQCEXlRp9BkSG7I6lXDiz2omjKeOp6ngvHkF2GymLZvnP9fxJJhymTkEH
OPwBy2Cbhig/jgod8gqeK1D8CO0TWlWqbhx2E1bnk5LJwW0DfhP2KC+BYKCE+o8J
J3C2cbOZpeMTH61cJhLJcUFvm5RsUnKUHCbJzzQGv6/TBaLcM4HXAE0wxbLGHNNI
BTNjLdIj4/OduYvdSWzPVX6OuFPb19EHXolt28UCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQGQdzIjZjuuCThXAh6SdB9LvV4+zAfBgNVHSMEGDAWgBTpcMd8POBOdzSa
ZBHLc89R5O/Q8jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzZYREhmRHpnVG5jMG1tUVJ5M1BQVWVUdjBQSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDgvYzYyYTQ0LWY4ZmYtNGU4NS1hMmViLTE2MWUwY2I5OWI4MC8x
L0JrSGN5STJZN3JnazRWd0lla25RZlM3MWVQcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgv
YzYyYTQ0LWY4ZmYtNGU4NS1hMmViLTE2MWUwY2I5OWI4MC8xLzZYREhmRHpnVG5j
MG1tUVJ5M1BQVWVUdjBQSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJITdzANBgkqhkiG9w0BAQsFAAOC
AQEAINnzBbR6AEtpYGi4/BuFa7sqCpKS32Vg4GH3xQ3X9oN6rZ6NAb88KbuPA4yD
zunRmg3lTdycnpAxytl8IskYtWl4WvF5rbocxKBZHrozixqWECgj3xTQmS7aWw6G
AU5hH04aKS89sx3PQgfCekV56oMu74zKB2t6QGxJrpoFYK6wsO7pvRsaSob8MkMJ
w0jZ75gx8B2N6IWFh0kpjihiGNxGQmNv3zdT51OzCethrFMTs6DUC3XPprT5a5yd
bDdj/f4UZ10612l2KMTK6hbdDovxAG/IZ4IXvcsP/pZwNwMKLtrvR8nVzZhrxToH
0vj7m7gKo2QVTnkMg7QUYQz2Ww==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:12 2023 by rpki-client on console-ams.rpki-client.org