Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/83c141-6c08-4635-9306-f21de4ee10f2/1/_7MdrVb0h_1ev5dEZe_52zHwUps.roa
File: _7MdrVb0h_1ev5dEZe_52zHwUps.roa (raw, json)
Hash identifier: ZjAD11ObuMLOEMTi4+E+aY+9D2oNM0e7PZkMb3tU6nw=
Subject key identifier: FF:B3:1D:AD:56:F4:87:FD:5E:BF:97:44:65:EF:F9:DB:31:F0:52:9B
Certificate issuer: /CN=614e10c5584ca6ffac82574ba34cf22bc030e1b4
Certificate serial: 66F72E
Authority key identifier: 61:4E:10:C5:58:4C:A6:FF:AC:82:57:4B:A3:4C:F2:2B:C0:30:E1:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YU4QxVhMpv-sgldLo0zyK8Aw4bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/83c141-6c08-4635-9306-f21de4ee10f2/1/_7MdrVb0h_1ev5dEZe_52zHwUps.roa
Signing time: Sat 01 Jan 2022 01:54:10 +0000
ROA not before: Sat 01 Jan 2022 01:54:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 146.19.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6747950 (0x66f72e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614e10c5584ca6ffac82574ba34cf22bc030e1b4
Validity
Not Before: Jan 1 01:54:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ffb31dad56f487fd5ebf974465eff9db31f0529b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ef:71:11:ac:45:ad:0c:7d:a6:f6:cd:7b:e8:
cd:15:32:c5:9c:7a:5c:16:8a:87:20:f3:6b:ab:eb:
ca:08:a6:1e:7e:5f:ae:e6:ec:50:52:cd:80:0d:4c:
cf:ae:88:a6:a7:a5:44:51:e4:0a:bd:52:80:ef:50:
d9:fc:a8:63:cc:ce:8f:fa:e9:ee:21:06:7d:2b:9e:
57:90:5e:28:a0:5b:7c:7f:85:fd:4e:93:40:46:42:
d7:4a:5a:12:cc:28:50:20:98:7a:e5:5e:c8:42:a5:
4a:4f:cd:6c:8b:ec:4a:e6:07:ba:d6:a3:9f:ff:90:
34:48:63:92:a4:ee:d3:de:f8:78:0b:b7:83:b8:64:
32:58:7e:87:32:70:f0:49:18:a5:3a:83:83:45:d0:
76:7d:ca:e3:3e:1c:3f:fc:b0:44:20:cf:b7:16:29:
51:49:0b:81:ac:a6:7a:4e:c1:ab:da:54:83:af:21:
11:60:f9:d5:51:2d:d5:6e:c2:9f:d6:c9:be:5c:a2:
73:fe:c2:22:d9:d5:5d:3a:b5:dd:bf:2b:ed:56:97:
de:c5:76:e6:49:fa:81:89:e0:c1:b0:bc:38:2e:41:
57:29:a4:bd:05:e4:43:51:39:1f:bd:2a:6d:1f:91:
48:90:12:b8:4b:d8:cb:c8:0b:12:60:b1:73:c7:d3:
ff:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B3:1D:AD:56:F4:87:FD:5E:BF:97:44:65:EF:F9:DB:31:F0:52:9B
X509v3 Authority Key Identifier:
keyid:61:4E:10:C5:58:4C:A6:FF:AC:82:57:4B:A3:4C:F2:2B:C0:30:E1:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU4QxVhMpv-sgldLo0zyK8Aw4bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/83c141-6c08-4635-9306-f21de4ee10f2/1/_7MdrVb0h_1ev5dEZe_52zHwUps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/83c141-6c08-4635-9306-f21de4ee10f2/1/YU4QxVhMpv-sgldLo0zyK8Aw4bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.154.0/24
Signature Algorithm: sha256WithRSAEncryption
32:6a:88:52:0d:f4:f6:e4:cf:da:4c:b0:a8:79:3d:63:36:fd:
07:f0:46:27:19:72:cf:6c:d6:a1:3f:d3:17:9f:c3:04:e5:7e:
28:8d:46:d7:19:57:db:c5:dc:09:c0:10:6a:5d:40:b7:fe:d0:
31:56:80:a8:50:d5:7e:98:ca:9f:4d:e2:46:60:cd:7a:24:af:
62:4c:60:2f:f9:56:bd:88:c4:32:db:db:ef:bd:0c:09:d4:c2:
bb:ae:3d:40:47:58:c7:dc:49:5c:4e:28:85:04:f7:90:82:a9:
ba:6d:19:6e:55:97:7d:73:74:b8:00:82:e1:70:7f:fd:94:7b:
8e:c9:76:0d:e1:37:00:6d:63:47:f1:55:f5:27:5d:bc:53:bb:
ec:ff:7a:72:e5:14:a5:16:c6:85:42:95:62:5e:13:4e:9f:8b:
fd:ab:07:c8:f8:e1:d2:56:d2:58:75:b7:e3:aa:1f:b2:9f:42:
4f:f6:5b:99:a1:22:9e:7c:cf:7d:9c:8e:c5:9e:18:f2:50:29:
1e:b2:ce:ab:ff:48:6e:4d:4f:68:e0:8a:55:20:7a:e5:e8:b7:
6c:2a:b2:e4:ea:de:8f:2e:d5:5a:9a:6a:4e:e3:6a:17:c4:51:
87:cd:01:0a:21:fd:fb:b0:9e:53:a2:4b:da:17:6a:1b:de:58:
c1:29:bc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org